$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft File: YhuBwQnlqnjYKfMKV9o1MwglT2k.mft (raw, json) Hash identifier: C6Y+1v9F3RG54tcHet+AjKn1QGk6UfxKwRDs7r5WmsU= Subject key identifier: E9:0B:67:8A:88:3F:8C:26:72:78:A1:B8:68:4B:6E:58:8F:B5:7D:CF Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft Manifest number: 042C Signing time: Tue 13 May 2025 00:09:40 +0000 Manifest this update: Tue 13 May 2025 00:09:39 +0000 Manifest next update: Tue 20 May 2025 00:09:39 +0000 Files and hashes: 1: YhuBwQnlqnjYKfMKV9o1MwglT2k.crl (hash: pSoBFhefwofW1lrlnPg64HW8oHlMm2aNhVtxREe64Wo=) 2: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (hash: bAaCSc9TYM7K2UkBDoNWyjDrI2lpV2TgVDZgy3NjGCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Validity Not Before: May 13 00:09:39 2025 GMT Not After : May 20 00:09:39 2025 GMT Subject: CN=68228dc4-adec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:08:d0:51:ca:f6:95:6f:e7:62:a3:3c:0f: 1c:6d:74:56:7d:56:ab:b8:ff:21:bc:fc:94:72:ee: e8:2a:e4:f3:89:2d:b9:c3:6c:c5:79:d2:cc:df:bb: e8:65:ff:30:e4:e3:eb:c6:32:aa:dd:ad:6f:02:62: 71:e4:dc:2e:59:d0:fe:82:a4:25:90:50:59:60:34: c9:e9:f7:f4:32:dc:84:16:01:c9:a0:30:67:79:44: 2f:a0:4b:fa:14:86:34:79:be:03:de:c9:6d:a7:53: 75:0f:f7:c4:80:19:8c:8a:93:b9:57:52:70:37:15: 3e:08:e5:66:5b:5f:bf:cb:83:37:e5:c5:83:23:20: 4e:d9:b9:cc:1a:99:45:e4:f3:f6:62:39:a8:74:29: 6d:01:72:4b:47:bf:71:90:ed:b4:12:f3:3d:10:95: cc:9d:f3:1d:97:de:04:a9:d3:77:0a:a0:14:8e:c6: 74:2b:b9:ce:5f:96:b8:57:3e:4a:4e:27:58:29:08: 2b:19:63:0d:65:c0:d3:ff:f3:49:22:9e:1e:f3:ce: 3b:56:16:31:f3:04:90:74:d9:c7:fb:56:20:9f:71: 34:e6:df:68:5d:d8:c0:ce:fe:43:4e:73:bc:22:5d: 9f:d3:08:66:94:c1:ae:b8:51:b9:2c:7b:90:e8:19: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:67:8A:88:3F:8C:26:72:78:A1:B8:68:4B:6E:58:8F:B5:7D:CF X509v3 Authority Key Identifier: keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f1:17:89:29:af:99:b2:8b:94:fe:09:ea:25:c8:20:41:5c: 5f:11:39:d1:f6:85:84:2c:b3:62:02:ba:00:92:65:73:e7:a0: aa:67:97:da:d6:9d:4e:d8:8d:a0:ac:96:f0:3b:af:5c:4c:21: 19:e3:b1:68:65:a2:f6:8b:50:a4:45:f2:7f:be:0d:9b:e3:94: 79:5b:76:f5:c0:0e:25:7c:20:8f:18:5e:01:fe:64:60:e7:84: bc:64:0e:11:13:fe:5b:e7:65:fe:b1:7a:fa:47:d7:bb:27:eb: c0:6c:90:0e:dc:84:6b:05:15:fd:9b:73:13:73:11:10:54:e5: 6d:38:60:54:09:5d:7c:0c:8d:a1:24:e7:59:5b:3b:60:a9:04: 62:66:50:4d:c0:64:ed:77:ae:00:11:df:2f:cc:c4:bd:c4:71: 16:0e:14:50:25:fa:ed:b4:e4:92:62:19:6c:63:cd:73:bd:96: 51:44:07:8c:e4:db:5c:c5:59:64:87:cb:4a:86:ad:4a:4b:c9: ca:10:36:a7:b3:d7:91:36:c4:4d:2e:82:3c:03:0c:e9:ac:45: 91:02:76:f4:da:9c:ca:fc:45:20:a9:ad:3b:f6:48:35:95:61: 0f:ae:3b:52:6f:ca:29:ae:0f:6a:60:b3:5c:76:9f:c6:43:0b: 3f:a2:34:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz MDgyNTRGNjkwHhcNMjUwNTEzMDAwOTM5WhcNMjUwNTIwMDAwOTM5WjAYMRYwFAYD VQQDEw02ODIyOGRjNC1hZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCcI0FHK9pVv52KjPA8cbXRWfVaruP8hvPyUcu7oKuTziS25w2zFedLM37vo Zf8w5OPrxjKq3a1vAmJx5NwuWdD+gqQlkFBZYDTJ6ff0MtyEFgHJoDBneUQvoEv6 FIY0eb4D3sltp1N1D/fEgBmMipO5V1JwNxU+COVmW1+/y4M35cWDIyBO2bnMGplF 5PP2YjmodCltAXJLR79xkO20EvM9EJXMnfMdl94EqdN3CqAUjsZ0K7nOX5a4Vz5K TidYKQgrGWMNZcDT//NJIp4e8847VhYx8wSQdNnH+1Ygn3E05t9oXdjAzv5DTnO8 Il2f0whmlMGuuFG5LHuQ6BnN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkLZ4qI P4wmcnihuGhLbliPtX3PMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEQ2Mi9CQ0I0MEE1ODVGQ0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFu allLZk1LVjlvMU13Z2xUMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT8ReJKa+ZsouU/gnqJcggQVxfETnR9oWELLNiAroAkmVz56CqZ5fa 1p1O2I2grJbwO69cTCEZ47FoZaL2i1CkRfJ/vg2b45R5W3b1wA4lfCCPGF4B/mRg 54S8ZA4RE/5b52X+sXr6R9e7J+vAbJAO3IRrBRX9m3MTcxEQVOVtOGBUCV18DI2h JOdZWztgqQRiZlBNwGTtd64AEd8vzMS9xHEWDhRQJfrttOSSYhlsY81zvZZRRAeM 5NtcxVlkh8tKhq1KS8nKEDans9eRNsRNLoI8AwzprEWRAnb02pzK/EUgqa079kg1 lWEPrjtSb8oprg9qYLNcdp/GQws/ojSu -----END CERTIFICATE-----Generated at Tue May 13 22:55:10 2025 by rpki-client