$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json) Hash identifier: tuquxHwPwxuuKC/2/XciAvpFDL8yyIXYiA/sKS4z2Bs= Subject key identifier: 6A:A6:9B:BF:B9:40:E6:71:91:A6:3D:97:90:F5:83:E1:AA:07:B7:D6 Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft Manifest number: 0C78 Signing time: Mon 12 May 2025 19:05:07 +0000 Manifest this update: Mon 12 May 2025 19:05:06 +0000 Manifest next update: Mon 19 May 2025 19:05:06 +0000 Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: gnsNH/tPHLqYedZenmbbdaJfw7qiWAeL1g/I0+jEifc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Validity Not Before: May 12 19:05:06 2025 GMT Not After : May 19 19:05:06 2025 GMT Subject: CN=68224662-8413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:a4:17:80:73:8a:f8:f8:23:50:11:96:63: 6b:97:e2:cd:d3:2c:f4:6d:48:cb:ea:cd:33:5e:ce: c9:68:0c:82:00:c9:9e:ff:12:ce:5b:59:57:42:86: 94:1f:71:97:30:68:53:9d:9b:30:b0:6c:a2:98:81: 75:bd:3a:53:ee:57:04:94:6d:e1:75:93:a5:2c:bf: 58:73:29:5a:d2:c4:8c:5c:e8:ab:f6:01:31:26:fd: d6:77:64:a0:0e:8f:0c:38:cf:ba:7c:7d:90:ef:a8: 00:35:48:0e:8b:e0:3d:f4:38:92:34:08:a8:54:b5: 90:c3:25:41:b6:f3:61:de:a5:87:cb:51:41:c5:ab: ee:4b:fb:98:4d:d6:a6:78:da:87:14:88:48:bc:f2: c5:8c:88:19:4e:aa:93:95:c9:13:9c:eb:32:74:84: 62:1f:f1:3e:8c:e1:9f:e8:2e:49:e0:81:b8:af:08: 4f:70:fc:4a:c6:22:02:c0:82:e5:6f:c1:db:50:0b: 52:cd:0d:7b:ea:f6:6a:20:df:ef:1b:6e:fa:1b:a0: 3d:e2:e7:aa:ed:7d:9b:fa:0f:76:e0:6d:48:f9:e2: 50:1b:39:35:d6:d8:38:aa:63:5b:86:f1:e5:60:62: 60:36:2c:7e:7c:76:28:02:3b:1a:6b:e0:1b:1f:88: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A6:9B:BF:B9:40:E6:71:91:A6:3D:97:90:F5:83:E1:AA:07:B7:D6 X509v3 Authority Key Identifier: keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:73:8f:fa:8b:a6:50:8b:3c:85:51:c1:ec:5c:65:d1:48:c6: 7a:d8:00:f1:41:63:e7:ff:ca:62:a1:ae:db:5e:f6:92:89:fd: e9:50:eb:ad:70:27:be:b6:8d:8a:2e:1a:11:d0:a5:60:25:86: 49:c1:8a:c1:fa:e7:34:01:cb:53:35:6f:d0:82:e9:c5:3f:64: 79:0c:8b:69:fb:d3:34:0c:62:c8:92:15:ed:4e:03:77:c4:fd: a8:4e:c0:27:17:15:58:9e:2d:3f:db:40:32:b7:9b:47:79:f7: 74:38:fd:03:f2:3a:82:d5:43:7a:38:d5:1d:60:5f:30:c4:b2: 3b:25:bb:8c:37:c4:a4:92:7c:fb:9f:95:50:1b:3a:82:3b:95: ba:7d:9a:9c:33:86:e5:f9:ac:1d:02:d6:56:4d:57:8c:2a:42: 08:71:78:69:7a:96:69:2b:dd:2d:fa:58:5e:4b:f0:e7:2e:fd: a0:3c:4a:60:91:3b:40:94:b4:b7:8c:fa:5f:cd:43:17:0c:9e: 2f:b5:b7:1f:d8:6c:88:fc:5d:a4:52:5a:96:fe:3d:b7:59:0d: 8f:c8:0f:bf:bb:2a:67:1d:55:1b:aa:47:ea:3b:de:23:38:f4: f2:01:5a:8b:81:8a:0e:e4:95:e6:22:77:48:1a:64:bf:ff:42: e8:5c:59:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx OEVDQ0JERkQwHhcNMjUwNTEyMTkwNTA2WhcNMjUwNTE5MTkwNTA2WjAYMRYwFAYD VQQDEw02ODIyNDY2Mi04NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu32kF4Bzivj4I1ARlmNrl+LN0yz0bUjL6s0zXs7JaAyCAMme/xLOW1lXQoaU H3GXMGhTnZswsGyimIF1vTpT7lcElG3hdZOlLL9Ycyla0sSMXOir9gExJv3Wd2Sg Do8MOM+6fH2Q76gANUgOi+A99DiSNAioVLWQwyVBtvNh3qWHy1FBxavuS/uYTdam eNqHFIhIvPLFjIgZTqqTlckTnOsydIRiH/E+jOGf6C5J4IG4rwhPcPxKxiICwILl b8HbUAtSzQ176vZqIN/vG276G6A94ueq7X2b+g924G1I+eJQGzk11tg4qmNbhvHl YGJgNix+fHYoAjsaa+AbH4iSpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqmm7+5 QOZxkaY9l5D1g+GqB7fWMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP QmxBRU40QnJhaUFZN012ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACc4/6i6ZQizyFUcHsXGXRSMZ62ADxQWPn/8pioa7bXvaSif3pUOut cCe+to2KLhoR0KVgJYZJwYrB+uc0ActTNW/QgunFP2R5DItp+9M0DGLIkhXtTgN3 xP2oTsAnFxVYni0/20Ayt5tHefd0OP0D8jqC1UN6ONUdYF8wxLI7JbuMN8Skknz7 n5VQGzqCO5W6fZqcM4bl+awdAtZWTVeMKkIIcXhpepZpK90t+lheS/DnLv2gPEpg kTtAlLS3jPpfzUMXDJ4vtbcf2GyI/F2kUlqW/j23WQ2PyA+/uypnHVUbqkfqO94j OPTyAVqLgYoO5JXmIndIGmS//0LoXFm9 -----END CERTIFICATE-----Generated at Wed May 14 08:00:26 2025 by rpki-client