$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: 51hAaEasb0WGqozr46FUhsJrSr/31vDPMkiIOKGTrl8= Subject key identifier: 1E:DC:BD:35:4A:80:8C:35:6B:E0:8D:13:04:6B:57:2B:52:1F:21:A0 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0140 Signing time: Tue 01 Jul 2025 04:51:20 +0000 Manifest this update: Tue 01 Jul 2025 04:51:20 +0000 Manifest next update: Tue 08 Jul 2025 04:51:20 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: KCNAz3qxvUg6R0a0At4QGJ+OdGacU3DOkOa16qeYN+0=) 2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Jul 1 04:51:20 2025 GMT Not After : Jul 8 04:51:20 2025 GMT Subject: CN=68636948-4d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:e9:a0:3b:96:c8:48:5e:59:5b:57:c6:be: ec:1d:25:ed:11:fc:d4:90:89:be:c0:db:ea:87:4d: bf:9b:4c:98:36:70:41:ad:1f:ed:91:2a:ff:ce:e0: 63:ca:ea:6e:01:e9:94:4a:f6:e1:73:07:3e:e0:1b: f9:a6:65:42:0b:91:ff:8a:50:e6:63:5d:5b:c7:3c: 43:de:8e:fb:ea:fa:f9:0a:40:4a:eb:e7:e5:2c:0a: 6d:5f:35:8d:8e:bc:62:3f:d6:9a:80:18:42:19:bc: 21:d1:7f:c3:07:68:83:b0:30:04:33:d1:32:49:7e: e5:fc:2b:a2:e6:43:45:65:0c:21:43:33:4e:b4:a9: 88:30:be:b1:fa:ac:a2:35:bf:92:f6:c0:98:fa:b7: 80:82:64:b7:8d:5f:6a:8a:b4:c5:18:7f:09:64:70: 2e:83:cf:c7:45:1b:5b:fd:49:d1:e7:dd:c1:d2:b4: 86:e7:58:7c:dd:ae:7b:a1:3a:39:5c:db:c5:d3:03: 6a:d6:3e:6c:af:d1:b3:d1:9a:07:06:65:9e:60:e3: f0:a5:67:d3:35:1b:59:9b:a0:00:67:b1:fd:2b:dc: 67:c9:d7:a7:f6:e9:6f:93:ad:5c:76:19:45:b7:1a: d8:96:6a:ca:75:48:97:5c:5b:e7:00:97:6f:53:48: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:BD:35:4A:80:8C:35:6B:E0:8D:13:04:6B:57:2B:52:1F:21:A0 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:01:8c:b4:ba:18:fa:d9:1f:00:6d:f3:19:65:fd:1e:4c:f4: f1:af:71:94:c2:6c:7c:3e:62:bd:1e:42:fc:4a:d5:eb:a3:ed: 2d:12:13:c1:91:7d:3e:41:30:83:34:e5:b0:22:f1:90:c0:a7: 38:f8:1f:2e:d0:1c:b1:c7:22:d5:b3:5a:4a:14:60:bf:34:80: 01:ab:23:82:5f:cf:c7:94:5c:c5:43:b8:07:55:6f:96:11:47: 06:d7:b5:33:ab:e7:d4:10:4a:34:e9:c4:b5:85:a3:54:23:01: f7:c7:85:cd:4e:d7:a1:04:cc:a1:83:77:47:c7:41:02:61:42: e6:9e:3c:66:69:f4:6a:b1:37:c0:b1:09:dd:7c:50:c4:9f:d6: 7f:11:00:76:0a:98:ae:c4:ff:99:43:4c:0f:55:d0:92:fb:ca: f8:d7:fd:53:5b:12:28:30:31:da:75:87:a5:d5:2e:55:52:aa: 4a:b6:ce:47:05:66:e3:3d:ad:79:a2:90:90:00:48:44:d6:9d: f8:c7:7e:7a:49:5c:82:63:e6:4e:c3:22:5d:21:1b:13:d4:0e: 6a:cd:be:12:d0:d9:5c:b0:ba:44:c5:85:ad:fc:da:0b:af:17: b0:83:ff:43:fe:9c:90:e4:ab:32:8c:3f:7b:8c:db:f9:0a:7a: d5:2a:d7:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUwNzAxMDQ1MTIwWhcNMjUwNzA4MDQ1MTIwWjAYMRYwFAYD VQQDEw02ODYzNjk0OC00ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJzpoDuWyEheWVtXxr7sHSXtEfzUkIm+wNvqh02/m0yYNnBBrR/tkSr/zuBj yupuAemUSvbhcwc+4Bv5pmVCC5H/ilDmY11bxzxD3o776vr5CkBK6+flLAptXzWN jrxiP9aagBhCGbwh0X/DB2iDsDAEM9EySX7l/Cui5kNFZQwhQzNOtKmIML6x+qyi Nb+S9sCY+reAgmS3jV9qirTFGH8JZHAug8/HRRtb/UnR593B0rSG51h83a57oTo5 XNvF0wNq1j5sr9Gz0ZoHBmWeYOPwpWfTNRtZm6AAZ7H9K9xnyden9ulvk61cdhlF txrYlmrKdUiXXFvnAJdvU0hSIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7cvTVK gIw1a+CNEwRrVytSHyGgMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbAYy0uhj62R8AbfMZZf0eTPTxr3GUwmx8PmK9HkL8StXro+0tEhPB kX0+QTCDNOWwIvGQwKc4+B8u0ByxxyLVs1pKFGC/NIABqyOCX8/HlFzFQ7gHVW+W EUcG17Uzq+fUEEo06cS1haNUIwH3x4XNTtehBMyhg3dHx0ECYULmnjxmafRqsTfA sQndfFDEn9Z/EQB2CpiuxP+ZQ0wPVdCS+8r41/1TWxIoMDHadYel1S5VUqpKts5H BWbjPa15opCQAEhE1p34x356SVyCY+ZOwyJdIRsT1A5qzb4S0NlcsLpExYWt/NoL rxewg/9D/pyQ5KsyjD97jNv5CnrVKtcV -----END CERTIFICATE-----Generated at Tue Jul 1 14:15:46 2025 by rpki-client