$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: a6pzhYqmjPHDKmZxwuQG3F1FTxTYm6qPPkP56bFOU94= Subject key identifier: 38:DD:62:CD:6D:47:7B:32:57:0B:7C:42:C4:09:3A:42:25:F2:31:B8 Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 03FE Signing time: Thu 15 May 2025 00:29:36 +0000 Manifest this update: Thu 15 May 2025 00:29:36 +0000 Manifest next update: Thu 22 May 2025 00:29:36 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: UGlx/6Q33sZn2pktKk4/PIr2bmvjodclMf6bOiOTHy8=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: May 15 00:29:36 2025 GMT Not After : May 22 00:29:36 2025 GMT Subject: CN=68253570-1361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:b3:be:df:77:0e:cf:8a:da:9b:af:46:5b: 7f:ef:f9:25:da:ef:1b:42:e3:f0:86:76:24:1d:3c: bd:96:82:b7:33:bd:f0:fa:d8:66:d3:93:74:cc:aa: 81:3c:14:24:5b:71:3e:7f:77:42:1e:0c:4d:96:df: 8a:86:d9:fc:13:30:e4:3c:8c:ac:ec:99:e2:31:5e: d4:57:80:53:98:ec:4e:16:2d:bc:09:5f:11:bb:9f: 4b:c3:f9:69:fe:a7:99:e2:0a:f4:b3:51:c3:05:be: 3e:1c:31:12:88:5d:09:f0:78:dc:68:e3:c6:ad:ae: 78:63:fc:ca:f6:0a:79:0c:98:09:16:f6:0f:6f:90: 3f:55:b7:70:09:4e:95:c8:94:5f:d7:51:f3:64:63: 49:2f:04:7d:f1:b2:16:7c:8a:67:4d:7e:0f:69:e6: 73:31:b1:ca:1d:51:9b:71:f0:eb:e5:1e:73:8b:f7: 85:66:a4:97:c5:6e:aa:e5:a6:b6:c2:ee:01:a2:ba: ae:16:79:76:a1:30:3a:f8:4f:ef:fd:c1:00:46:29: 17:f9:03:8d:37:65:ba:79:e3:dc:e9:fb:f2:22:25: 52:f3:fe:0a:ab:9a:22:16:f2:e7:49:a9:1b:7d:54: 64:c7:30:dc:57:86:cf:00:43:c4:df:64:cc:63:b1: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DD:62:CD:6D:47:7B:32:57:0B:7C:42:C4:09:3A:42:25:F2:31:B8 X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5b:bc:a6:af:42:91:b9:4c:84:0b:31:c2:14:ec:12:11:23: 1f:26:3a:20:35:d2:7a:9e:2f:70:ee:68:7b:08:6f:de:27:2e: cc:75:d1:56:96:78:a5:e3:70:07:b8:6c:26:41:d9:5a:77:23: fe:d6:51:7d:dc:00:e4:ff:8c:f5:35:2e:b9:d4:01:59:53:cb: 24:99:0b:e0:79:81:7f:90:09:4e:c3:a5:db:18:7f:d2:53:f0: 01:92:f1:65:76:39:dd:5c:d6:ca:61:6a:85:ff:3d:9f:83:0a: 0a:ce:c9:91:61:4b:b9:f6:c8:69:ab:02:f0:95:6f:a5:af:49: 46:bb:85:45:6a:17:48:5f:13:4f:15:0e:62:ae:a7:9f:2b:36: 3f:10:9d:f4:27:87:51:10:d6:5d:76:26:1e:df:3e:b1:59:be: 2d:25:e0:a1:52:0e:88:95:32:71:28:8e:a1:7f:fe:41:52:39: e7:c0:fe:67:a0:0e:4f:1d:ff:99:b4:5b:e7:57:cc:17:3e:83: 7f:cc:b7:8c:87:d5:83:de:7e:29:ad:ef:fb:f4:d5:62:42:09: 5d:10:a2:cc:84:ca:c9:cc:a2:f9:16:e6:fb:38:32:5e:f6:9a: c5:02:87:3b:70:07:46:bd:6d:83:27:01:a9:1f:4a:ba:37:f5: 0e:25:9c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUwNTE1MDAyOTM2WhcNMjUwNTIyMDAyOTM2WjAYMRYwFAYD VQQDEw02ODI1MzU3MC0xMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiSzvt93Ds+K2puvRlt/7/kl2u8bQuPwhnYkHTy9loK3M73w+thm05N0zKqB PBQkW3E+f3dCHgxNlt+Khtn8EzDkPIys7JniMV7UV4BTmOxOFi28CV8Ru59Lw/lp /qeZ4gr0s1HDBb4+HDESiF0J8HjcaOPGra54Y/zK9gp5DJgJFvYPb5A/VbdwCU6V yJRf11HzZGNJLwR98bIWfIpnTX4PaeZzMbHKHVGbcfDr5R5zi/eFZqSXxW6q5aa2 wu4BorquFnl2oTA6+E/v/cEARikX+QONN2W6eePc6fvyIiVS8/4Kq5oiFvLnSakb fVRkxzDcV4bPAEPE32TMY7EP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjdYs1t R3syVwt8QsQJOkIl8jG4MB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuW7ymr0KRuUyECzHCFOwSESMfJjogNdJ6ni9w7mh7CG/eJy7MddFW lnil43AHuGwmQdladyP+1lF93ADk/4z1NS651AFZU8skmQvgeYF/kAlOw6XbGH/S U/ABkvFldjndXNbKYWqF/z2fgwoKzsmRYUu59shpqwLwlW+lr0lGu4VFahdIXxNP FQ5irqefKzY/EJ30J4dRENZddiYe3z6xWb4tJeChUg6IlTJxKI6hf/5BUjnnwP5n oA5PHf+ZtFvnV8wXPoN/zLeMh9WD3n4pre/79NViQgldEKLMhMrJzKL5Fub7ODJe 9prFAoc7cAdGvW2DJwGpH0q6N/UOJZxk -----END CERTIFICATE-----Generated at Fri May 16 18:55:27 2025 by rpki-client