$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json) Hash identifier: X6jQ+obRKaq9RLj1I7lbwlpeTiFSBQeaIz0tJpvW4lg= Subject key identifier: A5:11:3E:A9:86:90:41:53:DD:45:B5:84:22:23:A4:B6:9E:28:5E:91 Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft Manifest number: E1 Signing time: Thu 15 May 2025 04:51:01 +0000 Manifest this update: Thu 15 May 2025 04:51:01 +0000 Manifest next update: Thu 22 May 2025 04:51:01 +0000 Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: 9xTcfBLzeAbl5nWqdYXMFoNT9a1p4zlYwHpWxlfuShQ=) 2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: 37wbWCnWXU/ELyPlkoOPoh4JCAJyFhcsdRvKDXlbhrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: May 15 04:51:01 2025 GMT Not After : May 22 04:51:01 2025 GMT Subject: CN=682572b5-e9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:d2:c9:e3:d3:04:fd:3b:19:09:06:36:fd: f9:1f:de:d2:26:eb:18:2a:56:62:62:b3:f4:7e:ca: 5e:18:c4:52:4b:27:9a:e8:85:b7:02:38:3d:79:a8: 97:a7:f9:51:1c:e7:52:23:5d:6e:63:6b:0a:4c:7a: 50:f7:93:f2:6c:d4:2b:35:0d:b3:06:21:6e:aa:4f: e4:41:dd:df:98:92:96:f8:10:4d:a6:0a:21:e0:f3: 25:99:c2:7b:29:68:27:7c:19:bd:a7:54:11:f1:d4: 2f:02:f6:73:df:05:ea:4a:b3:eb:0e:3d:37:e9:f8: 1e:f4:60:9c:d8:a6:a5:cf:9d:10:cb:48:63:92:2b: 7a:72:8b:80:eb:a6:26:53:13:b0:22:73:f9:92:26: cd:74:43:03:de:fa:46:ae:20:51:5c:21:6f:b2:37: 92:d1:20:d5:3c:69:87:33:82:4b:24:31:f9:47:37: 6b:f4:a2:87:52:64:97:d2:c2:a4:19:ae:01:a8:73: 36:6a:1a:96:50:f9:ce:c2:16:0c:b4:42:0f:ec:36: ac:cc:b4:f7:44:04:6b:ed:1f:d1:c8:77:b8:b5:79: cf:c3:da:f5:b1:6b:76:a1:d0:a1:06:db:54:ec:d0: c8:33:73:41:17:00:c8:6c:d3:51:8c:01:eb:e8:01: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:3E:A9:86:90:41:53:DD:45:B5:84:22:23:A4:B6:9E:28:5E:91 X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:3e:22:71:f5:e0:61:25:b2:54:ff:e8:d5:8b:cf:43:d4: ca:18:82:f6:ca:2f:fc:7e:9f:d9:20:a7:e5:0a:69:37:78:f9: d5:7a:aa:8f:7a:9e:91:dd:07:15:da:54:b0:da:c8:9a:8c:3a: 25:4b:ac:54:4b:25:5b:de:35:a4:f0:65:97:5a:3e:30:8b:63: ce:a4:9c:fb:bd:ad:86:ef:25:4a:b8:81:8a:5b:74:37:d0:55: 97:d6:df:24:0b:2d:00:f0:63:e5:6a:2d:78:a4:75:dd:27:d7: 35:4b:71:85:ed:ae:1d:ae:3a:71:3f:25:51:59:0a:3f:80:13: a3:e8:3b:46:b6:bb:4a:95:bd:06:d2:75:83:76:98:ca:a1:36: 3d:f9:44:3d:fd:7d:04:0a:57:95:a3:d1:64:90:83:dc:c6:d2: 70:51:af:67:01:49:60:c9:00:92:99:62:84:c0:79:fd:a2:5b: 26:be:4e:92:15:9e:7c:9f:55:58:df:64:91:10:d0:79:5d:e0: 48:10:19:d1:1c:d2:9c:bf:5a:5f:f8:16:f4:47:11:6c:d6:85: 18:6c:ae:0d:fe:b5:fb:9a:45:69:7f:89:01:b5:35:e1:79:03: 82:45:aa:ad:7d:2d:5f:18:7e:79:ac:38:e0:1a:26:90:a2:33: 5f:fa:d2:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjUwNTE1MDQ1MTAxWhcNMjUwNTIyMDQ1MTAxWjAYMRYwFAYD VQQDEw02ODI1NzJiNS1lOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGfSyePTBP07GQkGNv35H97SJusYKlZiYrP0fspeGMRSSyea6IW3Ajg9eaiX p/lRHOdSI11uY2sKTHpQ95PybNQrNQ2zBiFuqk/kQd3fmJKW+BBNpgoh4PMlmcJ7 KWgnfBm9p1QR8dQvAvZz3wXqSrPrDj036fge9GCc2Kalz50Qy0hjkit6couA66Ym UxOwInP5kibNdEMD3vpGriBRXCFvsjeS0SDVPGmHM4JLJDH5Rzdr9KKHUmSX0sKk Ga4BqHM2ahqWUPnOwhYMtEIP7DaszLT3RARr7R/RyHe4tXnPw9r1sWt2odChBttU 7NDIM3NBFwDIbNNRjAHr6AGUewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKURPqmG kEFT3UW1hCIjpLaeKF6RMB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9m U0pGU3ptVWFRSWxGZk5GMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+kD4icfXgYSWyVP/o1YvPQ9TKGIL2yi/8fp/ZIKflCmk3ePnVeqqP ep6R3QcV2lSw2siajDolS6xUSyVb3jWk8GWXWj4wi2POpJz7va2G7yVKuIGKW3Q3 0FWX1t8kCy0A8GPlai14pHXdJ9c1S3GF7a4drjpxPyVRWQo/gBOj6DtGtrtKlb0G 0nWDdpjKoTY9+UQ9/X0ECleVo9FkkIPcxtJwUa9nAUlgyQCSmWKEwHn9olsmvk6S FZ58n1VY32SRENB5XeBIEBnRHNKcv1pf+Bb0RxFs1oUYbK4N/rX7mkVpf4kBtTXh eQOCRaqtfS1fGH55rDjgGiaQojNf+tJM -----END CERTIFICATE-----Generated at Fri May 16 14:55:09 2025 by rpki-client