$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json) Hash identifier: /e1too2kX5sGsoH23Xi0MHssspxaMD/PgT+KdTKyPC8= Subject key identifier: 99:C2:77:EA:0C:D3:D5:F1:18:D6:09:C0:A5:AB:EC:BB:FB:04:39:6A Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft Manifest number: DE Signing time: Thu 03 Jul 2025 05:49:48 +0000 Manifest this update: Thu 03 Jul 2025 05:49:48 +0000 Manifest next update: Thu 10 Jul 2025 05:49:48 +0000 Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: cJevbFbWkSfuxWFzYlStelKk6CFLarZDuQMEF7iQkcE=) 2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: ZVnEYOHXINGZEw1RnF1Uj9Pw7AnbBUgkIn8eDQrA8T4=) 3: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: LUt9DJS6Jpbs8PDzvIpOLhLuEq85uifRo0wnGTYcGuc=) 4: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 1i0d6pr2ELd59qaQmu9345pITiiNAhlVL8hxc+i1TcY=) 5: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: 08jGNnEflD8e5x3Cs8u4vH+jCRzHFAlUOBfwuUSSNb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Validity Not Before: Jul 3 05:49:48 2025 GMT Not After : Jul 10 05:49:48 2025 GMT Subject: CN=686619fc-91a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:4d:c3:35:4a:e2:86:b5:84:95:cb:f8:0b: d6:56:13:93:3d:b4:0f:bd:94:f1:98:9c:5b:41:e7: 05:25:56:27:5b:2d:f5:1b:e2:3b:af:93:34:4f:59: 17:07:12:1c:12:d3:93:57:6f:d1:b0:ea:11:bc:09: 7a:fd:d1:6d:9d:bd:c4:82:52:ba:24:9b:f5:96:6a: 77:22:3f:32:2a:ad:33:18:55:b8:01:ed:88:68:14: b5:5a:ec:76:7b:1c:9e:ee:71:26:16:2c:d0:4a:e9: d4:50:52:c8:ff:3e:c2:dd:aa:25:db:72:13:e4:7e: 49:62:48:3a:f1:d6:e1:0c:8b:6f:38:2d:20:14:34: ae:d1:bb:f2:57:b7:85:97:16:6e:03:ac:a6:fa:88: 1a:85:49:2e:f1:ab:c8:8d:d3:32:0b:6b:81:72:1f: 96:96:3b:d3:4f:d7:2a:9c:69:26:c3:2c:cb:d5:fb: ac:42:b1:f3:43:f4:f4:7e:fa:86:d4:20:34:79:55: 84:4a:be:0d:5b:45:7c:ca:8a:98:f8:46:73:04:c1: 7c:b6:ba:5c:33:cf:53:b1:e0:62:20:f3:d7:e7:1d: 1b:75:52:cc:ba:98:09:d1:a8:92:7c:da:4e:9b:90: ba:3e:bb:0b:1f:3a:d5:b1:30:35:04:3b:a2:ae:77: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:77:EA:0C:D3:D5:F1:18:D6:09:C0:A5:AB:EC:BB:FB:04:39:6A X509v3 Authority Key Identifier: keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:72:12:2f:95:2c:47:79:de:ff:2e:13:1e:84:e4:22:5e:50: 69:63:ba:c6:54:85:b7:14:fd:6b:fb:89:d3:63:02:23:54:22: 7d:13:b1:0f:e7:9d:ba:1c:d3:76:b7:ec:b4:97:00:8f:a7:d5: 6a:5c:d7:b6:de:21:12:97:e9:c3:f9:27:b2:ba:d7:06:a3:98: df:f5:05:b1:6a:a2:2e:46:ba:be:8e:09:20:c5:1c:8a:fd:25: 8b:da:6f:b9:85:79:ef:61:5f:41:5e:f0:c8:c9:50:22:95:6c: 74:f5:08:0e:f8:16:b7:35:c1:fb:4d:80:15:9f:20:20:12:b8: 5a:d2:48:a7:d2:4f:a4:26:58:3e:60:8c:b3:2f:5b:e5:c8:c9: 4b:5b:8c:d6:95:cf:cb:d9:fd:6a:d3:75:8f:f0:4e:fc:aa:bc: 3c:2a:24:57:41:83:17:e8:46:71:91:94:9b:2c:3f:5d:96:ca: b1:58:51:b3:f1:64:6b:6d:67:95:6a:a5:8b:0a:41:9e:b3:ce: 64:63:b3:89:5d:a4:2b:b4:05:c9:f1:8d:0b:ac:e4:0e:44:8d: 2c:f6:8d:05:ca:ea:ad:8f:07:4a:eb:c5:37:f1:d4:43:5d:f5: 27:4e:29:0e:67:1f:4d:56:20:7f:e3:6a:53:86:69:69:b0:93: 55:f3:e2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2 MzZBNDI1MEEwHhcNMjUwNzAzMDU0OTQ4WhcNMjUwNzEwMDU0OTQ4WjAYMRYwFAYD VQQDEw02ODY2MTlmYy05MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqRNwzVK4oa1hJXL+AvWVhOTPbQPvZTxmJxbQecFJVYnWy31G+I7r5M0T1kX BxIcEtOTV2/RsOoRvAl6/dFtnb3EglK6JJv1lmp3Ij8yKq0zGFW4Ae2IaBS1Wux2 exye7nEmFizQSunUUFLI/z7C3aol23IT5H5JYkg68dbhDItvOC0gFDSu0bvyV7eF lxZuA6ym+ogahUku8avIjdMyC2uBch+WljvTT9cqnGkmwyzL1fusQrHzQ/T0fvqG 1CA0eVWESr4NW0V8yoqY+EZzBMF8trpcM89TseBiIPPX5x0bdVLMupgJ0aiSfNpO m5C6PrsLHzrVsTA1BDuirndA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnCd+oM 09XxGNYJwKWr7Lv7BDlqMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUMwMC8xQzMxRUFGMDFCQzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VG ajA5enRIamMyRnBqYWtKUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzchIvlSxHed7/LhMehOQiXlBpY7rGVIW3FP1r+4nTYwIjVCJ9E7EP 5526HNN2t+y0lwCPp9VqXNe23iESl+nD+SeyutcGo5jf9QWxaqIuRrq+jgkgxRyK /SWL2m+5hXnvYV9BXvDIyVAilWx09QgO+Ba3NcH7TYAVnyAgErha0kin0k+kJlg+ YIyzL1vlyMlLW4zWlc/L2f1q03WP8E78qrw8KiRXQYMX6EZxkZSbLD9dlsqxWFGz 8WRrbWeVaqWLCkGes85kY7OJXaQrtAXJ8Y0LrOQORI0s9o0FyuqtjwdK68U38dRD XfUnTikOZx9NViB/42pThmlpsJNV8+Je -----END CERTIFICATE-----Generated at Fri Jul 4 10:48:04 2025 by rpki-client