$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft File: lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json) Hash identifier: 9X1mqH24CqDVdI5EJVRfRwZHc277fW4Jl0CAW5zSFdU= Subject key identifier: 8D:98:8F:D5:AF:82:28:CC:C9:C9:B0:2D:30:99:3B:2A:BE:A3:BD:57 Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft Manifest number: 0CA1 Signing time: Mon 16 Jun 2025 18:10:55 +0000 Manifest this update: Mon 16 Jun 2025 18:10:54 +0000 Manifest next update: Mon 23 Jun 2025 18:10:54 +0000 Files and hashes: 1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: VngWZ0UJg1B4ILG/4JrXhVSPsOWNuL5+cKeCvQCpqQg=) 2: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (hash: 5CkSO9tc+/UFRkRtU6tdYYVHHpR7HqK76CBHyDuJbdw=) 3: C2911C74E6A711EFA8D1A077C4F9AE02.roa (hash: 7uzXUSClxgsZqYNV6os8g6TMOvQ9tK2i5DS7Dqxq1Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Jun 16 18:10:54 2025 GMT Not After : Jun 23 18:10:54 2025 GMT Subject: CN=68505e2f-e88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:7b:56:4f:20:16:f1:31:b9:3b:7a:5a:91: 65:e5:46:1d:55:f9:d9:6f:ac:30:71:c0:6e:e7:6d: 48:ca:62:21:cd:a8:c5:6a:42:88:87:27:73:fe:75: 8b:2c:23:24:39:41:d8:14:9c:39:9c:56:bb:d6:28: 3e:84:06:f7:ff:40:13:19:21:dc:ee:ac:d0:63:2c: c6:c7:7f:09:cf:eb:8b:88:da:d1:ed:0d:b3:89:50: 9f:9d:34:23:f2:41:ce:7c:84:ae:7c:6b:51:38:b6: f4:a2:01:2a:1b:64:2d:dd:f5:10:fa:93:11:2e:5b: 11:1e:44:bf:1f:e4:f0:88:49:76:8c:34:b5:b5:cb: 94:c8:a1:ff:58:8a:bf:c1:8d:3d:e4:c0:5f:f2:a2: b6:85:d8:bf:63:95:f4:cc:a7:6a:ba:7b:60:9b:22: be:f7:0f:51:b2:55:52:05:19:e1:0f:98:ad:77:13: 03:8c:02:64:50:88:74:01:a8:65:43:8b:4c:b7:8e: 0e:11:cc:66:93:65:08:fd:54:2a:b0:a9:a2:b4:d8: 1c:8c:f9:1f:2d:8f:45:49:d9:27:e7:9f:70:a0:bd: ce:a0:19:3c:59:f6:79:24:ae:c2:7d:00:2e:11:bf: 75:cb:c4:e8:46:0a:db:c8:36:69:92:53:21:90:62: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:8F:D5:AF:82:28:CC:C9:C9:B0:2D:30:99:3B:2A:BE:A3:BD:57 X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4c:52:57:3d:68:d0:fd:bb:03:d7:1d:c1:a4:92:ed:a8:d0: aa:e4:47:c1:5f:f8:d7:05:26:c3:e7:d4:37:77:36:f3:23:c3: 21:af:80:1b:55:41:70:a5:3a:aa:ec:90:a6:8a:83:e0:81:36: 43:51:00:d1:2d:44:93:e3:8b:88:fa:06:54:fc:89:7c:65:5e: 27:c9:be:2a:15:4d:00:99:ea:4a:52:8d:b1:d7:5f:cf:a3:66: 19:d2:1c:4a:c9:55:67:73:8a:f7:1a:d8:ff:91:ea:d0:24:fd: e3:60:f8:03:e8:5b:42:82:ae:b3:89:87:a2:4a:ed:7f:38:ce: 63:ca:4a:d7:e9:c4:6a:7a:eb:6f:b9:6d:80:97:25:7b:97:ba: 8d:33:ab:ff:bc:47:4d:2f:bd:15:82:2b:2d:9e:1a:e6:ea:b1: 94:c0:f5:44:e4:4a:81:d8:ca:50:2c:7f:c5:8f:d2:42:48:5b: 4f:f5:a1:94:ce:6c:39:c1:22:e3:ac:7f:4b:0d:4b:00:f9:09: 51:11:d6:b4:3c:70:63:a4:d4:37:fd:5a:b3:c0:14:56:2b:f6: e4:b9:e1:97:81:a6:68:7e:c9:b5:df:4e:a1:a2:fb:0c:10:ee: 50:53:7a:15:97:53:70:60:f9:fe:dd:e7:05:91:40:5b:d9:96: fa:5b:24:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwNjE2MTgxMDU0WhcNMjUwNjIzMTgxMDU0WjAYMRYwFAYD VQQDEw02ODUwNWUyZi1lODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuel7Vk8gFvExuTt6WpFl5UYdVfnZb6wwccBu521IymIhzajFakKIhydz/nWL LCMkOUHYFJw5nFa71ig+hAb3/0ATGSHc7qzQYyzGx38Jz+uLiNrR7Q2ziVCfnTQj 8kHOfISufGtROLb0ogEqG2Qt3fUQ+pMRLlsRHkS/H+TwiEl2jDS1tcuUyKH/WIq/ wY095MBf8qK2hdi/Y5X0zKdquntgmyK+9w9RslVSBRnhD5itdxMDjAJkUIh0Aahl Q4tMt44OEcxmk2UI/VQqsKmitNgcjPkfLY9FSdkn559woL3OoBk8WfZ5JK7CfQAu Eb91y8ToRgrbyDZpklMhkGJoOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2Yj9Wv gijMycmwLTCZOyq+o71XMB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEVFRi82QzRDRDY5MEY4ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2 eUh2UmJzaWpaWEhob3ZVSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfTFJXPWjQ/bsD1x3BpJLtqNCq5EfBX/jXBSbD59Q3dzbzI8Mhr4Ab VUFwpTqq7JCmioPggTZDUQDRLUST44uI+gZU/Il8ZV4nyb4qFU0AmepKUo2x11/P o2YZ0hxKyVVnc4r3Gtj/kerQJP3jYPgD6FtCgq6ziYeiSu1/OM5jykrX6cRqeutv uW2AlyV7l7qNM6v/vEdNL70Vgistnhrm6rGUwPVE5EqB2MpQLH/Fj9JCSFtP9aGU zmw5wSLjrH9LDUsA+QlREda0PHBjpNQ3/VqzwBRWK/bkueGXgaZofsm1306hovsM EO5QU3oVl1NwYPn+3ecFkUBb2Zb6WyT1 -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:26 2025 by rpki-client