$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: kuQ/v92Xya3SmURTDEHoxTouShbFducFHpM+gAO3llA= Subject key identifier: 56:B9:18:68:41:C3:9C:2C:21:6E:9D:B9:1A:CB:9A:1A:C9:2B:83:4C Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 0388 Signing time: Thu 15 May 2025 00:52:44 +0000 Manifest this update: Thu 15 May 2025 00:52:44 +0000 Manifest next update: Thu 22 May 2025 00:52:44 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: xk/YOnNbmqLjtDaLu+0KXIVQRR4QMHuIIZm894kYcYk=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: 3Zz0SoScV6fPNZfJ9ERkFkDBxGo2mzRnK0TlcOdgOTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: May 15 00:52:44 2025 GMT Not After : May 22 00:52:44 2025 GMT Subject: CN=68253adc-d152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:65:b8:cd:13:53:d2:b2:c9:32:74:78:6d: ec:0f:95:99:5a:b9:73:63:54:ad:4c:ca:39:0a:03: ff:3f:34:98:30:e6:14:1a:a8:54:26:2b:f4:4b:67: b5:a8:90:12:40:c0:df:dc:34:69:26:6b:2c:1f:c4: 5d:aa:aa:08:18:cf:49:59:f3:c1:b5:35:60:74:de: da:40:7a:78:55:25:af:4a:5f:cd:56:04:b3:17:8a: d2:a8:79:c7:61:9a:31:fa:85:91:5c:b6:0d:88:54: 8f:a2:d6:da:5e:a6:31:cd:35:85:5e:d6:8b:69:46: 48:e2:e0:5c:12:e8:d9:94:1f:93:de:d2:4e:1f:af: fb:23:79:88:b6:88:9c:45:44:00:58:61:e7:b6:77: 90:80:cb:2a:ab:8e:31:56:3d:3b:3a:f3:3e:bb:58: 58:10:a1:e8:71:f9:a4:44:d6:bf:ce:3a:dc:7f:fa: 67:06:c9:b2:da:47:a3:9e:45:25:95:15:1c:d7:ed: f1:65:6c:76:26:4f:ca:c9:50:c9:70:20:a9:a4:f7: fb:73:5c:b0:82:d7:22:6f:d6:2f:00:f1:94:4b:f8: 84:ee:c0:04:d4:3f:72:8d:25:00:08:34:14:86:0f: 76:27:38:db:3d:3d:ee:06:40:b4:b5:a4:40:69:47: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B9:18:68:41:C3:9C:2C:21:6E:9D:B9:1A:CB:9A:1A:C9:2B:83:4C X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:03:fc:04:cb:e9:09:44:bb:12:33:ed:2a:c7:30:5c:19:a7: 57:66:02:d3:ba:57:a4:0f:89:d0:8d:7e:a8:eb:23:5a:79:fc: 6b:5e:ab:de:ad:6e:a3:84:38:8d:47:8d:4a:0d:1c:38:28:b8: a8:26:67:fc:c3:84:fc:50:79:fc:98:3b:eb:ea:79:a0:05:0b: f5:ae:f3:2e:b2:64:3c:47:5d:6a:16:91:96:3b:66:e5:eb:da: c1:bf:15:47:a2:8e:f3:10:ff:7f:db:81:e3:63:d1:c9:b5:ef: af:37:5b:1c:17:1d:58:6c:ff:23:99:38:04:59:2f:e9:63:43: 90:16:94:97:45:da:c6:33:96:44:02:af:81:0d:5b:9a:70:7b: f8:ce:84:cb:64:42:aa:98:c3:7d:d7:20:94:e1:c8:13:4e:94: ac:1e:93:07:0e:9a:44:cb:a1:d7:5b:68:4c:49:67:94:11:b7: 54:fe:d6:83:d0:de:6b:2a:09:73:1b:9e:dd:f9:99:ff:44:3e: 2c:06:95:88:2c:c6:99:15:5c:d8:c5:f1:de:30:a9:f5:08:28: a3:8e:57:54:9d:07:fd:29:52:18:6b:00:4b:db:9d:7c:97:82: 77:f6:b4:bf:e5:20:2a:79:a7:c2:46:f0:fa:b7:0d:72:50:38: 78:ac:b9:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjUwNTE1MDA1MjQ0WhcNMjUwNTIyMDA1MjQ0WjAYMRYwFAYD VQQDEw02ODI1M2FkYy1kMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/5luM0TU9KyyTJ0eG3sD5WZWrlzY1StTMo5CgP/PzSYMOYUGqhUJiv0S2e1 qJASQMDf3DRpJmssH8RdqqoIGM9JWfPBtTVgdN7aQHp4VSWvSl/NVgSzF4rSqHnH YZox+oWRXLYNiFSPotbaXqYxzTWFXtaLaUZI4uBcEujZlB+T3tJOH6/7I3mItoic RUQAWGHntneQgMsqq44xVj07OvM+u1hYEKHocfmkRNa/zjrcf/pnBsmy2kejnkUl lRUc1+3xZWx2Jk/KyVDJcCCppPf7c1ywgtcib9YvAPGUS/iE7sAE1D9yjSUACDQU hg92JzjbPT3uBkC0taRAaUcTDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa5GGhB w5wsIW6duRrLmhrJK4NMMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbA/wEy+kJRLsSM+0qxzBcGadXZgLTulekD4nQjX6o6yNaefxrXqve rW6jhDiNR41KDRw4KLioJmf8w4T8UHn8mDvr6nmgBQv1rvMusmQ8R11qFpGWO2bl 69rBvxVHoo7zEP9/24HjY9HJte+vN1scFx1YbP8jmTgEWS/pY0OQFpSXRdrGM5ZE Aq+BDVuacHv4zoTLZEKqmMN91yCU4cgTTpSsHpMHDppEy6HXW2hMSWeUEbdU/taD 0N5rKglzG57d+Zn/RD4sBpWILMaZFVzYxfHeMKn1CCijjldUnQf9KVIYawBL2518 l4J39rS/5SAqeafCRvD6tw1yUDh4rLlG -----END CERTIFICATE-----Generated at Thu May 15 12:39:02 2025 by rpki-client