$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: o+mdqqk5lqVxN2/hNCbf/PGe9N8XsXlrtFlbOv8U+Bw= Subject key identifier: 42:49:9E:6F:34:8C:18:4F:E5:46:5D:F9:54:B3:60:44:FD:8E:EC:CE Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 50 Signing time: Fri 13 Jun 2025 06:09:54 +0000 Manifest this update: Fri 13 Jun 2025 06:09:54 +0000 Manifest next update: Fri 20 Jun 2025 06:09:54 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: SOy5mvE63SFMAdpLZ1ehHbDVbSKi/UUfhRLem6+I1ME=) 2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: PeoexpeZuhtxvOaSUXuGABP7Es0mdREYJbAZJzL28uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Jun 13 06:09:54 2025 GMT Not After : Jun 20 06:09:54 2025 GMT Subject: CN=684bc0b2-2f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:e4:33:81:77:85:1e:2b:6c:39:10:fb:f6: ba:1d:e1:0d:f1:6f:ee:fa:f4:bc:c5:e7:bb:6b:e7: 9f:68:a3:f8:20:a0:ae:6d:66:f6:5d:9b:18:cd:b1: 2c:b9:62:da:a0:43:ff:3b:0c:eb:dd:64:38:2c:42: b9:ed:4d:af:f9:10:b4:0d:0d:52:14:10:b7:f5:7d: 9a:08:ce:82:17:7d:fa:cc:69:49:21:b8:31:62:fd: dc:21:dd:f0:2a:62:21:b2:4a:80:c2:95:e7:14:d3: fd:5b:ba:d9:2f:e8:52:da:f3:29:f8:34:c9:b0:5f: 75:b3:53:65:e5:1b:71:c9:a3:23:4c:2e:d9:94:33: d4:8e:05:ab:e7:47:98:49:96:fa:71:4b:93:43:4e: 15:cc:6b:cc:66:d4:74:4b:9c:c1:83:54:92:d8:8b: 9a:5f:12:90:c6:ce:35:49:b3:6a:17:74:57:cd:09: d3:a4:81:27:a6:c1:41:9d:ac:fb:00:7d:ec:56:de: 73:a6:0b:e7:1b:ce:ac:c4:21:9e:85:85:51:74:e8: d3:c6:a6:82:e6:82:a3:8a:c5:42:66:f6:41:80:03: 57:e6:bf:d0:ee:b0:58:b0:c6:f7:cb:a4:79:c8:9a: b4:f2:cd:f5:98:99:00:2c:5e:fd:b1:92:4f:b6:9d: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:49:9E:6F:34:8C:18:4F:E5:46:5D:F9:54:B3:60:44:FD:8E:EC:CE X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:cb:25:a6:cc:45:fc:d4:b1:b4:d5:e4:66:d9:09:99:7c:bf: 93:da:0e:c8:fe:33:c3:81:10:34:c3:35:40:92:88:6f:65:e4: e1:6a:8c:a8:41:7e:10:b6:61:1d:93:b4:37:28:e8:f4:35:b9: fc:5b:1c:f3:86:8e:39:a6:58:30:e9:1e:61:12:48:6b:ee:9a: ac:70:c3:e2:1b:33:b6:b6:42:07:30:3a:de:74:45:a2:9b:32: 76:e2:d4:d2:1f:31:e2:46:61:d7:9e:0c:24:5f:ba:ab:9c:c4: 3e:d6:38:b5:5c:c2:18:ac:fd:bf:28:ac:3c:f0:a0:20:f4:e7: eb:a8:6c:76:f2:4e:28:d7:b7:24:1b:93:63:50:78:17:21:4e: 76:2f:37:8a:ae:53:77:43:86:90:2d:05:cd:4f:b6:72:98:ba: 35:a1:6c:71:f8:61:07:85:21:d9:49:ae:f3:f5:30:f3:83:0f: a7:66:d0:dc:59:b6:e1:8a:4b:b8:36:2d:be:ed:db:90:1e:ec: 61:20:41:ad:29:8e:1c:ee:3f:84:1e:fa:93:6d:33:13:fc:09: 4e:39:ec:a0:ec:12:5b:74:23:88:d9:a3:73:f7:5b:59:14:41: 25:43:f5:9d:8a:fc:c2:5a:26:27:b8:83:50:de:e1:6b:b9:a3: e9:39:06:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0I0QjExMC8GA1UEBRMoQzg3N0NERjIyRDI1QjZFMzNGQzVFNDk1QkU1NUU1OUQw QTk0OTg3RTAeFw0yNTA2MTMwNjA5NTRaFw0yNTA2MjAwNjA5NTRaMBgxFjAUBgNV BAMTDTY4NGJjMGIyLTJmNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5uOQzgXeFHitsORD79rod4Q3xb+769LzF57tr559oo/ggoK5tZvZdmxjNsSy5 YtqgQ/87DOvdZDgsQrntTa/5ELQNDVIUELf1fZoIzoIXffrMaUkhuDFi/dwh3fAq YiGySoDClecU0/1butkv6FLa8yn4NMmwX3WzU2XlG3HJoyNMLtmUM9SOBavnR5hJ lvpxS5NDThXMa8xm1HRLnMGDVJLYi5pfEpDGzjVJs2oXdFfNCdOkgSemwUGdrPsA fexW3nOmC+cbzqzEIZ6FhVF06NPGpoLmgqOKxUJm9kGAA1fmv9DusFiwxvfLpHnI mrTyzfWYmQAsXv2xkk+2nQKJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQkmebzSM GE/lRl35VLNgRP2O7M4wHwYDVR0jBBgwFoAUyHfN8i0ltuM/xeSVvlXlnQqUmH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QjRCL0UxNTZBMDRDQ0Yz ODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1I NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUhmTjhpMGx0dU1feGVTVnZsWGxuUXFVbUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QjRCL0UxNTZBMDRDQ0YzODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVN X3hlU1Z2bFhsblFxVW1INC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEbLJabMRfzUsbTV5GbZCZl8v5PaDsj+M8OBEDTDNUCSiG9l5OFqjKhB fhC2YR2TtDco6PQ1ufxbHPOGjjmmWDDpHmESSGvumqxww+IbM7a2QgcwOt50RaKb Mnbi1NIfMeJGYdeeDCRfuqucxD7WOLVcwhis/b8orDzwoCD05+uobHbyTijXtyQb k2NQeBchTnYvN4quU3dDhpAtBc1PtnKYujWhbHH4YQeFIdlJrvP1MPODD6dm0NxZ tuGKS7g2Lb7t25Ae7GEgQa0pjhzuP4Qe+pNtMxP8CU457KDsElt0I4jZo3P3W1kU QSVD9Z2K/MJaJie4g1De4Wu5o+k5Bkk= -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:15 2025 by rpki-client