$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft File: yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json) Hash identifier: hnaK10jjhxXgp4n6Ept3F/GOvYX/w105kCyCh8ilsKY= Subject key identifier: 2A:9C:11:A3:0E:13:B3:C8:DC:3A:22:3C:81:93:B2:56:12:F3:BC:3D Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 Certificate issuer: /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft Manifest number: 015E Signing time: Thu 15 May 2025 03:23:48 +0000 Manifest this update: Thu 15 May 2025 03:23:48 +0000 Manifest next update: Thu 22 May 2025 03:23:48 +0000 Files and hashes: 1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: f0pg8P+magJU3sdFKMI9R0CvizT4Ydnd+Tn0RMwF+8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Validity Not Before: May 15 03:23:48 2025 GMT Not After : May 22 03:23:48 2025 GMT Subject: CN=68255e44-d992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:6a:19:41:22:01:92:1a:b9:15:25:02:85: 75:02:f2:c9:ac:85:46:3c:6e:63:c6:ec:04:5a:73: ed:4f:5c:a1:b2:17:80:f0:4f:f6:f9:11:63:54:00: 73:84:ff:4d:75:0d:db:97:31:18:82:9b:a0:43:f5: 3e:4b:6e:4e:7a:96:25:1a:da:ee:73:86:49:50:b1: 3b:29:33:76:f7:f4:6f:5a:72:81:75:65:a3:ab:49: 87:55:c8:b8:6b:2f:00:8c:51:be:77:31:41:30:bb: 56:43:f3:6a:e9:0f:f5:fb:e6:e5:52:b2:39:3e:20: ad:c3:2b:d4:01:30:c1:be:81:32:d7:49:9b:a3:ed: e9:03:e3:b3:c2:75:e5:9b:d4:1e:44:7f:0d:ad:b4: 32:03:d9:b3:6e:1f:0d:f0:67:68:7f:a7:02:c4:21: b1:8c:36:2f:04:f5:e3:e5:66:a3:96:44:5d:7a:e8: f2:89:94:e4:67:92:1c:a1:52:f8:d5:8e:ff:88:6d: 77:0a:4c:59:c4:d3:cd:ca:26:e1:d0:2e:30:b3:e4: 42:c7:da:73:62:81:c4:d7:ed:31:9f:af:1c:43:a0: 86:7a:0b:6e:80:10:5c:02:02:bd:75:44:4a:e7:e9: 1d:ae:e5:91:69:97:f4:ac:e4:df:0a:38:bb:41:34: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:11:A3:0E:13:B3:C8:DC:3A:22:3C:81:93:B2:56:12:F3:BC:3D X509v3 Authority Key Identifier: keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:57:82:83:67:51:2c:2d:c0:c2:5c:6a:fd:4f:97:2b:2e:2c: 0f:3e:43:05:95:8c:c5:f7:64:9d:57:4b:0a:86:50:a0:2b:e0: 4b:76:5d:3e:e3:1d:cb:dc:60:e9:ef:ad:cf:4a:c3:4f:5a:2d: 8d:91:05:ff:5e:1a:5c:dc:3c:88:8c:2d:69:ab:bd:7b:00:49: ac:32:fb:fc:2a:e5:67:33:6d:09:17:ac:12:0a:03:c0:a4:1f: cb:98:14:84:e5:7a:79:93:36:80:7c:a2:67:37:75:ae:98:88: 92:7e:dd:fc:40:31:85:fd:dc:58:4e:a5:a8:26:78:ed:8c:b9: 95:5a:4a:f2:e4:ad:0d:ad:d1:d6:29:8a:61:68:a2:6a:69:e9: be:e9:98:d2:2c:15:57:b5:f1:3b:f0:bd:af:f5:2d:51:99:80: f0:6a:3a:ff:4a:d4:90:d2:6b:e9:04:ca:a9:22:82:54:c7:1e: 7d:78:09:7f:0a:fc:63:2b:e7:b8:1e:be:7f:60:44:fc:3e:48: b4:38:8f:ca:d4:34:78:f0:cf:a7:1c:8d:93:5b:71:ed:31:89: 23:a5:d5:49:50:4f:f8:25:38:e9:d6:48:cf:44:6e:73:ee:d3: 4b:46:94:70:57:3f:70:c7:19:25:5c:cb:81:6e:dd:90:db:e6: 8e:34:16:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3NjYxMTAvBgNVBAUTKEM5NTBFNzg3NUEzREVFRTA4MkQ5Q0M1MDM1MDBCRkRF Nzc3MDg2RTEwHhcNMjUwNTE1MDMyMzQ4WhcNMjUwNTIyMDMyMzQ4WjAYMRYwFAYD VQQDEw02ODI1NWU0NC1kOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5E5qGUEiAZIauRUlAoV1AvLJrIVGPG5jxuwEWnPtT1yhsheA8E/2+RFjVABz hP9NdQ3blzEYgpugQ/U+S25OepYlGtruc4ZJULE7KTN29/RvWnKBdWWjq0mHVci4 ay8AjFG+dzFBMLtWQ/Nq6Q/1++blUrI5PiCtwyvUATDBvoEy10mbo+3pA+OzwnXl m9QeRH8NrbQyA9mzbh8N8Gdof6cCxCGxjDYvBPXj5WajlkRdeujyiZTkZ5IcoVL4 1Y7/iG13CkxZxNPNyibh0C4ws+RCx9pzYoHE1+0xn68cQ6CGegtugBBcAgK9dURK 5+kdruWRaZf0rOTfCji7QTTGzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqcEaMO E7PI3DoiPIGTslYS87w9MB8GA1UdIwQYMBaAFMlQ54daPe7ggtnMUDUAv953cIbh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzc2Ni9EQjdDRDg4NDE2 NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1Q0MyY3hRTlFDXzNuZHdo dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWRG5oMW85N3VDQzJjeFFOUUNfM25kd2h1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzc2Ni9EQjdDRDg4NDE2NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1 Q0MyY3hRTlFDXzNuZHdodUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzV4KDZ1EsLcDCXGr9T5crLiwPPkMFlYzF92SdV0sKhlCgK+BLdl0+ 4x3L3GDp763PSsNPWi2NkQX/Xhpc3DyIjC1pq717AEmsMvv8KuVnM20JF6wSCgPA pB/LmBSE5Xp5kzaAfKJnN3WumIiSft38QDGF/dxYTqWoJnjtjLmVWkry5K0NrdHW KYphaKJqaem+6ZjSLBVXtfE78L2v9S1RmYDwajr/StSQ0mvpBMqpIoJUxx59eAl/ CvxjK+e4Hr5/YET8Pki0OI/K1DR48M+nHI2TW3HtMYkjpdVJUE/4JTjp1kjPRG5z 7tNLRpRwVz9wxxklXMuBbt2Q2+aONBYh -----END CERTIFICATE-----Generated at Thu May 15 06:26:56 2025 by rpki-client