$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: gTM61hRzCZbNAU8Xpkz82ckXob7xnsC53kuhK2qpfVE= Subject key identifier: BF:78:F7:7B:61:08:F7:F7:39:B2:B6:98:4F:61:87:69:87:25:BF:41 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0127 Signing time: Sun 11 May 2025 03:32:07 +0000 Manifest this update: Sun 11 May 2025 03:32:06 +0000 Manifest next update: Sun 18 May 2025 03:32:06 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: QXD3UGJXO9TL4tSNa7McZPtV7fH4j6MF03mF1ws4fU0=) 2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: May 11 03:32:06 2025 GMT Not After : May 18 03:32:06 2025 GMT Subject: CN=68201a36-f34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:49:78:c0:6d:76:b5:3a:ec:37:c0:bf:cf: 41:03:c8:b4:ce:1f:bd:d5:e1:f2:0a:fa:03:13:b6: 4f:c3:82:c8:c2:f8:fd:1d:a4:2f:7d:2b:0b:b1:ca: 67:13:31:f2:46:45:fa:76:ad:04:c1:3e:da:37:e6: 23:d2:2d:b1:67:ab:2e:00:4a:21:fa:0f:13:0a:e9: 73:61:53:83:9b:2f:1d:54:dc:dc:45:d5:ee:14:2f: 1c:33:e9:a8:ad:61:99:01:cd:f2:9f:90:d2:2c:f2: b7:54:57:5a:f0:04:30:1e:24:77:b0:08:50:fa:eb: a1:7e:a7:e7:95:23:84:1e:76:46:2f:64:ee:1d:d1: 67:1c:3f:ef:f8:90:30:43:5c:f7:b2:ba:4e:9e:c2: 16:fa:0b:d1:94:97:de:01:18:3b:06:74:85:60:f1: 0f:c8:cd:aa:9b:5b:6a:13:c8:5b:1c:f5:0f:ba:1d: 6b:15:62:0b:75:25:9b:ad:6b:b1:93:d5:cf:e0:ea: a9:9b:2a:7c:be:1f:32:61:39:44:62:f7:de:f2:6d: 9e:16:7a:d9:45:12:fb:fb:e6:1f:a0:51:86:a2:90: 49:87:6a:e8:fc:e5:c3:3f:7e:7f:a8:d1:c8:6f:fd: 6e:dd:74:6a:7f:ff:2b:1e:85:27:6d:c1:72:02:f2: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:F7:7B:61:08:F7:F7:39:B2:B6:98:4F:61:87:69:87:25:BF:41 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:88:bf:03:c3:11:a8:a9:a4:82:41:d4:68:6c:e5:e0:f2:19: 26:e3:62:c3:45:4b:36:11:4c:c4:ce:49:a6:11:7e:ba:16:11: 14:c6:68:51:73:3a:3c:75:6c:94:35:4f:97:9f:09:ae:03:e6: 64:8c:93:2c:c8:62:5b:3b:86:de:3d:e6:32:1a:10:f9:4b:c9: 44:4b:e1:63:05:7b:0f:4e:fb:61:89:93:b9:d5:e6:81:45:03: fa:e9:0b:57:33:bc:20:0a:ff:48:41:f1:ca:09:a0:cb:6a:28: 7d:bc:53:c3:51:89:ef:b9:92:80:e0:9a:63:c3:b9:3a:63:55: 22:35:b2:6c:6c:f2:56:f0:57:d5:32:1c:07:c5:04:a0:17:b3: 2a:f2:67:06:48:f3:c7:ed:c7:96:f6:22:3c:aa:91:a4:9e:11: 2b:71:f3:55:32:f3:cc:a9:c4:23:19:85:d0:42:90:7a:cc:0c: 57:dc:6f:bf:78:72:ae:88:79:23:27:48:f0:c8:7c:8f:3d:ef: 81:6b:c4:ee:fb:01:cc:82:75:d3:29:b0:81:80:6b:aa:30:4c: 91:79:50:82:6d:af:31:2c:b8:63:0a:c3:42:6d:e1:f1:59:38: 3d:40:74:c1:93:03:e6:a9:3f:48:f8:3f:5c:f7:f2:9a:1d:bf: 55:1a:2a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUwNTExMDMzMjA2WhcNMjUwNTE4MDMzMjA2WjAYMRYwFAYD VQQDEw02ODIwMWEzNi1mMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqxJeMBtdrU67DfAv89BA8i0zh+91eHyCvoDE7ZPw4LIwvj9HaQvfSsLscpn EzHyRkX6dq0EwT7aN+Yj0i2xZ6suAEoh+g8TCulzYVODmy8dVNzcRdXuFC8cM+mo rWGZAc3yn5DSLPK3VFda8AQwHiR3sAhQ+uuhfqfnlSOEHnZGL2TuHdFnHD/v+JAw Q1z3srpOnsIW+gvRlJfeARg7BnSFYPEPyM2qm1tqE8hbHPUPuh1rFWILdSWbrWux k9XP4Oqpmyp8vh8yYTlEYvfe8m2eFnrZRRL7++YfoFGGopBJh2ro/OXDP35/qNHI b/1u3XRqf/8rHoUnbcFyAvKLPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9493th CPf3ObK2mE9hh2mHJb9BMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAriL8DwxGoqaSCQdRobOXg8hkm42LDRUs2EUzEzkmmEX66FhEUxmhR czo8dWyUNU+XnwmuA+ZkjJMsyGJbO4bePeYyGhD5S8lES+FjBXsPTvthiZO51eaB RQP66QtXM7wgCv9IQfHKCaDLaih9vFPDUYnvuZKA4Jpjw7k6Y1UiNbJsbPJW8FfV MhwHxQSgF7Mq8mcGSPPH7ceW9iI8qpGknhErcfNVMvPMqcQjGYXQQpB6zAxX3G+/ eHKuiHkjJ0jwyHyPPe+Ba8Tu+wHMgnXTKbCBgGuqMEyReVCCba8xLLhjCsNCbeHx WTg9QHTBkwPmqT9I+D9c9/KaHb9VGipQ -----END CERTIFICATE-----Generated at Tue May 13 00:09:30 2025 by rpki-client