$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json) Hash identifier: b1BWAtQG98ScsQPcf3w1/iAIiYhGCU4nQKr3L7cbt9s= Subject key identifier: 24:28:96:BD:95:85:D7:83:72:FA:21:B6:35:81:29:76:2A:77:AB:B9 Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft Manifest number: 9B Signing time: Fri 13 Jun 2025 05:13:53 +0000 Manifest this update: Fri 13 Jun 2025 05:13:53 +0000 Manifest next update: Fri 20 Jun 2025 05:13:53 +0000 Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: +jfj5aHqWqnPoJNpGPtQKYX1a4DuTXkOG0OFg0YqaWA=) 2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: HB8QMXYnImTcdy2zBeTOvUb91weeMYAQqjoTwrsvfrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Jun 13 05:13:53 2025 GMT Not After : Jun 20 05:13:53 2025 GMT Subject: CN=684bb391-6ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:5a:8a:2a:b0:37:a5:dc:6f:d8:96:ff:38: 26:e7:6b:71:67:e6:05:62:8c:2b:0e:8a:c8:c4:17: 5a:72:df:c5:5d:9f:83:ab:fd:0d:5f:c8:a3:d9:f9: b6:ee:8c:9c:dd:c2:0d:35:9e:4a:3f:48:02:ff:8c: 97:63:57:b1:37:d2:c6:2b:91:6f:50:c1:9c:97:78: fa:ed:20:70:92:65:11:9c:95:aa:4b:38:ce:90:71: a6:89:69:57:f7:cd:49:e5:16:16:34:01:4e:21:f6: 24:b5:3f:7b:8b:b1:b7:cb:16:e1:f5:5c:aa:26:76: 6e:f3:28:1d:de:28:79:2d:65:ba:20:71:33:40:6d: 1b:8f:99:05:8b:14:f9:86:75:25:e4:8a:d6:81:e5: 22:c4:a5:28:97:41:7f:59:89:56:c9:52:ce:f3:1b: b9:9e:e5:90:2f:51:5c:de:24:56:d5:9a:9a:ba:ed: e8:5e:10:d3:d6:f4:ca:42:3e:9f:53:21:33:2e:50: ee:ae:fb:e9:6e:11:f4:9f:57:0d:72:f5:f4:0b:f3: 8a:9f:3d:f6:7b:de:93:a2:0b:24:99:98:e6:31:87: e1:1c:57:25:cc:0c:8c:19:57:94:81:ef:86:69:42: f1:2c:5e:f7:1e:84:05:39:a1:34:97:1b:bd:7a:42: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:96:BD:95:85:D7:83:72:FA:21:B6:35:81:29:76:2A:77:AB:B9 X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:f6:89:ef:c0:b1:d0:57:f9:45:4b:a7:f7:1b:0d:93:11: 47:ed:75:be:47:ad:bd:f8:61:66:a4:15:87:6e:cd:cc:be:8b: e4:e5:46:0b:ee:60:27:cc:cb:39:52:38:87:85:8b:e3:15:27: 9c:e8:6e:00:f5:c8:1a:c4:60:b6:27:d5:d1:03:32:19:71:c4: 9b:1b:4e:4b:7c:71:eb:52:40:67:9d:d8:a1:4e:3f:44:f8:cd: f3:13:da:6b:3e:09:c7:91:d0:de:c1:a7:21:04:ae:c9:31:a0: 1e:29:13:db:90:c8:7d:17:e1:36:f8:e0:6e:b1:ae:e6:3e:bc: 01:c5:bc:51:45:be:28:6a:3a:9b:a8:2d:e3:68:57:0d:38:cf: dd:1f:af:06:b7:f3:71:48:5d:3b:a2:98:95:9a:0b:30:31:1d: 2f:9a:d8:14:51:53:37:91:56:ad:cd:3f:a8:f5:d3:2b:9d:e8: 7b:6f:2d:9d:16:8f:03:f5:38:ba:7a:7a:17:46:7e:3d:7d:29: aa:50:cf:e2:b3:d2:5b:92:95:e1:53:49:e8:9b:13:fa:4c:6c: 4f:42:88:07:7f:bd:3d:fb:91:b9:80:91:43:39:d3:19:4a:d0: f4:90:35:22:7b:8f:cb:cd:12:45:01:b9:7e:87:73:81:b1:85: d4:2e:fa:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUwNjEzMDUxMzUzWhcNMjUwNjIwMDUxMzUzWjAYMRYwFAYD VQQDEw02ODRiYjM5MS02ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc5aiiqwN6Xcb9iW/zgm52txZ+YFYowrDorIxBdact/FXZ+Dq/0NX8ij2fm2 7oyc3cINNZ5KP0gC/4yXY1exN9LGK5FvUMGcl3j67SBwkmURnJWqSzjOkHGmiWlX 981J5RYWNAFOIfYktT97i7G3yxbh9VyqJnZu8ygd3ih5LWW6IHEzQG0bj5kFixT5 hnUl5IrWgeUixKUol0F/WYlWyVLO8xu5nuWQL1Fc3iRW1Zqauu3oXhDT1vTKQj6f UyEzLlDurvvpbhH0n1cNcvX0C/OKnz32e96TogskmZjmMYfhHFclzAyMGVeUge+G aULxLF73HoQFOaE0lxu9ekLl4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQolr2V hdeDcvohtjWBKXYqd6u5MB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkIyNC84QTE2RkY3MjVCQTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklK UE5UV0RhcnhlMnJLRDNwUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPsfaJ78Cx0Ff5RUun9xsNkxFH7XW+R629+GFmpBWHbs3Mvovk5UYL 7mAnzMs5UjiHhYvjFSec6G4A9cgaxGC2J9XRAzIZccSbG05LfHHrUkBnndihTj9E +M3zE9prPgnHkdDewachBK7JMaAeKRPbkMh9F+E2+OBusa7mPrwBxbxRRb4oajqb qC3jaFcNOM/dH68Gt/NxSF07opiVmgswMR0vmtgUUVM3kVatzT+o9dMrneh7by2d Fo8D9Ti6enoXRn49fSmqUM/is9JbkpXhU0nomxP6TGxPQogHf709+5G5gJFDOdMZ StD0kDUie4/LzRJFAbl+h3OBsYXULvqf -----END CERTIFICATE-----Generated at Sat Jun 14 19:05:09 2025 by rpki-client