$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: XjjI82bg/nFHLJ4MmV5zIMHVLogjbZyXqDZmS5GC+6g= Subject key identifier: D1:3C:B2:9B:3F:A2:D1:59:39:50:03:40:1F:ED:64:D8:BB:E7:51:99 Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: 0153 Signing time: Thu 19 Jun 2025 03:44:45 +0000 Manifest this update: Thu 19 Jun 2025 03:44:44 +0000 Manifest next update: Thu 26 Jun 2025 03:44:44 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: BB1BUk5ho8Ql1JyQi0MZJ7G+NnoLlZcfEurRQS4ITW8=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: /lY6MRoQmBol07GaZSzAkv2Tfx/7fsrdKUpKLuZMxDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Jun 19 03:44:44 2025 GMT Not After : Jun 26 03:44:44 2025 GMT Subject: CN=685387ad-48a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:2e:3e:09:8d:70:28:c9:69:fa:3b:5d:70: b2:19:f8:4d:af:1a:9c:9e:22:42:e7:94:ef:07:5d: ff:cf:c5:b8:75:3f:36:f8:5c:c3:f8:4d:04:59:0d: ee:78:5d:af:62:44:4b:18:05:49:7b:bc:12:da:8c: ac:b5:67:95:01:b3:ee:44:b9:a2:ec:f9:82:9f:41: a2:c5:c0:12:00:52:4a:8f:c1:03:eb:43:ee:c9:d3: 10:13:fe:34:bb:06:e0:1e:38:cd:0a:43:29:0e:bb: 0a:bc:d9:ac:1f:04:18:1e:95:e9:7a:6f:22:6e:eb: 23:90:a3:90:42:95:52:3c:9a:14:f6:a5:b2:ea:3c: a4:bf:ab:24:4c:bb:03:53:ad:2b:ff:b7:13:70:d2: d4:dd:76:36:4c:23:b3:ed:e1:d0:2a:a3:8a:76:be: 59:13:d4:25:4b:71:0d:78:a6:e7:dc:5d:86:37:29: ee:4e:bf:dd:13:38:3a:e4:15:24:e7:f4:00:c9:db: 98:3c:b8:98:e2:af:47:f3:4a:dd:18:6e:16:2b:e3: 44:c6:42:f5:f6:b4:89:7d:81:c7:24:1c:e6:65:69: 86:2f:c4:3e:ce:e4:bb:49:7c:de:c5:33:f3:31:d3: 87:ca:24:3c:4f:98:47:4e:f1:f9:e2:d5:ef:f7:36: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3C:B2:9B:3F:A2:D1:59:39:50:03:40:1F:ED:64:D8:BB:E7:51:99 X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:65:c6:40:95:7e:01:be:3a:91:88:6b:c0:a8:99:ba:f3:69: 6d:7f:ff:c1:fd:3d:40:b5:5d:26:09:4b:69:04:2d:75:f1:75: f1:ec:af:a7:b8:eb:c5:5e:19:9c:8c:78:77:38:fc:ac:0b:fd: cb:f3:63:12:18:a8:8a:67:bc:42:52:4d:af:4b:ee:2c:39:ee: 82:11:39:c3:7c:e6:88:66:cd:81:9a:22:ce:b9:3f:06:3d:89: 33:7b:26:3a:54:3e:58:0c:21:98:bc:d3:53:1a:5b:33:84:00: f1:b8:09:9d:f1:e4:a5:9f:a0:d7:9f:07:1a:c0:8d:5b:ae:d9: 9f:df:63:1c:55:96:2c:ad:24:8c:c9:29:8c:86:08:b2:41:9a: 67:4c:9f:a6:eb:b9:f7:18:b6:14:17:ad:b1:85:43:26:a0:17: 25:22:7c:95:c5:00:23:f5:a0:f8:d3:16:1d:5a:85:0e:fa:20: 0e:a9:10:e3:08:a8:e6:70:35:87:e8:f8:c9:80:96:bd:42:25: a4:80:6a:47:32:95:71:0b:43:5e:08:67:0f:e2:41:de:fa:e8: f2:ff:af:20:58:5e:00:bc:f0:44:b9:77:21:6c:31:d4:c1:b2: a2:e8:8d:d3:b2:30:ab:26:4e:0a:f0:f9:28:b1:eb:a9:b8:0f: 0d:1a:36:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjUwNjE5MDM0NDQ0WhcNMjUwNjI2MDM0NDQ0WjAYMRYwFAYD VQQDEw02ODUzODdhZC00OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18MuPgmNcCjJafo7XXCyGfhNrxqcniJC55TvB13/z8W4dT82+FzD+E0EWQ3u eF2vYkRLGAVJe7wS2oystWeVAbPuRLmi7PmCn0GixcASAFJKj8ED60PuydMQE/40 uwbgHjjNCkMpDrsKvNmsHwQYHpXpem8ibusjkKOQQpVSPJoU9qWy6jykv6skTLsD U60r/7cTcNLU3XY2TCOz7eHQKqOKdr5ZE9QlS3ENeKbn3F2GNynuTr/dEzg65BUk 5/QAyduYPLiY4q9H80rdGG4WK+NExkL19rSJfYHHJBzmZWmGL8Q+zuS7SXzexTPz MdOHyiQ8T5hHTvH54tXv9zb44QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE8sps/ otFZOVADQB/tZNi751GZMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABZcZAlX4BvjqRiGvAqJm682ltf//B/T1AtV0mCUtpBC118XXx7K+n uOvFXhmcjHh3OPysC/3L82MSGKiKZ7xCUk2vS+4sOe6CETnDfOaIZs2BmiLOuT8G PYkzeyY6VD5YDCGYvNNTGlszhADxuAmd8eSln6DXnwcawI1brtmf32McVZYsrSSM ySmMhgiyQZpnTJ+m67n3GLYUF62xhUMmoBclInyVxQAj9aD40xYdWoUO+iAOqRDj CKjmcDWH6PjJgJa9QiWkgGpHMpVxC0NeCGcP4kHe+ujy/68gWF4AvPBEuXchbDHU wbKi6I3TsjCrJk4K8PkoseupuA8NGjbd -----END CERTIFICATE-----Generated at Fri Jun 20 10:03:55 2025 by rpki-client