$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: h+CaNEyqX253xc/hiEkTaNmldQWGd9MfZlYgsQDDf4E= Subject key identifier: 33:A4:E4:BB:47:24:E3:BC:7A:98:E9:2B:00:3A:B4:4A:2B:FE:95:C5 Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 0150 Signing time: Fri 25 Apr 2025 03:19:07 +0000 Manifest this update: Fri 25 Apr 2025 03:19:06 +0000 Manifest next update: Fri 02 May 2025 03:19:06 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: wVigecjyHVAGR/ba+AZGqx7yIQQf6ZV7VXdFgfkBhkM=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: Apr 25 03:19:06 2025 GMT Not After : May 2 03:19:06 2025 GMT Subject: CN=680aff2b-f61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:4f:6f:8b:93:a6:af:21:89:e6:15:e9:c2: 08:e8:5b:26:31:7d:ae:1c:e6:6a:e3:48:13:1f:4f: 09:29:22:26:5e:91:86:4f:14:32:3e:c2:d3:f6:db: 7b:5c:84:a2:75:cf:f7:e8:ce:37:30:c1:1e:84:3d: f9:e6:41:9e:8b:25:e3:0f:8b:70:bb:09:64:84:b7: 6f:62:68:f2:0c:e0:6d:1a:e4:2c:2d:66:a8:ba:cb: 6e:60:09:b5:6d:13:ef:d2:ae:31:2c:89:85:6a:a9: 92:3d:6e:88:ea:82:55:1f:50:19:69:5d:c1:50:aa: d6:52:4a:83:bb:1c:7d:1c:4e:04:61:03:5b:74:c4: 1d:47:dc:af:6b:56:47:d4:bc:6d:bd:1e:83:f5:e5: 2a:ff:cc:8a:df:7a:20:2e:a7:bb:e1:ca:b3:b2:45: c4:a8:4e:8a:cf:0f:80:32:7e:ff:ce:af:92:9e:29: 43:40:1d:01:fe:21:21:ea:1f:73:bc:8c:89:65:d9: 7b:ba:3e:89:80:45:77:12:47:e4:2d:c6:2b:50:75: bb:1b:ae:4e:99:e4:31:48:ef:66:03:e2:9f:93:62: 97:cd:56:1f:4c:5e:fb:64:5d:3c:16:ed:eb:b4:f0: e3:69:af:56:61:f4:25:54:04:42:39:1f:f4:e6:91: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A4:E4:BB:47:24:E3:BC:7A:98:E9:2B:00:3A:B4:4A:2B:FE:95:C5 X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:77:83:fd:4b:75:be:d3:7b:09:b3:88:2e:4a:05:fc:f7:d4: b7:44:e5:eb:85:11:69:3f:0b:fc:e7:f1:5b:18:0f:28:5e:9b: 49:7a:cc:e5:22:6e:dc:76:74:e8:f5:92:5b:dd:39:d8:73:7a: 9d:95:c8:94:87:e3:0e:36:e2:6d:d0:c8:ac:a9:41:cb:14:8a: 3c:f5:9b:62:5a:2d:aa:ba:09:9a:73:d8:93:73:ba:99:b2:0c: 9b:da:a2:9f:3f:52:c8:99:b1:bd:f1:16:d2:87:85:3b:fd:0a: 6f:41:71:b7:14:58:e0:93:e6:b0:c7:d3:fb:39:a5:b7:f4:9b: 0c:08:7c:a8:2e:81:e6:ef:77:1c:94:f1:68:c4:62:af:54:d3: b6:66:9c:e6:07:b6:13:47:0a:97:a8:06:75:8e:47:46:c3:c3: 9a:29:5f:d3:d5:9b:79:7c:f5:cc:c3:b6:fc:18:3b:8d:3a:3d: d2:cd:27:4e:57:7a:ec:77:f0:6b:99:4e:dc:37:3e:46:26:c2: 1f:60:d0:ae:dc:d8:08:ea:4b:50:d5:67:33:84:74:56:28:a6: b7:37:81:36:8a:84:e0:9a:fb:d6:fb:79:ff:2a:05:be:c2:80: e9:b2:ca:73:cd:b7:1c:f7:7a:af:ee:09:3a:e3:27:81:29:0d: 04:4e:53:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwNDI1MDMxOTA2WhcNMjUwNTAyMDMxOTA2WjAYMRYwFAYD VQQDEw02ODBhZmYyYi1mNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy75Pb4uTpq8hieYV6cII6FsmMX2uHOZq40gTH08JKSImXpGGTxQyPsLT9tt7 XISidc/36M43MMEehD355kGeiyXjD4twuwlkhLdvYmjyDOBtGuQsLWaoustuYAm1 bRPv0q4xLImFaqmSPW6I6oJVH1AZaV3BUKrWUkqDuxx9HE4EYQNbdMQdR9yva1ZH 1LxtvR6D9eUq/8yK33ogLqe74cqzskXEqE6Kzw+AMn7/zq+SnilDQB0B/iEh6h9z vIyJZdl7uj6JgEV3EkfkLcYrUHW7G65OmeQxSO9mA+Kfk2KXzVYfTF77ZF08Fu3r tPDjaa9WYfQlVARCOR/05pF/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOk5LtH JOO8epjpKwA6tEor/pXFMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpd4P9S3W+03sJs4guSgX899S3ROXrhRFpPwv85/FbGA8oXptJeszl Im7cdnTo9ZJb3TnYc3qdlciUh+MONuJt0MisqUHLFIo89ZtiWi2qugmac9iTc7qZ sgyb2qKfP1LImbG98RbSh4U7/QpvQXG3FFjgk+awx9P7OaW39JsMCHyoLoHm73cc lPFoxGKvVNO2ZpzmB7YTRwqXqAZ1jkdGw8OaKV/T1Zt5fPXMw7b8GDuNOj3SzSdO V3rsd/BrmU7cNz5GJsIfYNCu3NgI6ktQ1WczhHRWKKa3N4E2ioTgmvvW+3n/KgW+ woDpsspzzbcc93qv7gk64yeBKQ0ETlOQ -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:14 2025 by rpki-client