$ rpki-client -vvf rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft File: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft (raw, json) Hash identifier: pjcCrL/qbYQ0VzQWIGOSoAfMddMAQXEcrboQV488C/g= Subject key identifier: 07:76:A4:BB:0B:E9:2A:25:44:36:02:F1:61:33:2D:90:6E:2C:8F:9F Authority key identifier: 63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99 Certificate issuer: /CN=A9188593/serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft Manifest number: 25 Signing time: Tue 13 May 2025 07:00:54 +0000 Manifest this update: Tue 13 May 2025 07:00:54 +0000 Manifest next update: Tue 20 May 2025 07:00:53 +0000 Files and hashes: 1: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl (hash: rbtvmjUfxg0pZoIPDJaJJFRiZ2KlIv258es7twHR4yA=) 2: A60DE226FA6611EFA2492D77C4F9AE02.roa (hash: EaDsWh2ev+tCV5xfJvG7800tAekhxcSYZkZKsSGYDqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188593, serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99 Validity Not Before: May 13 07:00:54 2025 GMT Not After : May 20 07:00:53 2025 GMT Subject: CN=6822ee26-8702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:b7:68:83:d7:25:b8:30:25:09:02:4d:c8: ad:2b:eb:c7:f3:4b:99:be:9d:72:6f:cc:87:63:9f: 1e:2e:54:b4:24:d5:f9:57:81:b9:da:01:d9:da:c1: 96:99:0e:d9:d3:98:19:ac:bd:97:48:66:64:7e:3f: 0e:d7:f8:aa:96:3d:d5:9f:64:48:ba:1c:9d:43:be: d5:9e:b8:f6:f6:a4:be:77:6e:e4:92:fc:54:99:ce: ba:18:34:d3:d8:b9:b2:c5:18:ac:af:b8:fc:77:2c: 3f:36:d1:c5:a0:bf:d7:8d:f1:1c:56:46:40:2c:8c: bf:20:4d:c6:b4:66:6d:9a:40:d4:68:b2:28:85:7d: bb:67:18:2c:e1:b9:ea:c1:3d:84:66:9c:5a:aa:4e: 17:4d:c0:79:a0:50:13:9d:5e:47:6d:a8:82:fa:d3: 46:42:66:94:56:45:f8:9b:cb:3e:09:d2:08:aa:d8: 31:fd:3a:2c:7e:aa:c2:7e:1a:bc:de:4b:1a:85:60: 00:72:f5:46:3b:d6:42:5f:ab:ff:67:92:ef:5f:70: da:0c:c2:c3:7e:a0:09:ea:f7:f8:4b:19:83:87:8c: 4f:48:a0:11:a8:80:53:b3:9e:46:b6:80:e9:f4:87: 99:49:90:ca:79:cf:ce:00:09:0d:f1:f0:51:24:a8: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:A4:BB:0B:E9:2A:25:44:36:02:F1:61:33:2D:90:6E:2C:8F:9F X509v3 Authority Key Identifier: keyid:63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:11:96:0c:3a:62:b7:77:95:23:ce:b1:0d:06:4a:90:21:c0: f3:64:d3:2d:e2:44:c5:d9:a2:24:8c:55:e8:f9:f5:61:39:75: 13:ca:ea:84:a4:0d:45:04:de:6e:e2:2b:2d:9f:63:eb:1a:1d: 07:58:9c:63:9a:5f:92:73:0f:36:7f:e0:35:eb:95:ee:97:4e: e2:86:01:0d:6d:91:fb:38:f1:28:e0:51:3a:03:46:f8:f9:0e: e0:5e:4b:c0:68:b8:09:7c:81:10:76:a0:5d:84:04:fe:5b:73: 0b:40:11:7a:43:f6:f7:90:2a:67:26:62:93:9f:d4:28:8f:30: 80:94:42:46:17:7c:16:37:13:07:9f:5d:3b:a0:1f:21:e1:3f: c9:7d:10:44:ae:33:a2:fb:9b:44:5e:0f:8d:4c:b6:04:90:06: 10:11:db:e2:63:48:e4:bb:eb:9c:4c:54:0e:7f:35:13:7d:86: 12:f9:45:7a:08:d5:a5:f0:c0:1d:10:8b:7c:b5:52:b0:c5:4d: d3:ea:52:90:27:27:1f:10:35:f6:23:38:55:2a:22:3f:c9:5b: 6d:dc:6f:83:18:ac:32:74:c1:6a:07:53:03:4f:c0:5a:fd:7d: 4e:ae:2d:82:b3:90:90:31:3f:56:80:f5:48:b9:99:73:ef:1c: 7f:c8:27:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODU5MzExMC8GA1UEBRMoNjM2RkQxNDBEMDlFQ0E0RDE4RUYyQ0I3M0FFREIxMjQ3 OUZEQ0M5OTAeFw0yNTA1MTMwNzAwNTRaFw0yNTA1MjAwNzAwNTNaMBgxFjAUBgNV BAMTDTY4MjJlZTI2LTg3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Mbdog9cluDAlCQJNyK0r68fzS5m+nXJvzIdjnx4uVLQk1flXgbnaAdnawZaZ DtnTmBmsvZdIZmR+Pw7X+KqWPdWfZEi6HJ1DvtWeuPb2pL53buSS/FSZzroYNNPY ubLFGKyvuPx3LD820cWgv9eN8RxWRkAsjL8gTca0Zm2aQNRosiiFfbtnGCzhuerB PYRmnFqqThdNwHmgUBOdXkdtqIL600ZCZpRWRfibyz4J0giq2DH9Oix+qsJ+Grze SxqFYABy9UY71kJfq/9nku9fcNoMwsN+oAnq9/hLGYOHjE9IoBGogFOznka2gOn0 h5lJkMp5z84ACQ3x8FEkqLX1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB3akuwvp KiVENgLxYTMtkG4sj58wHwYDVR0jBBgwFoAUY2/RQNCeyk0Y7yy3Ou2xJHn9zJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NTkzLzFEMTU1OTg2RkE2 NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWswWTd5eTNPdTJ4SkhuOXpK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTJfUlFOQ2V5azBZN3l5M091MnhKSG45ekprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NTkzLzFEMTU1OTg2RkE2NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWsw WTd5eTNPdTJ4SkhuOXpKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFERlgw6Yrd3lSPOsQ0GSpAhwPNk0y3iRMXZoiSMVej59WE5dRPK6oSk DUUE3m7iKy2fY+saHQdYnGOaX5JzDzZ/4DXrle6XTuKGAQ1tkfs48SjgUToDRvj5 DuBeS8BouAl8gRB2oF2EBP5bcwtAEXpD9veQKmcmYpOf1CiPMICUQkYXfBY3Ewef XTugHyHhP8l9EESuM6L7m0ReD41MtgSQBhAR2+JjSOS765xMVA5/NRN9hhL5RXoI 1aXwwB0Qi3y1UrDFTdPqUpAnJx8QNfYjOFUqIj/JW23cb4MYrDJ0wWoHUwNPwFr9 fU6uLYKzkJAxP1aA9Ui5mXPvHH/IJ5Y= -----END CERTIFICATE-----Generated at Sat May 17 05:44:20 2025 by rpki-client