$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: Nww+kufG1wbg24birzapCupXzxGPKCyPF/OKCHXmnps= Subject key identifier: 4B:DE:6C:55:2D:0D:8B:07:48:0D:01:BE:52:46:C7:61:31:DC:F2:B0 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3480 Signing time: Mon 12 May 2025 14:55:28 +0000 Manifest this update: Mon 12 May 2025 14:55:27 +0000 Manifest next update: Mon 19 May 2025 14:55:27 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: FVvygtuSQy4FqshqG4T/9fWOzs6U7U+0hCeKbN5hqDs=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: May 12 14:55:27 2025 GMT Not After : May 19 14:55:27 2025 GMT Subject: CN=68220be0-1dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:e9:55:1d:bc:02:0a:84:a8:c4:a4:bb:0a: e1:99:d3:5d:60:3b:2f:b1:1e:91:54:b6:03:7e:d4: 5b:35:e7:fb:b2:eb:90:38:8b:29:59:92:5e:b4:25: 34:6d:90:49:bf:97:16:65:77:bc:c7:d3:6f:7b:c4: fe:6e:7f:36:68:8f:2f:2f:ce:fe:d7:9c:b9:9d:f4: bf:2a:aa:32:6b:01:4e:90:64:47:eb:53:e5:dc:52: 52:4e:19:1b:67:ef:25:a9:20:8e:c9:90:11:a6:f0: 16:9a:7d:0c:d6:d1:60:5e:b3:63:88:81:48:18:0e: 6c:a2:cf:86:cf:dd:1d:4c:29:40:45:5c:13:ff:45: a1:29:ab:c7:d4:64:44:e2:22:07:a2:6c:28:84:7f: 1e:66:19:29:3f:4c:04:21:3c:fc:c7:9b:58:d1:4a: 04:d0:3d:26:a1:ef:e6:41:9e:4f:8e:1b:df:3d:33: b1:b8:09:63:84:ec:2b:2b:f1:c3:b9:05:cc:5c:ef: 1e:ee:f0:0d:00:6d:f8:6c:0e:1e:53:87:cf:80:f4: 3b:ae:b2:80:f9:4a:6a:6f:04:54:bf:fc:16:02:f1: 9c:12:75:7c:e9:de:5a:89:9f:61:cb:4a:72:65:0f: 2a:76:17:a4:bf:07:16:4f:6d:1a:c6:12:27:cc:11: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DE:6C:55:2D:0D:8B:07:48:0D:01:BE:52:46:C7:61:31:DC:F2:B0 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:a5:35:d7:55:a6:d3:48:93:1c:59:a0:1c:b4:5f:4a:63: 87:8e:0f:c3:41:b9:d4:31:ef:f5:32:60:c4:ef:49:3c:2c:30: d2:9b:0e:9c:48:77:09:04:90:d1:99:e1:f4:44:86:e3:e5:d6: 3c:6e:55:dd:e1:76:bf:57:55:eb:1e:1b:80:f0:eb:5b:25:c2: 5e:93:31:89:8c:c2:00:df:91:93:b8:2b:60:39:bf:7f:bc:4c: 87:6a:62:ec:00:81:3f:f9:83:6d:c1:d6:72:aa:22:d1:5d:a5: 37:41:dd:6d:e8:45:54:37:64:b0:c5:2b:cc:52:2f:41:34:a0: 42:c8:3c:da:d6:2f:1d:6c:54:c9:c7:39:b8:a8:7c:14:bb:65: 6f:66:64:33:ed:ce:47:11:1b:ec:ca:2f:af:ca:f5:03:e6:ce: 66:9d:ed:ac:66:6c:a9:e6:58:91:68:2e:c4:3b:1b:d3:be:84: 60:52:09:9d:9f:12:60:39:f9:6e:18:12:12:e4:17:7c:a6:21: ed:ed:fb:6e:9f:d2:b0:4c:cb:df:6d:55:3f:86:e7:b7:bd:96: 15:8b:a8:bd:0f:f3:09:b0:5c:be:c0:53:c8:38:2b:8b:12:10: 95:f7:4b:5e:2b:d3:75:68:64:2f:94:8e:03:39:4d:36:54:25: 12:e5:53:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUwNTEyMTQ1NTI3WhcNMjUwNTE5MTQ1NTI3WjAYMRYwFAYD VQQDEw02ODIyMGJlMC0xZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpfpVR28AgqEqMSkuwrhmdNdYDsvsR6RVLYDftRbNef7suuQOIspWZJetCU0 bZBJv5cWZXe8x9Nve8T+bn82aI8vL87+15y5nfS/KqoyawFOkGRH61Pl3FJSThkb Z+8lqSCOyZARpvAWmn0M1tFgXrNjiIFIGA5sos+Gz90dTClARVwT/0WhKavH1GRE 4iIHomwohH8eZhkpP0wEITz8x5tY0UoE0D0moe/mQZ5PjhvfPTOxuAljhOwrK/HD uQXMXO8e7vANAG34bA4eU4fPgPQ7rrKA+UpqbwRUv/wWAvGcEnV86d5aiZ9hy0py ZQ8qdhekvwcWT20axhInzBEWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvebFUt DYsHSA0BvlJGx2Ex3PKwMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBevKU111Wm00iTHFmgHLRfSmOHjg/DQbnUMe/1MmDE70k8LDDSmw6c SHcJBJDRmeH0RIbj5dY8blXd4Xa/V1XrHhuA8OtbJcJekzGJjMIA35GTuCtgOb9/ vEyHamLsAIE/+YNtwdZyqiLRXaU3Qd1t6EVUN2SwxSvMUi9BNKBCyDza1i8dbFTJ xzm4qHwUu2VvZmQz7c5HERvsyi+vyvUD5s5mne2sZmyp5liRaC7EOxvTvoRgUgmd nxJgOfluGBIS5Bd8piHt7ftun9KwTMvfbVU/hue3vZYVi6i9D/MJsFy+wFPIOCuL EhCV90teK9N1aGQvlI4DOU02VCUS5VMM -----END CERTIFICATE-----Generated at Wed May 14 04:52:08 2025 by rpki-client