$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: e7JVnHziea5sr+KQmw9PcQj7QC4fbG83OtwTtcR+xkw= Subject key identifier: 2E:B1:44:29:32:D8:17:2C:E6:67:E3:7A:F9:38:F0:2F:2D:DB:6E:83 Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 0423 Signing time: Tue 01 Jul 2025 00:54:59 +0000 Manifest this update: Tue 01 Jul 2025 00:54:59 +0000 Manifest next update: Tue 08 Jul 2025 00:54:59 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: DLXWcLFzHYOUmBAMRlD6CAirxiAMT+bOMHc6NS6bAC4=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Jul 1 00:54:59 2025 GMT Not After : Jul 8 00:54:59 2025 GMT Subject: CN=686331e3-cc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:05:f6:c5:ec:81:f7:15:65:c5:5d:b7:f1: ca:d5:84:61:88:67:84:a6:7c:34:3e:7f:11:06:02: c2:aa:b1:d1:55:a2:b3:bd:ad:16:f1:13:a6:7d:44: 30:55:6c:7d:ec:a5:11:8c:5c:88:d3:77:ba:19:cd: b0:7b:41:8b:7a:46:f3:b3:f1:de:36:c4:84:51:d4: 8c:ee:8b:ef:db:16:98:a7:3d:71:ec:91:5f:ac:6b: 07:b9:18:24:9a:c2:8d:de:68:96:8a:be:6d:06:48: 64:05:9a:53:c3:e7:f4:02:d5:02:bb:1c:d1:31:be: 44:15:19:1d:58:7b:2c:7e:c5:71:c8:5f:ad:d8:eb: df:ab:a7:8e:ba:25:2d:f0:a0:8f:9a:87:e7:d3:39: a9:c4:c7:98:16:b5:7f:00:ee:7a:4c:27:76:a4:07: ce:21:59:e9:d4:d9:96:97:88:a6:f5:f6:dc:08:a2: ca:10:00:75:89:7b:a1:19:52:33:36:85:99:10:4f: fe:45:3d:a4:f9:a1:45:e8:3c:7a:c5:f2:0a:5b:c6: c2:21:33:4c:01:50:15:2b:75:c2:b3:fe:8a:56:a0: a5:cd:be:0d:fc:f9:d8:98:37:78:4f:1b:e0:5c:b9: fd:8f:1d:47:73:e4:af:35:a5:87:ff:a1:8d:b3:b2: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B1:44:29:32:D8:17:2C:E6:67:E3:7A:F9:38:F0:2F:2D:DB:6E:83 X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:35:76:ee:05:93:aa:75:53:64:7d:2c:d4:17:9c:72:06:df: 01:cc:6d:ba:c0:36:f7:bd:3e:a8:d9:ae:a2:60:4c:f6:45:32: 1b:a2:50:8e:a1:67:aa:4f:c3:48:14:27:3b:84:d7:e2:06:c6: 3c:5c:33:e8:e2:bf:dd:fb:0a:83:aa:ab:2f:1b:c4:44:8e:df: 05:83:15:d7:40:35:0a:0d:5f:a1:40:39:a7:37:70:85:12:51: 29:ac:0a:b2:67:a8:d0:eb:af:67:ee:9f:3b:cc:89:e9:9f:39: 03:a9:70:4b:98:2a:9b:0f:0d:78:0a:ea:db:29:ae:c0:4e:80: 51:dc:36:69:c0:aa:33:31:4a:1d:9a:1e:ea:e1:a3:7a:0c:96: c3:6b:1a:ce:d8:2d:56:77:ab:68:8b:b8:77:ec:bd:a7:76:8d: 39:4c:be:85:5c:f3:b6:86:de:f5:fb:3e:52:6c:94:28:31:13: 0f:3e:4a:fe:f7:e0:da:fd:98:4b:9d:5f:d6:37:b0:e4:12:c7: bb:1c:42:dd:28:ac:76:dc:a1:42:6b:17:c3:3e:4b:36:f7:b8: 69:68:08:c4:6a:ed:6a:ae:56:eb:4d:06:e8:af:2a:b2:ef:39: a3:5f:43:ca:a5:8c:af:0d:a3:d7:27:6f:e4:b5:45:ea:8a:58: 52:a4:67:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUwNzAxMDA1NDU5WhcNMjUwNzA4MDA1NDU5WjAYMRYwFAYD VQQDEw02ODYzMzFlMy1jYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBcF9sXsgfcVZcVdt/HK1YRhiGeEpnw0Pn8RBgLCqrHRVaKzva0W8ROmfUQw VWx97KURjFyI03e6Gc2we0GLekbzs/HeNsSEUdSM7ovv2xaYpz1x7JFfrGsHuRgk msKN3miWir5tBkhkBZpTw+f0AtUCuxzRMb5EFRkdWHssfsVxyF+t2Ovfq6eOuiUt 8KCPmofn0zmpxMeYFrV/AO56TCd2pAfOIVnp1NmWl4im9fbcCKLKEAB1iXuhGVIz NoWZEE/+RT2k+aFF6Dx6xfIKW8bCITNMAVAVK3XCs/6KVqClzb4N/PnYmDd4Txvg XLn9jx1Hc+SvNaWH/6GNs7J+nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6xRCky 2Bcs5mfjevk48C8t226DMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkNXbuBZOqdVNkfSzUF5xyBt8BzG26wDb3vT6o2a6iYEz2RTIbolCO oWeqT8NIFCc7hNfiBsY8XDPo4r/d+wqDqqsvG8REjt8FgxXXQDUKDV+hQDmnN3CF ElEprAqyZ6jQ669n7p87zInpnzkDqXBLmCqbDw14CurbKa7AToBR3DZpwKozMUod mh7q4aN6DJbDaxrO2C1Wd6toi7h37L2ndo05TL6FXPO2ht71+z5SbJQoMRMPPkr+ 9+Da/ZhLnV/WN7DkEse7HELdKKx23KFCaxfDPks297hpaAjEau1qrlbrTQboryqy 7zmjX0PKpYyvDaPXJ2/ktUXqilhSpGfO -----END CERTIFICATE-----Generated at Wed Jul 2 22:34:37 2025 by rpki-client