$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json) Hash identifier: SX22t56nOwsE5M9vO9On4dWFUv9Rme+/yF190vL4VSs= Subject key identifier: 23:F6:DE:C3:C7:94:57:7F:4E:94:0B:C8:B2:8F:CB:AF:C5:D1:B8:85 Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft Manifest number: 3C Signing time: Sun 11 May 2025 06:16:49 +0000 Manifest this update: Sun 11 May 2025 06:16:49 +0000 Manifest next update: Sun 18 May 2025 06:16:49 +0000 Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: Cj7IGBF5oJ85pIYiON0L4W0kGEDKm1p7t3A78yZ/4Bc=) 2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Validity Not Before: May 11 06:16:49 2025 GMT Not After : May 18 06:16:49 2025 GMT Subject: CN=682040d1-bc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:07:5f:05:d4:9c:6e:87:f0:fd:2f:4a:c4: e6:d7:23:36:90:02:0c:d4:42:f8:6c:be:11:34:8e: 2b:be:4c:7f:c6:79:1d:d3:78:6d:41:66:02:b6:55: 82:f9:0d:1f:fc:57:94:4e:64:af:c7:e2:60:b1:1e: 3b:2a:9e:3b:91:55:2c:5d:aa:8e:21:2f:28:5c:63: b2:08:5b:fb:e4:dd:07:84:40:cb:7c:d1:56:c9:d1: 81:00:e0:cd:c6:05:de:b5:01:e4:00:4e:fd:d4:af: ec:38:14:7c:f1:18:0f:9f:83:a4:9f:48:48:7a:35: ef:1a:d1:fd:fd:57:bc:e1:ff:ad:15:86:56:37:61: 0d:37:ba:9d:92:fa:13:65:68:e2:9f:84:33:a0:ad: a2:c3:47:2f:54:40:02:0e:2f:31:6a:c5:4d:21:16: 13:62:6a:fa:31:96:80:f4:95:3f:6f:f3:02:b4:09: c7:c1:cb:4f:c0:53:d6:08:b1:54:37:17:a3:ed:14: fb:bc:af:08:2c:93:04:4a:54:24:1d:4a:af:bd:14: 56:63:5f:1b:06:63:0f:73:85:44:94:47:b6:18:8c: a5:93:88:3c:4a:f4:8b:0a:80:d2:b4:27:da:e6:dd: 08:68:f1:5a:6d:c7:eb:de:67:ac:13:b3:d8:d2:8f: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F6:DE:C3:C7:94:57:7F:4E:94:0B:C8:B2:8F:CB:AF:C5:D1:B8:85 X509v3 Authority Key Identifier: keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c4:b3:e4:4d:76:f6:57:de:ce:7a:94:c6:eb:cf:35:84:48: 36:73:94:3f:81:f1:ef:29:d1:4a:49:75:92:20:55:d3:ff:9b: dc:71:11:fc:22:ea:d7:8d:1f:a8:c9:5a:0d:ff:79:83:10:9e: 6d:b5:82:61:4d:5e:13:e5:9f:01:e9:d3:82:06:87:7f:32:68: 80:3b:6f:69:14:4f:67:90:14:48:6b:94:13:be:97:65:c8:5b: 1b:96:99:dd:94:f9:1f:10:f3:9e:de:6f:49:28:e5:de:eb:88: cc:a8:33:be:e5:48:83:e6:7b:ba:c2:44:04:b5:48:97:5c:82: 1e:5b:4d:e5:a0:1d:2c:8b:a1:41:14:38:aa:8c:5a:71:70:37: c4:48:47:75:cf:9e:51:4e:e2:fc:46:5e:7a:21:d2:f2:94:83: b0:79:95:70:e1:75:74:da:c3:12:98:22:a5:7e:fa:1a:53:f4: 12:db:8e:f2:b5:94:58:51:a1:ee:af:3b:6b:ce:8c:42:06:f7: 93:fc:e8:9d:ae:f0:c6:42:6e:04:b5:9e:24:5f:a1:28:56:73: 15:8b:9f:e7:59:30:cd:a7:5a:02:39:41:c4:37:4e:4d:f8:e1: 51:17:5e:0a:28:0c:9d:0e:81:a8:97:60:49:2a:45:b9:00:e8: ef:bb:b8:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OENDMzExMC8GA1UEBRMoQzkxNkFFNUE5NTIwQjVGNjc2N0U3OUM5MTVBRkExQkY2 RTQ5MTg5OTAeFw0yNTA1MTEwNjE2NDlaFw0yNTA1MTgwNjE2NDlaMBgxFjAUBgNV BAMTDTY4MjA0MGQxLWJjMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaaAdfBdScbofw/S9KxObXIzaQAgzUQvhsvhE0jiu+TH/GeR3TeG1BZgK2VYL5 DR/8V5ROZK/H4mCxHjsqnjuRVSxdqo4hLyhcY7IIW/vk3QeEQMt80VbJ0YEA4M3G Bd61AeQATv3Ur+w4FHzxGA+fg6SfSEh6Ne8a0f39V7zh/60VhlY3YQ03up2S+hNl aOKfhDOgraLDRy9UQAIOLzFqxU0hFhNiavoxloD0lT9v8wK0CcfBy0/AU9YIsVQ3 F6PtFPu8rwgskwRKVCQdSq+9FFZjXxsGYw9zhUSUR7YYjKWTiDxK9IsKgNK0J9rm 3Qho8Vptx+veZ6wTs9jSj/s1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI/bew8eU V39OlAvIso/Lr8XRuIUwHwYDVR0jBBgwFoAUyRauWpUgtfZ2fnnJFa+hv25JGJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Q0MzL0VEREEzNkUyRDcy MzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJhdVdwVWd0ZloyZm5uSkZhLWh2MjVKR0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 Q0MzL0VEREEzNkUyRDcyMzExRUZBMjI2OTQxOUM0RjlBRTAyL3lSYXVXcFVndGZa MmZubkpGYS1odjI1SkdKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3Es+RNdvZX3s56lMbrzzWESDZzlD+B8e8p0UpJdZIgVdP/m9xxEfwi 6teNH6jJWg3/eYMQnm21gmFNXhPlnwHp04IGh38yaIA7b2kUT2eQFEhrlBO+l2XI WxuWmd2U+R8Q857eb0ko5d7riMyoM77lSIPme7rCRAS1SJdcgh5bTeWgHSyLoUEU OKqMWnFwN8RIR3XPnlFO4vxGXnoh0vKUg7B5lXDhdXTawxKYIqV++hpT9BLbjvK1 lFhRoe6vO2vOjEIG95P86J2u8MZCbgS1niRfoShWcxWLn+dZMM2nWgI5QcQ3Tk34 4VEXXgooDJ0OgaiXYEkqRbkA6O+7uCU= -----END CERTIFICATE-----Generated at Tue May 13 04:59:13 2025 by rpki-client