$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft (raw, json) Hash identifier: X4wlqSXAGnKoFN1uUMRMxLDISt4OXNBzexNTMOsGBUk= Subject key identifier: B1:32:26:31:B8:7B:B5:16:44:B3:6F:9E:A4:0D:DE:3C:3F:42:87:33 Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6 Certificate issuer: /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft Manifest number: 09 Signing time: Sun 11 May 2025 06:51:39 +0000 Manifest this update: Sun 11 May 2025 06:51:38 +0000 Manifest next update: Sun 18 May 2025 06:51:38 +0000 Files and hashes: 1: ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl (hash: bMXeFK+fA+yNqvABpo0OaqO7M4qk0B9ZVrKl7Xao1GM=) 2: 45D237A423E211F0A5DCED27C4F9AE02.roa (hash: 3wfdkAiEkFODU6B4YeHm0vdAyiuwr8rUvXL2nV5+auc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6 Validity Not Before: May 11 06:51:38 2025 GMT Not After : May 18 06:51:38 2025 GMT Subject: CN=682048fa-2481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:a0:f5:d1:ac:5a:2d:6e:89:60:7d:76:f9: 0e:40:49:25:6a:63:eb:13:32:ca:16:ef:67:28:a8: d6:b7:97:bc:6b:16:59:7f:91:38:cb:25:c7:c8:65: 58:a0:83:a7:b6:6b:e0:ff:62:ea:5a:c4:9d:3c:7f: 96:98:9f:1d:b6:8f:4b:e7:c3:41:8c:f8:98:c8:11: 43:3e:6b:10:f7:51:42:81:eb:7f:81:17:fa:92:25: 74:c3:88:8c:35:ba:ea:12:82:27:8c:82:97:76:ce: 01:55:f9:8b:c6:50:b2:11:77:62:9b:8a:2e:6d:ea: 1c:7c:ed:7a:c4:54:f7:2e:e5:dd:2b:c4:37:e7:cd: 40:e4:52:2c:42:df:ac:19:22:fe:6c:d0:b9:b6:6a: 62:b5:c2:80:a0:71:9f:a8:0c:3f:62:33:aa:4b:17: b2:ee:f4:85:2d:d1:4a:30:3d:ba:c5:8c:ba:0c:2b: 8a:16:06:ca:62:cc:a8:db:09:2d:6a:5c:fa:9c:43: 75:ea:9b:c7:11:42:60:73:6c:e3:5a:37:b1:15:23: 16:15:aa:7d:7e:e4:0f:a2:3c:70:fb:ee:93:55:3e: 85:fe:0e:e9:6a:45:e0:4d:88:0d:c6:f3:65:8b:24: 36:bb:8a:35:d0:ae:72:26:80:9c:7a:a4:5c:95:d4: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:26:31:B8:7B:B5:16:44:B3:6F:9E:A4:0D:DE:3C:3F:42:87:33 X509v3 Authority Key Identifier: keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:94:fb:e5:17:f2:1b:dc:d3:18:df:25:48:4d:70:e9:a7:6d: e5:bd:56:94:25:65:0c:e5:2b:ef:55:39:1b:bc:82:0a:09:91: 9c:8c:3e:80:90:e5:53:e5:be:52:f1:81:f6:fe:51:00:13:e9: a5:b0:eb:b4:92:56:59:77:bd:5b:96:59:17:9f:21:ac:74:4c: 1d:aa:78:ff:1f:42:87:5b:49:30:d0:11:4f:55:91:25:e1:f6: f1:64:85:7f:e3:02:07:83:29:53:72:e0:c5:3e:e6:50:d5:8c: 0b:0a:40:ec:1c:ba:4e:67:e5:d1:a4:86:9b:c9:ad:92:d3:a7: 5b:a0:a5:aa:18:15:cd:71:6f:4e:44:bb:f9:48:d7:e6:7f:34: ab:76:ee:0d:8d:ef:a3:43:6f:5b:61:2a:d8:dd:58:b6:a8:d7: f3:e7:00:db:0e:36:2f:cb:ba:b2:29:e0:d1:d7:d6:fa:c0:98: aa:00:62:0f:d1:4c:70:ad:18:44:45:fd:1e:7b:24:c4:f4:6b: a1:02:9a:54:05:a9:1e:ea:3e:40:81:ec:a7:8e:61:8c:c7:b8: b1:cc:6e:7f:67:02:70:b4:2c:d4:e6:e0:39:3d:57:35:a6:fc: dc:18:f9:70:2e:09:05:6f:9f:e8:42:5b:a1:28:9a:90:5c:84: b4:3d:64:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY1NjExMC8GA1UEBRMoQzlDMzBCN0M1N0UyRjAxNkRCMUYwMUMwOUU1OTJFMDUw NDc0QzlBNjAeFw0yNTA1MTEwNjUxMzhaFw0yNTA1MTgwNjUxMzhaMBgxFjAUBgNV BAMTDTY4MjA0OGZhLTI0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG5qD10axaLW6JYH12+Q5ASSVqY+sTMsoW72coqNa3l7xrFll/kTjLJcfIZVig g6e2a+D/YupaxJ08f5aYnx22j0vnw0GM+JjIEUM+axD3UUKB63+BF/qSJXTDiIw1 uuoSgieMgpd2zgFV+YvGULIRd2Kbii5t6hx87XrEVPcu5d0rxDfnzUDkUixC36wZ Iv5s0Lm2amK1woCgcZ+oDD9iM6pLF7Lu9IUt0UowPbrFjLoMK4oWBspizKjbCS1q XPqcQ3Xqm8cRQmBzbONaN7EVIxYVqn1+5A+iPHD77pNVPoX+DulqReBNiA3G82WL JDa7ijXQrnImgJx6pFyV1F2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsTImMbh7 tRZEs2+epA3ePD9ChzMwHwYDVR0jBBgwFoAUycMLfFfi8BbbHwHAnlkuBQR0yaYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjU2L0E1RTdDRDc2MjNF MTExRjBBNjUwRUEyM0M0RjlBRTAyL3ljTUxmRmZpOEJiYkh3SEFubGt1QlFSMHlh WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWNNTGZGZmk4QmJiSHdIQW5sa3VCUVIweWFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NjU2L0E1RTdDRDc2MjNFMTExRjBBNjUwRUEyM0M0RjlBRTAyL3ljTUxmRmZpOEJi Ykh3SEFubGt1QlFSMHlhWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISU++UX8hvc0xjfJUhNcOmnbeW9VpQlZQzlK+9VORu8ggoJkZyMPoCQ 5VPlvlLxgfb+UQAT6aWw67SSVll3vVuWWRefIax0TB2qeP8fQodbSTDQEU9VkSXh 9vFkhX/jAgeDKVNy4MU+5lDVjAsKQOwcuk5n5dGkhpvJrZLTp1ugpaoYFc1xb05E u/lI1+Z/NKt27g2N76NDb1thKtjdWLao1/PnANsONi/LurIp4NHX1vrAmKoAYg/R THCtGERF/R57JMT0a6ECmlQFqR7qPkCB7KeOYYzHuLHMbn9nAnC0LNTm4Dk9VzWm /NwY+XAuCQVvn+hCW6EompBchLQ9ZBw= -----END CERTIFICATE-----Generated at Mon May 12 16:11:05 2025 by rpki-client