$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: VSRcBo+LWKpme3VCjEBppjRqoKMLBehUk4I6jg9t+vM= Subject key identifier: 9D:9F:41:94:C1:50:49:30:FF:5A:39:CE:0A:FD:73:23:75:0F:74:5E Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 016B Signing time: Sun 15 Jun 2025 03:08:13 +0000 Manifest this update: Sun 15 Jun 2025 03:08:12 +0000 Manifest next update: Sun 22 Jun 2025 03:08:12 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: jyQ0qIMS5n+o0BTn0FQDFGqgvYqjhPMZCfeUD1MidA8=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: +bSIgtlzLpxye6Dc57u3Y5cAYurLZS353ZEqcNfs/mc=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: F0IorjVoRNdR/rnfERSJA3kDGcWRN5xMt/uZPHyNwMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jun 15 03:08:12 2025 GMT Not After : Jun 22 03:08:12 2025 GMT Subject: CN=684e391d-76f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:a8:8f:f3:37:53:4f:b3:e7:d1:2b:6d:96: 35:77:0c:25:15:72:c6:54:57:99:41:5a:fd:fe:e5: f0:83:49:b4:80:c4:32:3a:b3:49:6d:ab:c3:55:e6: 2f:fa:0a:60:a7:0c:fd:d5:dd:6c:3a:69:92:15:69: 06:41:20:ed:f7:e2:d0:15:0c:62:00:93:40:3c:85: f8:41:4e:c0:41:c4:2f:ab:fc:09:d0:ca:9b:eb:95: dc:b6:e1:b9:f1:f2:ef:87:7d:49:e0:86:ce:63:10: 26:63:96:2a:c1:01:c1:97:7b:75:ef:bc:c0:e9:62: ee:18:c5:2f:39:c1:0b:e9:54:cc:03:fb:8a:ad:10: fb:0e:6f:82:ad:f9:03:21:9e:93:4c:ed:b1:66:26: 5e:bc:c0:9d:39:2c:80:c1:80:22:33:00:f2:14:87: de:94:1c:1b:78:47:26:16:f0:ee:c4:e0:a2:03:b9: 8f:24:b3:d5:f8:08:d8:b0:df:a7:d1:8c:70:82:f9: f0:c3:7b:82:56:44:30:2d:ab:26:62:fe:8c:02:2c: b7:6d:56:0e:24:d0:73:af:3e:13:6c:b5:4d:e9:f0: 50:47:d5:5b:aa:f7:b0:0f:2a:79:94:1e:58:7a:7d: 83:04:f6:b7:a7:bc:de:ab:82:6c:aa:d0:be:ee:3a: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:41:94:C1:50:49:30:FF:5A:39:CE:0A:FD:73:23:75:0F:74:5E X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:25:22:56:63:f0:e7:2b:21:e9:5f:b7:f7:7a:b6:42:69:a9: e0:f2:4b:dc:8b:42:e4:f3:ad:7b:bc:03:cd:25:76:ef:c5:9b: e8:2a:ca:e8:67:f0:8d:11:79:48:df:98:92:3e:9b:a5:5e:2e: 80:1e:65:8f:2e:6b:ac:05:9d:03:7b:f1:d0:51:fe:af:95:da: 6e:fc:98:96:c0:df:88:c1:56:9b:0c:13:89:99:81:13:c0:88: fa:15:50:ff:38:93:96:60:0d:b8:53:72:8f:5b:d5:a2:ca:1a: 4a:72:d3:26:04:49:ef:84:92:9d:5a:33:24:0a:52:69:b8:86: 25:81:47:d3:b5:b8:95:ff:54:06:ae:d8:51:35:e6:e4:c1:87: 12:64:35:23:5e:82:4f:36:f2:d7:b4:bc:7c:e2:7b:88:f6:ea: 8b:69:da:a5:30:bd:2c:93:35:bc:b5:51:14:c7:73:30:ea:2d: 27:84:d5:54:a6:d8:1a:31:e2:80:58:c2:77:43:f1:46:03:e7: 49:40:a4:af:75:55:8f:0a:aa:be:57:b9:d9:9e:f4:a9:61:30: 5a:52:19:2b:53:a6:af:a1:a4:68:ec:d5:c1:a5:63:cc:5e:78: 56:fa:da:b6:4b:cf:78:3c:ea:04:d8:6a:a0:b4:26:fd:f5:4c: 67:3a:d1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNjE1MDMwODEyWhcNMjUwNjIyMDMwODEyWjAYMRYwFAYD VQQDEw02ODRlMzkxZC03NmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygCoj/M3U0+z59ErbZY1dwwlFXLGVFeZQVr9/uXwg0m0gMQyOrNJbavDVeYv +gpgpwz91d1sOmmSFWkGQSDt9+LQFQxiAJNAPIX4QU7AQcQvq/wJ0Mqb65XctuG5 8fLvh31J4IbOYxAmY5YqwQHBl3t177zA6WLuGMUvOcEL6VTMA/uKrRD7Dm+CrfkD IZ6TTO2xZiZevMCdOSyAwYAiMwDyFIfelBwbeEcmFvDuxOCiA7mPJLPV+AjYsN+n 0Yxwgvnww3uCVkQwLasmYv6MAiy3bVYOJNBzrz4TbLVN6fBQR9VbqvewDyp5lB5Y en2DBPa3p7zeq4JsqtC+7jqeEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2fQZTB UEkw/1o5zgr9cyN1D3ReMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJSJWY/DnKyHpX7f3erZCaang8kvci0Lk8617vAPNJXbvxZvoKsro Z/CNEXlI35iSPpulXi6AHmWPLmusBZ0De/HQUf6vldpu/JiWwN+IwVabDBOJmYET wIj6FVD/OJOWYA24U3KPW9WiyhpKctMmBEnvhJKdWjMkClJpuIYlgUfTtbiV/1QG rthRNebkwYcSZDUjXoJPNvLXtLx84nuI9uqLadqlML0skzW8tVEUx3Mw6i0nhNVU ptgaMeKAWMJ3Q/FGA+dJQKSvdVWPCqq+V7nZnvSpYTBaUhkrU6avoaRo7NXBpWPM XnhW+tq2S894POoE2GqgtCb99UxnOtHk -----END CERTIFICATE-----Generated at Sun Jun 15 10:20:50 2025 by rpki-client