$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: iBAtpeSMAmxqIeRDrxW/BKyqZYxbdqi1iqXMEfvyWvA= Subject key identifier: 51:1B:BC:0A:3C:E4:7A:91:1A:92:7F:FD:16:60:B1:E3:81:0A:3E:6A Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3491 Signing time: Sat 14 Jun 2025 14:55:49 +0000 Manifest this update: Sat 14 Jun 2025 14:55:49 +0000 Manifest next update: Sat 21 Jun 2025 14:55:49 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: 4M2k4X/nay7xfcTcJQ24yxZnH4BM4+88/0SRUaaAWJA=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Jun 14 14:55:49 2025 GMT Not After : Jun 21 14:55:49 2025 GMT Subject: CN=684d8d75-8448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:44:46:e2:36:e3:47:9f:16:58:56:9e:20: 71:27:35:c7:02:dd:16:65:e6:7b:b7:ee:f1:e2:c2: 67:dc:5c:5c:61:52:5b:88:d0:1a:0b:5e:fa:6a:dd: 3a:62:81:d1:20:fe:5c:76:bf:dd:05:1d:aa:a9:5c: 41:d5:4b:5a:e1:79:41:96:b0:12:3c:01:7f:40:81: d6:60:87:1f:ae:e0:af:21:16:7a:66:d8:ad:a5:19: be:60:7f:ac:fd:56:a3:09:63:19:3b:5a:3e:c9:dc: a8:60:5d:07:8f:d4:d6:09:80:83:e0:25:14:cd:e7: 59:7d:98:8e:59:19:cd:31:33:ce:45:81:59:55:22: e7:11:13:9c:02:b2:5e:37:99:e5:68:b2:94:cb:dc: 0e:e2:f8:26:b5:dd:ac:51:63:de:6c:c7:92:02:fb: 5b:30:30:61:0a:17:98:06:c1:c4:c3:42:15:65:d0: 00:fe:85:9e:7f:a9:6f:0e:8a:31:43:f6:93:8e:67: de:cb:45:2a:a7:8d:b0:9e:07:25:14:61:b9:e4:91: 00:26:08:c8:85:7b:4f:82:da:cb:e5:c5:20:e3:52: 2b:da:66:9f:5e:b0:6d:b6:5b:da:d9:48:ff:9b:d7: cd:1f:b4:dd:3b:11:6a:32:77:37:b6:71:de:5c:5d: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1B:BC:0A:3C:E4:7A:91:1A:92:7F:FD:16:60:B1:E3:81:0A:3E:6A X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e9:7d:98:79:35:af:f5:f5:7d:20:1d:c2:fa:ea:40:a5:19: f6:c6:71:10:5f:c1:fd:d6:6a:02:e7:bf:e0:6a:05:0c:04:1d: 3a:11:a3:c8:d7:cc:16:34:2d:ca:82:b8:01:4e:1b:ef:73:43: 00:2b:60:6b:0e:28:56:37:eb:6c:ce:bb:8d:b7:e2:23:2f:85: e6:de:05:0e:84:3b:c9:b3:4d:44:90:9d:1e:8c:91:c7:19:84: 6b:cc:1b:4b:95:84:95:5f:1f:95:9a:3c:cd:94:45:88:d1:a7: 41:f3:ff:9f:9b:39:a3:76:24:52:da:46:01:6f:99:5c:89:ce: f9:21:0e:65:67:f6:8c:b3:2c:fa:0c:dc:c1:41:83:a0:2b:0e: 69:4b:a9:db:5b:b4:dc:86:94:4c:0d:bb:5c:e0:1b:a9:69:f2: 24:5b:cc:29:ed:24:d6:2c:13:e6:25:34:ae:20:60:6b:ee:18: 05:e5:5c:d0:7d:68:42:9b:fa:ec:7f:e1:cd:31:bb:96:69:71: b4:1e:19:32:55:6d:8a:af:c6:c9:4e:1e:2f:d5:30:e9:9e:e2: de:ab:27:fa:4f:c5:8c:70:47:de:36:26:6e:a7:e4:5c:88:30: 5a:7b:bf:a1:22:19:8d:d2:43:ae:f3:18:b3:47:bc:b5:87:a5: d1:51:e6:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUwNjE0MTQ1NTQ5WhcNMjUwNjIxMTQ1NTQ5WjAYMRYwFAYD VQQDEw02ODRkOGQ3NS04NDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCBERuI240efFlhWniBxJzXHAt0WZeZ7t+7x4sJn3FxcYVJbiNAaC176at06 YoHRIP5cdr/dBR2qqVxB1Uta4XlBlrASPAF/QIHWYIcfruCvIRZ6ZtitpRm+YH+s /VajCWMZO1o+ydyoYF0Hj9TWCYCD4CUUzedZfZiOWRnNMTPORYFZVSLnEROcArJe N5nlaLKUy9wO4vgmtd2sUWPebMeSAvtbMDBhCheYBsHEw0IVZdAA/oWef6lvDoox Q/aTjmfey0Uqp42wngclFGG55JEAJgjIhXtPgtrL5cUg41Ir2mafXrBttlva2Uj/ m9fNH7TdOxFqMnc3tnHeXF3wBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEbvAo8 5HqRGpJ//RZgseOBCj5qMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH6X2YeTWv9fV9IB3C+upApRn2xnEQX8H91moC57/gagUMBB06EaPI 18wWNC3KgrgBThvvc0MAK2BrDihWN+tszruNt+IjL4Xm3gUOhDvJs01EkJ0ejJHH GYRrzBtLlYSVXx+VmjzNlEWI0adB8/+fmzmjdiRS2kYBb5lcic75IQ5lZ/aMsyz6 DNzBQYOgKw5pS6nbW7TchpRMDbtc4BupafIkW8wp7STWLBPmJTSuIGBr7hgF5VzQ fWhCm/rsf+HNMbuWaXG0HhkyVW2Kr8bJTh4v1TDpnuLeqyf6T8WMcEfeNiZup+Rc iDBae7+hIhmN0kOu8xizR7y1h6XRUeY7 -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:41 2025 by rpki-client