$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: 1uQqVGlN5F4yHYqHaH1ShvShUmhcbEA8lqVjvgSSwDs= Subject key identifier: 3A:19:88:24:C8:0C:D8:39:E4:7D:E0:42:4B:DF:FD:50:40:A3:E7:F4 Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 0159 Signing time: Tue 13 May 2025 03:19:36 +0000 Manifest this update: Tue 13 May 2025 03:19:36 +0000 Manifest next update: Tue 20 May 2025 03:19:36 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: l5cXhKaVjHgJQiWbNGM/Om/72/MiFmsVmq+aVtJ54hU=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: May 13 03:19:36 2025 GMT Not After : May 20 03:19:36 2025 GMT Subject: CN=6822ba48-e670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d9:49:b6:57:85:fb:f2:03:dd:ee:b1:1d:79: 69:62:41:ba:fb:cf:b6:ec:3b:71:26:8f:94:22:4e: bf:80:43:b1:2d:64:d2:fa:e7:c7:68:0d:f5:71:9e: d7:5e:18:11:30:30:58:9d:ba:35:72:5f:63:8a:34: 4f:de:56:f0:86:47:e1:e9:f0:f9:99:e6:ea:9b:85: 97:38:f7:f5:64:30:fb:0b:44:5f:ef:35:76:a5:1a: 27:4f:ba:0e:dd:68:0e:f8:e9:6b:b1:34:95:72:4e: 10:68:a9:e9:d7:e5:a2:89:2e:46:5b:af:eb:30:d3: f0:1f:07:7d:a5:6e:eb:6b:36:1b:09:d1:9d:dc:47: 88:42:7a:38:c1:7d:8f:be:bc:ab:b4:20:83:0d:83: d8:de:8e:1a:9c:d1:cb:14:bd:38:ac:3b:f7:2a:cc: 67:5c:3d:6a:ca:af:90:94:2d:b5:dd:16:e6:5a:47: c8:cf:11:ed:06:b3:5c:87:bc:4e:6c:54:2e:9d:ce: 6b:fc:0b:f8:46:fa:11:36:2c:87:3b:46:a0:e8:e6: 51:11:fc:5d:87:80:16:3f:82:d4:34:77:0f:8e:f3: a0:85:80:c9:c1:d0:d6:dc:87:59:cd:87:67:6e:51: bb:f7:4f:ac:5d:65:85:31:62:ea:9d:20:9e:95:b1: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:88:24:C8:0C:D8:39:E4:7D:E0:42:4B:DF:FD:50:40:A3:E7:F4 X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3a:8d:4b:b0:1d:8b:13:07:d2:2d:34:00:82:46:d2:68:8e: b6:6f:48:df:44:dc:95:f7:4b:54:8d:27:a1:d7:db:c2:52:b9: a3:75:bb:31:0e:b1:6a:10:75:61:6f:83:67:2b:00:90:53:ef: ba:88:df:50:36:39:ac:f8:7d:e1:cf:27:56:75:ca:46:5d:5a: 48:d8:e0:05:a5:65:3b:ad:36:ba:bb:af:19:2b:bc:18:55:72: c2:a5:30:62:61:17:8b:c7:fe:36:fc:e8:0a:79:f9:a4:5a:dd: f5:fb:0e:b1:77:cf:cc:d3:dc:39:11:16:5f:48:bf:43:43:cc: 24:e9:96:7b:f9:cf:22:0e:94:69:7b:a8:18:6e:98:c2:a4:7a: 4e:1c:83:3e:d3:e5:03:46:fa:cf:29:ad:33:6b:31:61:7c:1f: e3:91:32:64:e3:3b:71:97:fc:a2:1b:a9:9b:42:ec:ea:b3:33: de:d0:ac:5c:9d:29:03:94:ca:5f:a7:db:f7:54:16:b6:54:b5: 04:a1:fe:5e:75:41:61:f2:57:18:23:db:63:c3:32:ce:68:4a: da:8e:00:56:03:3c:d6:60:a1:df:e0:9b:31:d4:32:8f:05:73: 66:df:5c:e4:ff:ed:99:f6:dc:19:4c:8a:6b:87:74:2d:ff:c7: c9:57:6d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwNTEzMDMxOTM2WhcNMjUwNTIwMDMxOTM2WjAYMRYwFAYD VQQDEw02ODIyYmE0OC1lNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NlJtleF+/ID3e6xHXlpYkG6+8+27DtxJo+UIk6/gEOxLWTS+ufHaA31cZ7X XhgRMDBYnbo1cl9jijRP3lbwhkfh6fD5mebqm4WXOPf1ZDD7C0Rf7zV2pRonT7oO 3WgO+OlrsTSVck4QaKnp1+WiiS5GW6/rMNPwHwd9pW7razYbCdGd3EeIQno4wX2P vryrtCCDDYPY3o4anNHLFL04rDv3KsxnXD1qyq+QlC213RbmWkfIzxHtBrNch7xO bFQunc5r/Av4RvoRNiyHO0ag6OZREfxdh4AWP4LUNHcPjvOghYDJwdDW3IdZzYdn blG790+sXWWFMWLqnSCelbHRWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoZiCTI DNg55H3gQkvf/VBAo+f0MB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvOo1LsB2LEwfSLTQAgkbSaI62b0jfRNyV90tUjSeh19vCUrmjdbsx DrFqEHVhb4NnKwCQU++6iN9QNjms+H3hzydWdcpGXVpI2OAFpWU7rTa6u68ZK7wY VXLCpTBiYReLx/42/OgKefmkWt31+w6xd8/M09w5ERZfSL9DQ8wk6ZZ7+c8iDpRp e6gYbpjCpHpOHIM+0+UDRvrPKa0zazFhfB/jkTJk4ztxl/yiG6mbQuzqszPe0Kxc nSkDlMpfp9v3VBa2VLUEof5edUFh8lcYI9tjwzLOaErajgBWAzzWYKHf4Jsx1DKP BXNm31zk/+2Z9twZTIprh3Qt/8fJV20T -----END CERTIFICATE-----Generated at Tue May 13 05:08:31 2025 by rpki-client