$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json) Hash identifier: UFW8cs04BX/sDw3VTozznp93nVR3y9KkQC+eaR5jwUc= Subject key identifier: 26:BB:2A:91:21:5D:DD:8D:E2:B4:9E:99:03:3F:0B:DE:B5:08:9A:66 Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Certificate serial: 1B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft Manifest number: 1AF6 Signing time: Mon 12 May 2025 16:16:15 +0000 Manifest this update: Mon 12 May 2025 16:16:15 +0000 Manifest next update: Mon 19 May 2025 16:16:15 +0000 Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: lCVKgaz2naj3zWgFAK59k7Vk/1yhS1wNa4g6K6KgGRE=) 2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: Jv1d6fF3qu1qMz0c/kGUVQ3xOsIZk2UWH2dC2+4vagE=) 3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: hMIakiTTivB+fRa4Rnc2jL//XFH58YMCoj5LWIbNoBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6946 (0x1b22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Validity Not Before: May 12 16:16:15 2025 GMT Not After : May 19 16:16:15 2025 GMT Subject: CN=68221ecf-587a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:98:36:ca:2a:61:fd:d2:24:af:8a:a0:07: 6c:dc:50:f5:ba:4e:08:b7:ec:d4:59:ff:9f:64:b6: f7:35:70:56:00:a1:61:85:33:c1:c6:22:84:75:d7: c7:0b:3d:96:9e:2d:84:f6:96:dd:58:2a:7a:3e:ca: d7:df:df:2b:49:b4:9a:94:8f:ce:66:2c:2f:0b:f8: 1f:10:0f:87:34:9d:c6:a5:14:bc:d9:6a:fc:26:59: 92:5f:f9:6c:7c:a4:7d:3b:49:92:83:75:8c:e7:d5: 49:45:72:d7:f4:c7:e0:a0:84:e0:ae:36:42:44:84: 09:05:b4:80:cc:3b:ed:54:da:51:aa:47:c3:0c:d7: 66:ab:5c:d9:aa:1f:d8:41:e5:8e:d4:d1:b5:f3:b4: c1:92:f6:e1:42:2f:09:5e:1d:ee:28:e3:af:3f:cb: 09:31:0a:f2:e7:29:a9:68:60:f9:6a:ef:8a:3e:8a: 56:72:ce:04:ef:c5:fd:41:cd:35:1f:f9:1a:b1:04: 21:db:45:48:35:22:d2:bb:b4:39:ad:c2:a9:23:63: 7e:0e:63:c1:3c:8e:03:08:78:d6:fd:09:0f:14:31: e6:2c:26:3d:f3:df:1e:25:80:4f:53:5f:10:f7:c8: e9:41:16:a3:91:31:1c:2f:f1:0d:cb:57:a2:1e:b1: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BB:2A:91:21:5D:DD:8D:E2:B4:9E:99:03:3F:0B:DE:B5:08:9A:66 X509v3 Authority Key Identifier: keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:04:dd:e1:66:19:6f:e0:eb:7a:a1:3f:db:31:a8:57:8a:42: 1d:a0:a2:1d:c2:2c:13:69:02:5f:18:9b:e7:e0:54:ec:8f:e6: 7b:aa:51:37:c0:4e:c0:51:14:43:73:4b:2d:b6:37:01:12:f6: e1:e4:35:37:82:81:03:c9:19:7c:8a:d1:34:99:37:29:4a:7b: 93:aa:c0:08:10:d3:ca:8a:f4:51:9e:b1:9d:41:22:84:2e:23: 44:bb:84:8f:b3:e8:69:32:92:88:ae:6b:f0:98:b0:0b:24:6d: c5:2a:ef:b6:3c:0d:ae:27:f0:9f:af:42:5e:bd:4b:30:c7:6f: 6a:90:bf:d7:03:63:9c:68:b8:87:10:2c:22:20:a6:54:6d:56: 0c:35:75:bf:06:02:20:46:1a:b4:da:a3:dd:69:c9:8f:c2:03: ff:48:4c:5a:b0:cd:f9:c7:1b:a7:de:93:38:06:e4:20:67:db: 19:0b:76:4a:7a:e0:67:a8:3f:b0:84:56:1c:ec:86:55:29:10: df:5c:82:96:72:24:37:c8:d6:0e:e6:b2:bc:42:89:eb:08:f6: 3b:c5:dc:5c:d5:5a:09:77:11:4a:33:1c:36:d1:41:3d:43:5b: b9:76:53:a0:ba:1d:ce:32:ec:e6:4e:e0:07:1f:4d:cc:02:5b: 52:db:28:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB QTNGQkVGNzAwHhcNMjUwNTEyMTYxNjE1WhcNMjUwNTE5MTYxNjE1WjAYMRYwFAYD VQQDEw02ODIyMWVjZi01ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH6YNsoqYf3SJK+KoAds3FD1uk4It+zUWf+fZLb3NXBWAKFhhTPBxiKEddfH Cz2Wni2E9pbdWCp6PsrX398rSbSalI/OZiwvC/gfEA+HNJ3GpRS82Wr8JlmSX/ls fKR9O0mSg3WM59VJRXLX9MfgoITgrjZCRIQJBbSAzDvtVNpRqkfDDNdmq1zZqh/Y QeWO1NG187TBkvbhQi8JXh3uKOOvP8sJMQry5ympaGD5au+KPopWcs4E78X9Qc01 H/kasQQh20VINSLSu7Q5rcKpI2N+DmPBPI4DCHjW/QkPFDHmLCY9898eJYBPU18Q 98jpQRajkTEcL/ENy1eiHrEEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa7KpEh Xd2N4rSemQM/C961CJpmMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0NCMy8xREI3OTgzQzI1OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05 S1Y5WGlFY3FhaENxUDc3M0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtBN3hZhlv4Ot6oT/bMahXikIdoKIdwiwTaQJfGJvn4FTsj+Z7qlE3 wE7AURRDc0sttjcBEvbh5DU3goEDyRl8itE0mTcpSnuTqsAIENPKivRRnrGdQSKE LiNEu4SPs+hpMpKIrmvwmLALJG3FKu+2PA2uJ/Cfr0JevUswx29qkL/XA2OcaLiH ECwiIKZUbVYMNXW/BgIgRhq02qPdacmPwgP/SExasM35xxun3pM4BuQgZ9sZC3ZK euBnqD+whFYc7IZVKRDfXIKWciQ3yNYO5rK8QonrCPY7xdxc1VoJdxFKMxw20UE9 Q1u5dlOguh3OMuzmTuAHH03MAltS2yhb -----END CERTIFICATE-----Generated at Tue May 13 08:32:40 2025 by rpki-client