$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: pH684HJEihyeQ+TRH7xxGDRvPAqgT2HMkPe0noe7J9s= Subject key identifier: 1F:31:E5:14:36:BF:B1:6E:18:CB:55:4B:FB:04:52:B8:FA:FF:D8:0C Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 040B Signing time: Tue 13 May 2025 00:14:21 +0000 Manifest this update: Tue 13 May 2025 00:14:20 +0000 Manifest next update: Tue 20 May 2025 00:14:20 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: 8nQHHwIQmDKDv4881rWSrKAOcguXrk66IoLbOyri5g4=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: May 13 00:14:20 2025 GMT Not After : May 20 00:14:20 2025 GMT Subject: CN=68228edc-a1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:73:2e:26:29:d2:65:b7:cf:ab:7b:71:67: 43:79:6e:b8:fa:42:a6:fe:49:f5:b9:73:66:bf:6c: ba:13:3d:31:b5:2d:84:59:7b:d8:83:15:3f:cf:76: b8:d2:34:b6:6a:ab:f7:ab:78:59:5e:ac:98:0c:5c: f0:3d:db:3c:00:57:f8:d5:06:94:15:af:83:ad:f9: bf:8f:b6:fc:f7:5e:93:5f:07:a7:fc:96:b9:9a:df: 31:2c:14:4d:10:bd:e9:ec:f5:b5:b3:6b:54:53:96: e5:e0:57:2e:d2:72:03:94:74:f1:3a:5d:9c:5b:b4: 04:3e:78:8d:c9:7b:d6:44:d3:2b:be:b6:79:ac:a5: c6:47:d4:38:a1:9d:69:7d:1d:6f:6c:51:6b:0a:97: 7a:fe:19:bd:9e:18:7e:af:0c:ee:23:65:21:d0:44: 68:1b:df:a9:6d:da:01:9d:49:b7:dd:9c:8e:c2:7b: 05:9b:9b:e4:e4:32:7d:a5:9b:9e:95:22:15:e2:75: 6e:a3:05:73:04:1c:66:3c:8d:a4:50:8e:33:63:85: 17:28:ac:ef:78:42:d6:cb:dd:99:7c:a3:45:b8:48: 69:3b:4f:ad:a2:da:98:eb:a7:2a:6d:1a:59:20:c8: fe:24:13:86:68:e1:89:b4:5a:78:7f:a8:c5:d7:60: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:31:E5:14:36:BF:B1:6E:18:CB:55:4B:FB:04:52:B8:FA:FF:D8:0C X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:cd:2a:5c:b6:a5:69:41:8a:94:db:2e:3c:09:0f:f3:0d:dc: 7e:49:aa:07:17:a6:c0:67:a5:75:2b:3e:20:8b:66:00:ed:17: 3d:1f:c2:22:e8:81:e5:c7:47:54:a0:30:00:83:14:f6:df:11: c2:76:9e:1d:8f:ab:6a:1b:df:8c:35:8c:c5:f8:89:db:60:56: 6e:53:4b:4f:01:fc:4b:94:01:89:24:81:41:11:a5:e5:81:5a: 23:2b:4f:9b:80:cd:2f:9b:03:67:46:cf:d0:d6:ea:ad:2b:b2: cf:05:04:27:1a:08:3e:93:2e:26:35:14:3a:ac:8c:a1:fe:e7: 47:69:a5:f9:71:36:9c:14:a2:cf:78:2e:e6:04:fa:2e:ee:21: 71:27:00:19:f3:f5:61:60:56:8f:86:3a:e3:9d:a2:39:73:93: 58:2f:32:9b:1b:c5:73:62:e8:66:63:ca:86:76:7d:4c:f0:3c: ac:57:d1:f2:be:90:d8:72:f6:8b:cd:44:d7:f3:d9:50:e9:2c: fb:2b:ec:7a:fb:ca:d3:a2:25:6e:7b:30:b0:25:2b:72:dd:53: bd:a7:b3:2f:45:b0:7a:65:9f:bd:51:59:80:5b:61:ed:09:2d: c6:b0:5e:12:c5:9e:ef:9e:bd:a9:5b:fa:f0:8e:0a:22:1e:0b: 10:bc:d9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUwNTEzMDAxNDIwWhcNMjUwNTIwMDAxNDIwWjAYMRYwFAYD VQQDEw02ODIyOGVkYy1hMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4JzLiYp0mW3z6t7cWdDeW64+kKm/kn1uXNmv2y6Ez0xtS2EWXvYgxU/z3a4 0jS2aqv3q3hZXqyYDFzwPds8AFf41QaUFa+Drfm/j7b8916TXwen/Ja5mt8xLBRN EL3p7PW1s2tUU5bl4Fcu0nIDlHTxOl2cW7QEPniNyXvWRNMrvrZ5rKXGR9Q4oZ1p fR1vbFFrCpd6/hm9nhh+rwzuI2Uh0ERoG9+pbdoBnUm33ZyOwnsFm5vk5DJ9pZue lSIV4nVuowVzBBxmPI2kUI4zY4UXKKzveELWy92ZfKNFuEhpO0+totqY66cqbRpZ IMj+JBOGaOGJtFp4f6jF12AehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8x5RQ2 v7FuGMtVS/sEUrj6/9gMMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzzSpctqVpQYqU2y48CQ/zDdx+SaoHF6bAZ6V1Kz4gi2YA7Rc9H8Ii 6IHlx0dUoDAAgxT23xHCdp4dj6tqG9+MNYzF+InbYFZuU0tPAfxLlAGJJIFBEaXl gVojK0+bgM0vmwNnRs/Q1uqtK7LPBQQnGgg+ky4mNRQ6rIyh/udHaaX5cTacFKLP eC7mBPou7iFxJwAZ8/VhYFaPhjrjnaI5c5NYLzKbG8VzYuhmY8qGdn1M8DysV9Hy vpDYcvaLzUTX89lQ6Sz7K+x6+8rToiVuezCwJSty3VO9p7MvRbB6ZZ+9UVmAW2Ht CS3GsF4SxZ7vnr2pW/rwjgoiHgsQvNn3 -----END CERTIFICATE-----Generated at Tue May 13 16:15:38 2025 by rpki-client