$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json) Hash identifier: CF0RmJyjlpKForybII3HQa/WDca1VZgT/T3zcCy3Wws= Subject key identifier: FE:25:95:C3:BC:2F:FF:A4:52:86:59:36:15:E1:F5:A0:8B:DA:14:A4 Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft Manifest number: C5 Signing time: Tue 13 May 2025 05:08:39 +0000 Manifest this update: Tue 13 May 2025 05:08:38 +0000 Manifest next update: Tue 20 May 2025 05:08:38 +0000 Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: 1VKc+LCRYsD1fVYE0oTARTCOaZYMR4fRWOB44B6mM2A=) 2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: ZVnEYOHXINGZEw1RnF1Uj9Pw7AnbBUgkIn8eDQrA8T4=) 3: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: LUt9DJS6Jpbs8PDzvIpOLhLuEq85uifRo0wnGTYcGuc=) 4: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: 08jGNnEflD8e5x3Cs8u4vH+jCRzHFAlUOBfwuUSSNb0=) 5: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 1i0d6pr2ELd59qaQmu9345pITiiNAhlVL8hxc+i1TcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A Validity Not Before: May 13 05:08:38 2025 GMT Not After : May 20 05:08:38 2025 GMT Subject: CN=6822d3d6-1f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7f:d8:a4:a3:31:bf:97:89:4a:9a:ef:6a:5c: 7f:0f:b9:94:3a:0d:e8:3d:32:e7:26:be:68:85:50: 4b:bf:76:b7:ff:66:69:10:02:bc:83:9d:6a:72:8c: 8f:6a:63:a9:a6:64:6c:c6:f5:9f:80:66:fc:df:b4: 55:1d:84:6d:94:0e:42:38:5b:c2:d1:89:cf:77:ca: e1:23:92:ef:ce:3d:57:c8:19:5e:8e:66:ca:61:6f: 84:62:fd:b6:3d:23:56:13:3b:96:b0:97:ac:81:6e: c1:bf:2e:86:4b:ed:40:40:4d:43:4b:34:58:53:e3: 94:50:b1:3b:55:4f:fe:10:22:98:91:cf:bd:09:b5: b5:76:c5:4f:f2:04:df:03:06:eb:4f:73:88:d5:56: ba:96:b3:a9:94:f6:e3:a8:c2:5e:19:4d:80:21:c0: 5b:6c:50:d2:1f:5d:02:90:fd:29:85:c7:7e:6b:e7: c3:72:c3:43:2b:93:70:4e:6e:c5:73:53:12:82:96: 77:05:6c:2f:54:f5:cf:e6:43:8f:5f:39:fe:d2:a4: 59:4e:20:af:eb:83:c0:fe:6e:30:d4:ed:9b:22:27: ee:75:81:62:41:74:01:8c:84:77:68:5d:bb:47:18: bf:8d:5c:52:f5:63:e7:78:ac:e7:03:c3:0e:86:7f: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:25:95:C3:BC:2F:FF:A4:52:86:59:36:15:E1:F5:A0:8B:DA:14:A4 X509v3 Authority Key Identifier: keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d3:09:0d:18:3b:71:46:09:e1:c5:b6:27:d2:7b:94:34:00: 5e:7a:45:7a:ff:39:2e:61:b9:20:41:fb:04:fd:15:bd:d0:5a: d8:5c:c7:24:88:cc:db:f2:cc:09:4f:c4:e9:63:e9:16:0d:8b: b3:42:20:d7:61:4d:55:3b:c1:f2:38:e8:e6:ec:92:e4:08:c5: b9:05:4f:e7:a2:08:14:74:fa:70:f8:df:22:3e:17:bd:bd:3c: 5c:a4:55:17:ce:6c:09:90:97:61:8f:0d:55:9d:8a:eb:39:d1: da:ca:2e:75:17:c7:59:e6:6e:d5:35:da:9e:ab:46:84:af:d8: bb:d6:c6:33:8d:c7:bf:e5:1d:f9:42:dc:84:4d:3f:0b:ba:40: 60:2e:7c:e5:45:eb:82:70:b5:4e:f0:bb:b0:22:c1:6e:26:ce: 09:19:59:91:75:5d:94:49:36:9d:c4:ad:f1:e8:8f:d3:85:87: 23:b5:2a:ad:46:2b:74:12:fe:bc:22:01:05:58:f0:20:06:9f: 8e:b9:97:9f:70:d3:a6:05:61:7b:8f:a0:7e:d7:42:cd:42:4a: f7:06:c3:e8:4e:47:82:42:5c:08:d4:08:8f:84:59:d8:95:3e: 37:2f:e1:70:20:02:0e:c8:f3:9a:dc:44:3c:fa:80:44:5e:39: 93:cc:03:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2 MzZBNDI1MEEwHhcNMjUwNTEzMDUwODM4WhcNMjUwNTIwMDUwODM4WjAYMRYwFAYD VQQDEw02ODIyZDNkNi0xZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53/YpKMxv5eJSprvalx/D7mUOg3oPTLnJr5ohVBLv3a3/2ZpEAK8g51qcoyP amOppmRsxvWfgGb837RVHYRtlA5COFvC0YnPd8rhI5Lvzj1XyBlejmbKYW+EYv22 PSNWEzuWsJesgW7Bvy6GS+1AQE1DSzRYU+OUULE7VU/+ECKYkc+9CbW1dsVP8gTf AwbrT3OI1Va6lrOplPbjqMJeGU2AIcBbbFDSH10CkP0phcd+a+fDcsNDK5NwTm7F c1MSgpZ3BWwvVPXP5kOPXzn+0qRZTiCv64PA/m4w1O2bIifudYFiQXQBjIR3aF27 Rxi/jVxS9WPneKznA8MOhn84yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4llcO8 L/+kUoZZNhXh9aCL2hSkMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUMwMC8xQzMxRUFGMDFCQzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VG ajA5enRIamMyRnBqYWtKUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC0wkNGDtxRgnhxbYn0nuUNABeekV6/zkuYbkgQfsE/RW90FrYXMck iMzb8swJT8TpY+kWDYuzQiDXYU1VO8HyOOjm7JLkCMW5BU/noggUdPpw+N8iPhe9 vTxcpFUXzmwJkJdhjw1VnYrrOdHayi51F8dZ5m7VNdqeq0aEr9i71sYzjce/5R35 QtyETT8LukBgLnzlReuCcLVO8LuwIsFuJs4JGVmRdV2USTadxK3x6I/ThYcjtSqt Rit0Ev68IgEFWPAgBp+OuZefcNOmBWF7j6B+10LNQkr3BsPoTkeCQlwI1AiPhFnY lT43L+FwIAIOyPOa3EQ8+oBEXjmTzAMT -----END CERTIFICATE-----Generated at Wed May 14 05:07:04 2025 by rpki-client