$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: dr1i6Ib0OKtcXuI4TzLCWtTk8RoxygXybq2/HbHiIJ8= Subject key identifier: C2:17:9E:83:05:75:60:05:D0:4A:56:AF:9F:E1:1B:26:15:FA:A0:DE Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 011C Signing time: Tue 13 May 2025 03:58:23 +0000 Manifest this update: Tue 13 May 2025 03:58:22 +0000 Manifest next update: Tue 20 May 2025 03:58:22 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: bILWp1zxwm+5V+xzO68TzfOinZYLft07KPM4sDJqQNE=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: DePAWeNaPf050wbH02MB/3/H4o3AawPKYgaEsO6gzSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: May 13 03:58:22 2025 GMT Not After : May 20 03:58:22 2025 GMT Subject: CN=6822c35e-5368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:b7:f7:d0:2b:41:c3:6c:c5:4e:38:56:44: e4:10:0d:82:0c:db:a3:50:8c:0c:cc:27:3a:ee:93: 65:c0:dc:ca:18:3b:51:49:f9:0f:e6:06:c7:82:8a: 98:1f:be:55:36:f0:c9:c2:2b:4b:92:12:ba:20:4f: b8:75:1c:df:9d:fc:91:1e:3e:80:cd:53:8c:9c:a9: c0:49:5a:f8:fe:68:0f:01:14:c6:89:f5:91:91:0b: 92:78:df:a4:8f:e7:c3:cb:86:56:38:1e:fe:cd:b5: bd:93:83:96:05:95:20:6c:00:0e:4f:01:c8:c6:5a: 61:d3:36:26:cc:aa:82:48:9f:c7:4f:d3:53:27:a5: 8c:a6:c7:40:cd:6d:5b:7b:b7:1d:c7:89:6a:e0:9d: 56:48:69:e4:a8:15:33:6c:3e:54:b4:f4:2e:5c:38: df:e2:58:a2:90:0b:7b:01:33:f1:24:c1:95:e1:76: a1:17:63:a6:f8:21:92:7e:a7:a1:e8:15:6a:03:99: 55:ce:34:01:6f:89:ec:ea:db:69:dc:29:bf:32:77: 4e:94:4f:77:bd:0b:fb:dd:20:46:96:2a:b8:12:fa: 0b:d4:a3:4e:0e:89:20:f2:22:c4:e0:9e:5f:85:ed: 1e:33:0f:22:62:86:27:23:b5:99:eb:78:45:0a:37: 56:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:9E:83:05:75:60:05:D0:4A:56:AF:9F:E1:1B:26:15:FA:A0:DE X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:66:bd:7f:59:7f:48:b1:c4:e4:b7:ee:6a:72:a7:ed:03:d9: 7e:4c:06:d3:a1:44:1b:ca:bf:07:20:1d:9d:e5:51:b6:94:a7: da:34:32:ae:40:11:03:3a:47:67:00:36:a7:ff:14:0a:ce:57: 8f:18:c1:8b:64:a8:4c:1c:c8:76:28:ab:8d:87:9d:06:fc:0a: 8d:02:01:fb:bd:a1:e7:83:b8:3e:87:05:d8:74:ca:8b:38:6c: c6:85:27:da:25:6a:27:28:b9:ee:53:b2:f8:6b:76:fd:c1:49: 47:f6:26:5d:60:44:ac:d9:66:70:5d:80:23:3d:c7:b0:86:ee: ea:c0:7a:15:c8:f4:df:2c:fc:0c:55:dd:26:20:2f:f6:5f:ba: 47:be:8f:43:3f:31:54:88:de:95:b9:ee:9a:46:ea:30:83:db: 69:87:1f:b2:d4:77:94:a1:1b:a9:b8:b7:28:15:80:9c:51:9c: fb:99:c8:85:43:f4:5e:8c:10:1f:fa:3b:07:99:c3:19:b8:9d: 52:de:fb:63:6e:45:3f:b5:b4:9e:6e:7b:cd:c0:09:87:0e:3a: 9b:7a:e0:27:8c:c2:f7:4d:a7:d8:76:4d:9e:bd:bf:30:38:0d: 91:db:76:0f:cc:34:3f:9e:3b:cb:c6:1e:ab:d7:98:82:32:36: 04:59:e6:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjUwNTEzMDM1ODIyWhcNMjUwNTIwMDM1ODIyWjAYMRYwFAYD VQQDEw02ODIyYzM1ZS01MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbi399ArQcNsxU44VkTkEA2CDNujUIwMzCc67pNlwNzKGDtRSfkP5gbHgoqY H75VNvDJwitLkhK6IE+4dRzfnfyRHj6AzVOMnKnASVr4/mgPARTGifWRkQuSeN+k j+fDy4ZWOB7+zbW9k4OWBZUgbAAOTwHIxlph0zYmzKqCSJ/HT9NTJ6WMpsdAzW1b e7cdx4lq4J1WSGnkqBUzbD5UtPQuXDjf4liikAt7ATPxJMGV4XahF2Om+CGSfqeh 6BVqA5lVzjQBb4ns6ttp3Cm/MndOlE93vQv73SBGliq4EvoL1KNODokg8iLE4J5f he0eMw8iYoYnI7WZ63hFCjdW3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIXnoMF dWAF0EpWr5/hGyYV+qDeMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU T2JSbEhBVzVMXzRCdkxOTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMZr1/WX9IscTkt+5qcqftA9l+TAbToUQbyr8HIB2d5VG2lKfaNDKu QBEDOkdnADan/xQKzlePGMGLZKhMHMh2KKuNh50G/AqNAgH7vaHng7g+hwXYdMqL OGzGhSfaJWonKLnuU7L4a3b9wUlH9iZdYESs2WZwXYAjPcewhu7qwHoVyPTfLPwM Vd0mIC/2X7pHvo9DPzFUiN6Vue6aRuowg9tphx+y1HeUoRupuLcoFYCcUZz7mciF Q/RejBAf+jsHmcMZuJ1S3vtjbkU/tbSebnvNwAmHDjqbeuAnjML3TafYdk2evb8w OA2R23YPzDQ/njvLxh6r15iCMjYEWeZN -----END CERTIFICATE-----Generated at Wed May 14 16:05:58 2025 by rpki-client