$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: AuQUfi4Mb5iyy2sOte0WuVXl0B61hBjYyjCuoKhrX2Y= Subject key identifier: 55:8D:11:3C:1C:9E:E1:00:49:2C:92:AB:BC:68:9E:15:2C:CD:86:6B Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 0604 Signing time: Mon 12 May 2025 23:40:30 +0000 Manifest this update: Mon 12 May 2025 23:40:30 +0000 Manifest next update: Mon 19 May 2025 23:40:29 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: bZs8omqLN0E+7RydxqVzO4lbSRW5XWx925/rTcP55qc=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: May 12 23:40:30 2025 GMT Not After : May 19 23:40:29 2025 GMT Subject: CN=682286ee-88ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:e1:06:8c:7b:74:b4:4f:ac:93:53:3b:ff: c5:28:94:80:18:1e:08:55:63:21:28:bd:ea:c7:7f: 3f:72:8f:99:87:a5:31:3a:64:7e:a0:a6:78:44:8e: d3:a1:18:84:de:93:05:0f:56:5a:b5:20:bd:11:3c: 01:40:11:43:53:20:28:eb:04:bf:79:fd:b6:14:c5: 31:02:e1:31:3e:26:3d:c7:64:85:55:ce:10:c0:44: 77:2a:75:bc:4a:df:8a:f7:9d:0d:bd:d1:d1:e3:d1: 73:89:4a:19:0f:eb:c0:15:7e:e2:80:44:e0:2c:71: bf:db:7d:c9:ab:15:d2:b0:cb:c9:f0:52:c0:53:d8: 5a:f8:23:c8:02:78:5b:41:0c:fe:70:45:b2:5f:a8: 4d:c5:26:c4:17:18:8d:89:77:c9:ab:4c:99:73:8b: b6:11:45:dc:1e:96:12:e6:2f:db:d0:46:d1:c0:48: 4b:81:1f:4f:17:66:14:e0:b1:d6:fa:c1:16:71:bd: 40:2d:c6:85:e7:7d:81:7e:7d:ab:b9:81:09:5d:10: 11:db:f4:e1:cb:b2:8c:08:ec:f0:e2:74:6c:fc:77: b4:d5:cf:1b:d6:04:48:69:0a:b5:c0:28:4f:ca:05: 1e:c4:71:d8:dc:9e:7e:4e:5c:e2:b7:7d:d7:fd:33: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:11:3C:1C:9E:E1:00:49:2C:92:AB:BC:68:9E:15:2C:CD:86:6B X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:be:e8:fe:c6:6f:92:92:8e:ae:3b:77:bf:37:20:ba:7e:14: da:f8:08:96:b7:c4:ae:72:14:c4:a6:8a:a2:fa:0e:ad:5c:be: 91:5d:e1:20:2e:0c:01:3f:05:b2:be:46:b4:ad:ae:ca:28:32: d9:18:a7:9c:12:be:1f:fc:a4:cc:d7:1a:39:82:3e:19:de:15: 90:44:00:a2:94:fa:79:29:3a:ce:4d:20:b8:76:80:a5:b6:42: 02:de:b9:0c:27:ca:5f:44:82:bc:db:03:af:49:f4:c1:0d:bb: b0:d0:d3:05:74:96:c4:fa:ec:f3:d2:10:03:2c:66:a4:e4:87: 6f:ea:a8:34:91:27:ea:db:1d:5e:01:a7:ce:ee:67:7a:38:75: dc:b3:97:cb:5d:73:91:32:63:59:0c:b3:bc:aa:23:3d:7c:96: ea:b7:02:cb:1f:e2:69:44:77:d8:c0:de:e8:55:31:40:ce:01: 54:a4:ca:c7:aa:7f:cc:9a:11:e2:25:ac:c5:c0:b8:4b:21:d8: 57:4b:31:24:82:60:ec:ee:32:bd:fc:ad:b6:ff:a5:8e:c0:ba: ec:b0:28:cd:fe:ac:95:9a:8e:f4:cd:a0:42:8a:dc:97:6e:7f: e1:63:cd:d2:8a:e8:dc:3c:76:20:ec:5b:4e:87:82:fb:d9:f8: e5:39:53:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwNTEyMjM0MDMwWhcNMjUwNTE5MjM0MDI5WjAYMRYwFAYD VQQDEw02ODIyODZlZS04OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupjhBox7dLRPrJNTO//FKJSAGB4IVWMhKL3qx38/co+Zh6UxOmR+oKZ4RI7T oRiE3pMFD1ZatSC9ETwBQBFDUyAo6wS/ef22FMUxAuExPiY9x2SFVc4QwER3KnW8 St+K950NvdHR49FziUoZD+vAFX7igETgLHG/233JqxXSsMvJ8FLAU9ha+CPIAnhb QQz+cEWyX6hNxSbEFxiNiXfJq0yZc4u2EUXcHpYS5i/b0EbRwEhLgR9PF2YU4LHW +sEWcb1ALcaF532Bfn2ruYEJXRAR2/Thy7KMCOzw4nRs/He01c8b1gRIaQq1wChP ygUexHHY3J5+Tlzit33X/TMnxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWNETwc nuEASSySq7xonhUszYZrMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkvuj+xm+Sko6uO3e/NyC6fhTa+AiWt8SuchTEpoqi+g6tXL6RXeEg LgwBPwWyvka0ra7KKDLZGKecEr4f/KTM1xo5gj4Z3hWQRACilPp5KTrOTSC4doCl tkIC3rkMJ8pfRIK82wOvSfTBDbuw0NMFdJbE+uzz0hADLGak5Idv6qg0kSfq2x1e AafO7md6OHXcs5fLXXORMmNZDLO8qiM9fJbqtwLLH+JpRHfYwN7oVTFAzgFUpMrH qn/MmhHiJazFwLhLIdhXSzEkgmDs7jK9/K22/6WOwLrssCjN/qyVmo70zaBCityX bn/hY83SiujcPHYg7FtOh4L72fjlOVO+ -----END CERTIFICATE-----Generated at Tue May 13 07:54:54 2025 by rpki-client