$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: zWrbnuECw2axrkHISpGr/7O/84Yrp+rgtWBgcl8zjf4= Subject key identifier: 19:48:80:BA:98:04:70:05:3F:1A:86:77:F1:F5:2C:52:35:89:A7:54 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 07D4 Signing time: Mon 12 May 2025 20:49:58 +0000 Manifest this update: Mon 12 May 2025 20:49:57 +0000 Manifest next update: Mon 19 May 2025 20:49:57 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: 80uvE7+rCEl+VSt2czn7vRvmSgj6/OusNVrq2fQutUY=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: a2yAAw5TgVOmiE8atuw12IZTou56LGQZcdiOcAtiW0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: May 12 20:49:57 2025 GMT Not After : May 19 20:49:57 2025 GMT Subject: CN=68225ef6-31ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:36:20:25:26:0a:c0:86:c6:23:0e:c9:35: b3:a2:75:22:7d:cf:72:5f:b9:b7:cc:b5:d6:3c:80: 08:22:f3:5d:9d:8d:9b:a5:d6:9e:0d:fe:4b:3c:bb: ab:47:6a:c2:e0:64:ed:d5:5c:d3:94:3b:23:41:50: 8f:58:3f:55:7e:f4:77:10:e6:87:30:30:cf:a9:82: ed:f1:f8:87:1e:9b:7c:27:a9:37:ec:13:be:7e:c0: 72:23:e9:5e:45:12:f2:97:28:f5:f2:29:b1:9d:34: cf:cb:8e:6a:70:c2:fc:53:9c:8c:e9:3e:5e:c2:bf: ea:2e:28:a4:c2:70:5a:05:39:2c:fa:00:9e:0b:d9: f8:38:44:df:a9:88:d2:62:f3:24:06:09:61:05:f3: 61:80:e2:0c:a9:06:ba:0e:55:bd:f4:2d:8e:9c:b0: ed:ee:e1:5c:c9:da:90:c3:59:48:c1:a0:28:d6:4a: a7:9d:8e:82:6b:7d:73:00:c9:db:0b:f0:c4:a3:84: 1a:3d:7b:2a:cc:8e:b0:4a:95:cc:a4:bc:d9:8e:bc: 36:6c:82:80:16:0b:c1:e5:c3:45:1d:60:d0:d0:f3: 77:42:df:21:35:54:76:19:53:5a:39:27:24:aa:ab: 17:73:7d:ef:58:da:ed:97:09:aa:4d:69:bb:63:dd: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:48:80:BA:98:04:70:05:3F:1A:86:77:F1:F5:2C:52:35:89:A7:54 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:1a:91:37:c6:85:b3:fa:ed:4d:0c:c2:f9:a7:8c:7a:0e: 1d:ed:dd:14:df:8c:4f:0c:8d:17:21:5f:0f:b7:be:d2:d5:24: 35:78:b8:58:41:56:60:4f:91:3e:95:c4:0b:0d:68:ce:a5:b6: 40:30:3d:cc:ba:fd:5e:15:9b:87:48:ba:e2:20:ca:dd:da:7f: e9:24:5e:c3:6c:81:26:13:0e:07:84:71:f7:3e:49:e3:2e:1e: 17:d7:62:df:1d:57:c6:99:27:7a:2a:e0:7d:b8:b4:a7:9f:0a: 69:5b:72:17:ac:b7:d6:a1:f8:c1:3d:ad:7c:b8:d9:ed:f2:b9: 5f:06:30:75:30:8f:89:8e:bb:ce:61:67:5a:4f:7f:82:92:54: 43:a4:9c:8c:ae:2d:56:ed:68:8b:06:ae:27:86:fd:ea:b9:6a: 8f:bf:49:f1:b6:d8:d5:f2:88:21:42:9c:5a:fb:ba:f2:19:88: 55:a0:28:82:06:27:c8:15:22:a1:ca:bd:c1:71:21:04:67:97: 9c:d3:16:bc:e5:75:92:cc:3c:54:a2:10:19:06:7b:c6:33:73: d5:9e:fe:38:60:fa:98:e9:a8:bb:a1:48:21:c0:f9:2c:78:d8: fe:41:b2:73:5f:37:a8:f8:81:c5:db:75:c9:9d:29:09:db:d5: 8a:19:46:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUwNTEyMjA0OTU3WhcNMjUwNTE5MjA0OTU3WjAYMRYwFAYD VQQDEw02ODIyNWVmNi0zMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mc2ICUmCsCGxiMOyTWzonUifc9yX7m3zLXWPIAIIvNdnY2bpdaeDf5LPLur R2rC4GTt1VzTlDsjQVCPWD9VfvR3EOaHMDDPqYLt8fiHHpt8J6k37BO+fsByI+le RRLylyj18imxnTTPy45qcML8U5yM6T5ewr/qLiikwnBaBTks+gCeC9n4OETfqYjS YvMkBglhBfNhgOIMqQa6DlW99C2OnLDt7uFcydqQw1lIwaAo1kqnnY6Ca31zAMnb C/DEo4QaPXsqzI6wSpXMpLzZjrw2bIKAFgvB5cNFHWDQ0PN3Qt8hNVR2GVNaOSck qqsXc33vWNrtlwmqTWm7Y91JYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlIgLqY BHAFPxqGd/H1LFI1iadUMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzShqRN8aFs/rtTQzC+aeMeg4d7d0U34xPDI0XIV8Pt77S1SQ1eLhY QVZgT5E+lcQLDWjOpbZAMD3Muv1eFZuHSLriIMrd2n/pJF7DbIEmEw4HhHH3Pknj Lh4X12LfHVfGmSd6KuB9uLSnnwppW3IXrLfWofjBPa18uNnt8rlfBjB1MI+JjrvO YWdaT3+CklRDpJyMri1W7WiLBq4nhv3quWqPv0nxttjV8oghQpxa+7ryGYhVoCiC BifIFSKhyr3BcSEEZ5ec0xa85XWSzDxUohAZBnvGM3PVnv44YPqY6ai7oUghwPks eNj+QbJzXzeo+IHF23XJnSkJ29WKGUZE -----END CERTIFICATE-----Generated at Tue May 13 22:21:59 2025 by rpki-client