$ rpki-client -vvf rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft File: ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft (raw, json) Hash identifier: 1VqfOe359M3uzsutodb5LOv0uF/nytjyibceFPbN/E4= Subject key identifier: FE:BD:41:60:F9:8F:32:7E:AC:DF:20:83:88:21:C5:4E:38:45:E7:70 Authority key identifier: CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 Certificate issuer: /CN=A9193037/serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft Manifest number: 08F1 Signing time: Fri 16 May 2025 20:41:26 +0000 Manifest this update: Fri 16 May 2025 20:41:25 +0000 Manifest next update: Fri 23 May 2025 20:41:25 +0000 Files and hashes: 1: ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl (hash: tau19ehcEDj1PqrL5jNs6c5bmH33sGcKnMHhC5asehQ=) 2: D9C523A0B05A11EAA233021EC4F9AE02.roa (hash: plSH71jqFHiqVOcppEgGivQOT8E3EqzsKsifhjqPdW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193037, serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Validity Not Before: May 16 20:41:25 2025 GMT Not After : May 23 20:41:25 2025 GMT Subject: CN=6827a2f5-6565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:a9:b0:53:1f:ef:7e:ce:6e:c8:2d:7b:89: ec:bb:43:ec:de:6e:d7:33:e3:a2:4c:b1:e7:33:1d: 21:37:af:43:19:b8:0c:12:46:a5:85:43:76:ca:a9: c7:73:f7:ac:0b:a4:a6:9e:18:6a:98:9b:1d:42:4d: 92:88:98:5c:39:16:63:8c:9d:39:82:e4:c5:66:ca: 88:49:8d:f6:9b:83:a8:4c:2a:a0:8e:70:db:95:17: 9a:4a:00:96:ac:95:36:0d:21:cd:17:1c:4f:c0:89: 8b:66:1c:29:17:4f:c0:5f:5a:ae:c4:dd:46:da:cc: 24:19:b5:b8:46:0a:3d:4a:a3:f1:3f:28:46:ed:f2: 29:a6:3f:35:6d:2a:0f:d8:bc:38:73:cf:f2:ad:f2: a8:5c:32:22:6f:f0:2f:43:00:b8:e8:cb:e8:c6:96: b9:ef:ff:8c:23:ba:64:ce:6d:eb:12:e7:ab:c7:0a: f5:a5:36:f5:52:44:4b:1f:46:2c:16:f3:6d:95:29: b3:4c:d0:ef:fe:dc:a1:34:63:6f:f2:95:69:e2:d4: 77:01:5e:5c:d4:27:c3:68:3a:9e:a9:d9:5f:71:25: d0:bf:09:15:b6:33:12:95:f1:dc:9a:5e:1b:b3:c1: 2c:bb:16:bf:ac:d0:81:4f:47:78:bd:81:b2:46:f8: fd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:41:60:F9:8F:32:7E:AC:DF:20:83:88:21:C5:4E:38:45:E7:70 X509v3 Authority Key Identifier: keyid:CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:be:e2:34:2f:16:4d:ca:6c:8d:31:45:11:f0:d8:c4:10:14: b1:58:ff:dc:70:15:07:42:7a:b4:12:11:1e:3f:b2:ad:30:18: c4:77:ea:d2:b4:02:15:86:05:44:8e:cb:fe:63:1a:c1:32:bf: f0:42:52:3c:42:9b:46:2e:68:d8:a0:93:2d:61:37:02:bf:dc: 9a:9f:eb:a1:43:ea:52:a7:a7:ac:01:08:75:71:c9:e3:47:4e: 82:3e:94:37:b0:d9:ae:b5:66:13:69:6f:aa:53:95:9a:8a:b1: e2:d8:6f:77:59:a5:1e:b5:cd:f3:78:b0:ec:9e:8d:c0:a2:20: 69:58:b0:63:97:f4:9b:03:3d:b6:96:e0:c5:fd:42:eb:3d:62: 7d:42:25:1f:4f:94:5a:5b:d1:53:58:f1:b8:64:d8:4a:75:f6: 56:9a:18:21:77:3e:4f:60:27:70:eb:f1:6c:d5:c3:21:9c:ff: d4:12:c4:88:97:e9:01:79:aa:1f:aa:e0:9a:c0:f8:1f:df:1f: 62:b5:f1:bb:9b:ce:1b:8e:a7:08:4f:70:b0:62:f7:97:2a:ff: 8f:78:95:fd:28:41:f8:fa:8a:77:bf:d5:b9:aa:f5:d7:36:00: 84:91:82:e6:10:a9:5b:4a:fe:84:52:f5:a3:b6:8f:82:f8:56: 99:bd:7d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwMzcxMTAvBgNVBAUTKENBOTU1OTE0Rjk4QjJGQzkxNkE0NTEyREE3MkFCNzVB MTFDNTJCRDAwHhcNMjUwNTE2MjA0MTI1WhcNMjUwNTIzMjA0MTI1WjAYMRYwFAYD VQQDEw02ODI3YTJmNS02NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hGpsFMf737Obsgte4nsu0Ps3m7XM+OiTLHnMx0hN69DGbgMEkalhUN2yqnH c/esC6SmnhhqmJsdQk2SiJhcORZjjJ05guTFZsqISY32m4OoTCqgjnDblReaSgCW rJU2DSHNFxxPwImLZhwpF0/AX1quxN1G2swkGbW4Rgo9SqPxPyhG7fIppj81bSoP 2Lw4c8/yrfKoXDIib/AvQwC46Mvoxpa57/+MI7pkzm3rEuerxwr1pTb1UkRLH0Ys FvNtlSmzTNDv/tyhNGNv8pVp4tR3AV5c1CfDaDqeqdlfcSXQvwkVtjMSlfHcml4b s8Esuxa/rNCBT0d4vYGyRvj9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP69QWD5 jzJ+rN8gg4ghxU44RedwMB8GA1UdIwQYMBaAFMqVWRT5iy/JFqRRLacqt1oRxSvQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzAzNy85NDBFNDZCNEFB QkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4a1dwRkV0cHlxM1doSEZL OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwVlpGUG1MTDhrV3BGRXRweXEzV2hIRks5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzAzNy85NDBFNDZCNEFBQkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4 a1dwRkV0cHlxM1doSEZLOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRvuI0LxZNymyNMUUR8NjEEBSxWP/ccBUHQnq0EhEeP7KtMBjEd+rS tAIVhgVEjsv+YxrBMr/wQlI8QptGLmjYoJMtYTcCv9yan+uhQ+pSp6esAQh1ccnj R06CPpQ3sNmutWYTaW+qU5WairHi2G93WaUetc3zeLDsno3AoiBpWLBjl/SbAz22 luDF/ULrPWJ9QiUfT5RaW9FTWPG4ZNhKdfZWmhghdz5PYCdw6/Fs1cMhnP/UEsSI l+kBeaofquCawPgf3x9itfG7m84bjqcIT3CwYveXKv+PeJX9KEH4+op3v9W5qvXX NgCEkYLmEKlbSv6EUvWjto+C+FaZvX10 -----END CERTIFICATE-----Generated at Sat May 17 05:55:08 2025 by rpki-client