$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft File: pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json) Hash identifier: Ghi25MiQhBYYygcneKyPJewMDKGqz17Wsf7psTLfsd4= Subject key identifier: A5:38:7E:BF:58:9E:94:5C:A5:DD:39:56:01:75:DD:E0:D7:A7:B5:64 Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 Certificate issuer: /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Certificate serial: 1487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft Manifest number: 147B Signing time: Mon 12 May 2025 16:48:53 +0000 Manifest this update: Mon 12 May 2025 16:48:52 +0000 Manifest next update: Mon 19 May 2025 16:48:52 +0000 Files and hashes: 1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: xxLDPwO4TLwD1f5q20wpsr4q5i8HrYMXfCc69oT/jWI=) 2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: FG61AEeBt/KwKh7Rq7GtmQk5iB1zq03M8kwTThCsmIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5255 (0x1487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Validity Not Before: May 12 16:48:52 2025 GMT Not After : May 19 16:48:52 2025 GMT Subject: CN=68222675-667b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:69:bf:18:6a:49:29:4a:87:50:37:38:77: c5:a8:b3:4a:3d:76:cb:eb:d1:37:d7:2d:ba:a0:c7: b2:e7:25:95:79:64:e0:7e:c1:4a:47:56:42:3d:3a: 47:be:d4:bd:b9:0c:ec:75:e7:aa:61:58:af:b0:be: 52:af:12:6a:8b:1e:f2:ff:07:61:92:bb:6c:05:4f: 75:b6:94:e9:02:35:ba:54:18:42:56:8d:62:c8:df: 9a:1b:ab:cc:b4:f9:91:2d:97:12:d4:3a:1e:c1:4c: ed:07:f9:8d:03:d4:bd:fd:00:27:e5:87:45:79:89: dd:a6:ec:62:de:27:df:16:a1:89:01:d7:11:c3:05: 6a:a3:dc:73:94:9f:20:87:c6:90:ca:7c:7f:7a:bf: 16:16:0e:d3:e0:29:9a:e3:9a:ee:40:4b:1e:04:7b: 01:6f:23:e3:9d:6d:bd:34:3f:c0:50:6e:2e:ab:d2: 38:51:f6:34:c0:3b:5c:49:28:ec:d3:36:44:2b:9a: 9c:33:db:97:95:93:0d:70:86:c8:f0:ee:98:63:6b: 24:c4:a9:34:45:18:e9:99:54:a9:fc:76:0b:f9:6d: 0a:d6:24:41:2a:e0:fc:08:d0:3b:87:8b:41:08:eb: 1d:d0:82:49:10:eb:2e:ae:cb:c6:a4:4b:84:32:9f: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:38:7E:BF:58:9E:94:5C:A5:DD:39:56:01:75:DD:E0:D7:A7:B5:64 X509v3 Authority Key Identifier: keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:75:2a:65:4e:d1:43:a6:a5:db:6e:c7:c7:b6:07:2f:95:55: 26:4d:81:fc:ea:ad:59:45:f8:64:01:00:d1:0b:b5:83:e6:b8: a3:98:fd:1f:93:47:5c:cf:a7:2e:68:8d:05:d9:11:53:40:c5: 03:5f:80:de:c2:86:11:db:cd:6d:3f:b3:3b:d8:54:f8:73:2a: 79:d7:cd:e6:0d:bf:29:28:e1:bc:e6:52:46:57:2a:1e:6a:af: 6a:ee:b1:5f:57:bf:e0:e9:7e:64:ad:95:dc:56:49:38:c2:88: f5:cd:33:d2:e2:b4:06:3a:53:d8:da:14:d5:ac:0c:07:39:39: c5:82:e1:63:19:9d:4a:63:be:a3:b8:8b:eb:e7:55:0d:9a:9d: 71:29:1a:42:03:55:30:5c:87:66:da:01:83:c3:cd:d5:16:df: 25:84:ad:e7:80:24:1e:87:24:9b:2c:84:48:a2:89:a9:a3:3e: 37:fd:f0:a1:ec:80:0e:79:1a:24:36:c5:28:83:51:5f:5a:af: d9:a8:99:9a:ae:ba:52:4c:3d:e6:5f:66:8c:86:2f:65:e7:b5: 4c:97:fa:46:fb:f7:e9:fd:27:5b:78:1c:7f:e1:ae:e7:06:3d: ce:9a:4a:76:d6:3e:0c:d1:ed:39:f3:b8:4c:db:d7:3e:7b:cc: 3b:e6:42:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzMkYxMTAvBgNVBAUTKEE3MjdGNTlCMjRCMTE0QTI1MUZERjc3RjUzQkZBMEVD NjkxRTI1QTUwHhcNMjUwNTEyMTY0ODUyWhcNMjUwNTE5MTY0ODUyWjAYMRYwFAYD VQQDEw02ODIyMjY3NS02NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycFpvxhqSSlKh1A3OHfFqLNKPXbL69E31y26oMey5yWVeWTgfsFKR1ZCPTpH vtS9uQzsdeeqYVivsL5SrxJqix7y/wdhkrtsBU91tpTpAjW6VBhCVo1iyN+aG6vM tPmRLZcS1DoewUztB/mNA9S9/QAn5YdFeYndpuxi3iffFqGJAdcRwwVqo9xzlJ8g h8aQynx/er8WFg7T4Cma45ruQEseBHsBbyPjnW29ND/AUG4uq9I4UfY0wDtcSSjs 0zZEK5qcM9uXlZMNcIbI8O6YY2skxKk0RRjpmVSp/HYL+W0K1iRBKuD8CNA7h4tB COsd0IJJEOsursvGpEuEMp/yDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU4fr9Y npRcpd05VgF13eDXp7VkMB8GA1UdIwQYMBaAFKcn9ZsksRSiUf33f1O/oOxpHiWl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMyRi8zMzQ1QzRDNjY2 NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZLSlJfZmRfVTctZzdHa2VK YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B5ZjFteVN4RktKUl9mZF9VNy1nN0drZUphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjMyRi8zMzQ1QzRDNjY2NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZL SlJfZmRfVTctZzdHa2VKYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfdSplTtFDpqXbbsfHtgcvlVUmTYH86q1ZRfhkAQDRC7WD5rijmP0f k0dcz6cuaI0F2RFTQMUDX4DewoYR281tP7M72FT4cyp5183mDb8pKOG85lJGVyoe aq9q7rFfV7/g6X5krZXcVkk4woj1zTPS4rQGOlPY2hTVrAwHOTnFguFjGZ1KY76j uIvr51UNmp1xKRpCA1UwXIdm2gGDw83VFt8lhK3ngCQehySbLIRIoompoz43/fCh 7IAOeRokNsUog1FfWq/ZqJmarrpSTD3mX2aMhi9l57VMl/pG+/fp/SdbeBx/4a7n Bj3Omkp21j4M0e0587hM29c+e8w75kKa -----END CERTIFICATE-----Generated at Tue May 13 14:45:57 2025 by rpki-client