$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: oRoDhTNwDE3iiUiEsAjrQm5+g2fl50q9tc1GtWpdgns= Subject key identifier: 21:7E:DA:56:7A:FB:44:44:FE:7D:68:09:03:3B:28:BA:DF:9E:AF:41 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: D1 Signing time: Tue 13 May 2025 04:57:02 +0000 Manifest this update: Tue 13 May 2025 04:57:01 +0000 Manifest next update: Tue 20 May 2025 04:57:01 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: km15fOdR7AHSqQ+e+0twofxZqO+2S0yy8MSC0jzB7ww=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: May 13 04:57:01 2025 GMT Not After : May 20 04:57:01 2025 GMT Subject: CN=6822d11e-28e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:bd:7e:4e:e4:41:56:24:aa:15:bd:8e:ea: 0c:e0:96:f4:bb:9b:4c:5c:71:fd:37:6c:01:f6:62: 23:e6:ea:a0:0e:8e:a7:a7:f1:c8:19:d6:65:6e:9a: 3d:c1:c2:90:36:87:bc:02:a6:32:de:98:c2:a1:b5: d0:89:6d:08:e5:cb:82:9e:a9:e5:1f:eb:d8:db:a5: 2b:3d:c6:61:90:a0:26:29:81:47:05:b0:9e:fa:0c: 26:62:87:d7:8e:de:7a:b3:39:36:53:27:64:d8:9b: 84:2f:93:25:ba:d5:d0:f4:28:24:26:ac:40:c4:a9: da:4e:70:a6:8d:2c:bb:3b:4a:c1:ac:8f:6a:4c:2e: bc:b3:0e:a5:a0:2a:86:79:d9:20:ae:ae:4d:fc:a5: 7c:73:64:5b:fa:fc:17:74:c5:31:88:ac:10:59:29: 64:e5:76:f0:da:a6:c0:93:c5:be:5f:e3:be:a9:ee: 3d:fa:20:44:94:39:f6:db:d6:83:d9:7e:f4:7a:19: 76:82:72:5c:dd:f1:d9:0f:4a:cf:9e:c3:c9:7d:90: d4:88:e0:5b:2b:59:ac:03:a1:b7:94:47:81:f6:8f: 89:b8:cd:51:18:0a:51:3e:57:20:0d:7c:de:f8:4f: d7:51:06:b5:3f:5f:da:d0:70:fd:0c:a5:4c:75:3b: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:DA:56:7A:FB:44:44:FE:7D:68:09:03:3B:28:BA:DF:9E:AF:41 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ac:4e:a2:af:8c:ef:07:7a:30:d4:5c:bb:cb:9a:e5:85:b2: 14:da:18:f6:8a:71:70:88:82:8a:6a:df:4f:c2:b9:91:bb:52: 44:6b:47:27:3d:0b:fb:a3:36:fe:57:1f:ff:f4:e6:29:b3:1b: 86:7f:22:20:e7:5d:aa:49:fa:ca:f1:82:0c:c6:aa:16:55:00: 90:7f:f8:e5:99:86:aa:56:4a:b6:70:e5:45:3f:fa:bf:5c:2c: c0:be:dd:c6:a4:af:06:50:95:c0:3e:b5:a6:3a:e6:6d:b2:af: 32:3c:29:cb:34:51:9f:b0:6c:e2:76:1f:8a:fa:83:0a:fd:04: f7:f1:2a:c6:99:f0:b1:ed:86:4c:92:43:3a:f2:b7:12:7e:aa: c2:76:17:b1:80:79:c0:4d:5e:39:80:23:c3:a1:99:57:67:69: b2:0d:16:e9:b7:65:9e:7c:5e:fb:f2:92:8d:ff:2c:36:7a:d8: d1:b8:f4:3f:16:dd:0b:5e:df:27:ad:52:2a:a2:68:42:e7:8c: 3d:02:56:81:e3:b1:3a:cc:d0:89:34:0a:e8:4e:ed:59:95:cc: 4b:db:52:36:79:27:03:aa:4c:57:43:41:9c:1e:de:44:3e:1d: e5:f8:ed:ad:7c:f8:04:07:ef:ec:64:0c:ae:b9:79:e5:a9:ef: aa:a5:df:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUwNTEzMDQ1NzAxWhcNMjUwNTIwMDQ1NzAxWjAYMRYwFAYD VQQDEw02ODIyZDExZS0yOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrS9fk7kQVYkqhW9juoM4Jb0u5tMXHH9N2wB9mIj5uqgDo6np/HIGdZlbpo9 wcKQNoe8AqYy3pjCobXQiW0I5cuCnqnlH+vY26UrPcZhkKAmKYFHBbCe+gwmYofX jt56szk2Uydk2JuEL5MlutXQ9CgkJqxAxKnaTnCmjSy7O0rBrI9qTC68sw6loCqG edkgrq5N/KV8c2Rb+vwXdMUxiKwQWSlk5Xbw2qbAk8W+X+O+qe49+iBElDn229aD 2X70ehl2gnJc3fHZD0rPnsPJfZDUiOBbK1msA6G3lEeB9o+JuM1RGApRPlcgDXze +E/XUQa1P1/a0HD9DKVMdTuQ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCF+2lZ6 +0RE/n1oCQM7KLrfnq9BMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/rE6ir4zvB3ow1Fy7y5rlhbIU2hj2inFwiIKKat9PwrmRu1JEa0cn PQv7ozb+Vx//9OYpsxuGfyIg512qSfrK8YIMxqoWVQCQf/jlmYaqVkq2cOVFP/q/ XCzAvt3GpK8GUJXAPrWmOuZtsq8yPCnLNFGfsGzidh+K+oMK/QT38SrGmfCx7YZM kkM68rcSfqrCdhexgHnATV45gCPDoZlXZ2myDRbpt2WefF778pKN/yw2etjRuPQ/ Ft0LXt8nrVIqomhC54w9AlaB47E6zNCJNAroTu1ZlcxL21I2eScDqkxXQ0GcHt5E Ph3l+O2tfPgEB+/sZAyuuXnlqe+qpd+7 -----END CERTIFICATE-----Generated at Tue May 13 15:22:14 2025 by rpki-client