$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json) Hash identifier: H6QLcqJ9DZGs3fUk4aWS08gmlqPr66aQ+pfSUW+nE6s= Subject key identifier: A0:3A:A7:03:15:A7:86:AB:B3:5F:C1:2A:71:83:1D:EA:65:69:4D:73 Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft Manifest number: 03A0 Signing time: Thu 03 Jul 2025 01:08:22 +0000 Manifest this update: Thu 03 Jul 2025 01:08:22 +0000 Manifest next update: Thu 10 Jul 2025 01:08:22 +0000 Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: iC7KQQjcf1nWM5xivIP8ykS2IXwRUucoWbBL09QsIoQ=) 2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: 3Zz0SoScV6fPNZfJ9ERkFkDBxGo2mzRnK0TlcOdgOTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246 Validity Not Before: Jul 3 01:08:22 2025 GMT Not After : Jul 10 01:08:22 2025 GMT Subject: CN=6865d806-e330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:1b:68:33:60:7d:50:02:05:b3:5e:81:25: 90:09:35:8e:07:14:55:9e:ed:51:97:24:e2:10:18: c3:de:7f:45:c6:7b:b7:88:48:ac:14:60:a3:69:a2: 79:f3:5f:17:3e:fb:69:26:f6:87:6f:db:af:4a:13: 80:95:bb:3f:42:f2:57:f4:f8:29:67:8d:17:6d:28: 0f:bb:46:dd:e5:5d:2b:e8:4e:77:99:ca:ee:f3:38: d7:d6:97:a5:c9:58:20:32:46:60:c3:77:76:ac:e0: 45:d6:4b:2f:13:87:f9:78:b2:23:c9:83:13:0e:b2: ff:36:6b:84:8a:08:6d:a2:08:1d:96:68:36:6f:cb: b4:82:20:29:f8:96:ce:f0:43:99:ed:a3:d5:11:e3: 97:79:cc:4c:c8:33:fe:ed:2c:ab:90:b8:e0:bf:9d: 5e:a8:1d:e6:30:25:9e:33:3c:e6:73:c2:46:d7:8a: 30:13:5d:09:67:73:0b:7d:c0:80:a5:dc:f7:6f:5a: f1:2f:34:42:0a:31:9b:db:16:51:dd:b1:c2:73:ac: ac:51:ca:51:8a:99:ec:8d:dd:c4:0f:5f:35:e0:9f: 77:62:e1:10:f0:ef:c8:e6:d8:f7:ea:1f:9c:39:63: 90:6b:62:12:42:4f:9b:51:21:e4:1f:de:10:84:cc: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:A7:03:15:A7:86:AB:B3:5F:C1:2A:71:83:1D:EA:65:69:4D:73 X509v3 Authority Key Identifier: keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bb:fe:a6:8e:9f:00:11:34:30:ed:b4:15:e8:f5:d4:e3:a2: 4e:e7:59:ac:f9:20:3d:a8:64:f6:bc:bc:ad:d7:6b:2a:9a:70: 76:a9:2d:5d:12:00:02:e3:3c:e2:75:48:9e:43:11:8b:d3:d0: 98:ea:1f:16:c9:e3:03:be:72:83:43:4e:f0:4c:6d:ae:a4:cc: d1:10:94:b4:2e:c9:d1:cc:fd:6d:9d:24:51:42:b4:81:99:fc: ff:68:6d:5c:eb:73:07:1b:c0:b5:9d:65:40:88:d0:70:29:ba: a3:7e:a6:2c:cb:13:e8:75:0f:39:7f:52:f7:62:ee:5d:0a:57: 85:d3:f5:25:c1:eb:cb:0f:45:d8:6b:1e:d3:b8:dd:04:fa:36: 1a:d6:bd:fc:c3:7e:86:31:9a:a6:23:61:3f:94:c8:00:c3:5b: ac:4b:67:0f:d0:c7:8c:98:ac:ca:22:df:21:07:0d:e6:bd:8a: 0b:cf:e4:19:0d:ba:b6:99:ac:83:55:c7:23:33:f7:ee:74:b1: 4c:70:15:b4:56:86:89:66:a4:56:ca:09:c1:95:d8:bf:ae:12: ba:30:02:0a:12:3c:2e:6f:88:97:c7:d0:61:3d:d2:12:00:e6: 7a:18:b4:b3:04:47:b8:bf:97:43:59:d3:0b:df:96:21:61:13: e7:b8:02:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1MzMxMTAvBgNVBAUTKEU1OEY5OEUzQzYxNDIxNDY1NDUzQUM0MjU1RjBBRkIw QUQ5NUQyNDYwHhcNMjUwNzAzMDEwODIyWhcNMjUwNzEwMDEwODIyWjAYMRYwFAYD VQQDEw02ODY1ZDgwNi1lMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eobaDNgfVACBbNegSWQCTWOBxRVnu1RlyTiEBjD3n9Fxnu3iEisFGCjaaJ5 818XPvtpJvaHb9uvShOAlbs/QvJX9PgpZ40XbSgPu0bd5V0r6E53mcru8zjX1pel yVggMkZgw3d2rOBF1ksvE4f5eLIjyYMTDrL/NmuEightoggdlmg2b8u0giAp+JbO 8EOZ7aPVEeOXecxMyDP+7SyrkLjgv51eqB3mMCWeMzzmc8JG14owE10JZ3MLfcCA pdz3b1rxLzRCCjGb2xZR3bHCc6ysUcpRipnsjd3ED1814J93YuEQ8O/I5tj36h+c OWOQa2ISQk+bUSHkH94QhMy/7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKA6pwMV p4ars1/BKnGDHeplaU1zMB8GA1UdIwQYMBaAFOWPmOPGFCFGVFOsQlXwr7CtldJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDUzMy8yMkVEMkM5QTlG ODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlVWlVVNnhDVmZDdnNLMlYw a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZLVk0OFlVSVVaVVU2eENWZkN2c0syVjBrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDUzMy8yMkVEMkM5QTlGODIxMUVDQkZDM0NGMUNDNEY5QUUwMi81WS1ZNDhZVUlV WlVVNnhDVmZDdnNLMlYwa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlu/6mjp8AETQw7bQV6PXU46JO51ms+SA9qGT2vLyt12sqmnB2qS1d EgAC4zzidUieQxGL09CY6h8WyeMDvnKDQ07wTG2upMzREJS0LsnRzP1tnSRRQrSB mfz/aG1c63MHG8C1nWVAiNBwKbqjfqYsyxPodQ85f1L3Yu5dCleF0/UlwevLD0XY ax7TuN0E+jYa1r38w36GMZqmI2E/lMgAw1usS2cP0MeMmKzKIt8hBw3mvYoLz+QZ Dbq2mayDVccjM/fudLFMcBW0VoaJZqRWygnBldi/rhK6MAIKEjwub4iXx9BhPdIS AOZ6GLSzBEe4v5dDWdML35YhYRPnuAKJ -----END CERTIFICATE-----Generated at Fri Jul 4 07:46:18 2025 by rpki-client