$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json) Hash identifier: 7hhwm+BzFIaa9I6rb52nk2MInFtBooMz37PgAQbhO7M= Subject key identifier: 4D:F8:0A:06:F5:1F:CB:22:27:E4:43:A5:CF:76:0B:69:75:26:62:A9 Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1 Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft Manifest number: 01DB Signing time: Fri 13 Jun 2025 01:49:08 +0000 Manifest this update: Fri 13 Jun 2025 01:49:07 +0000 Manifest next update: Fri 20 Jun 2025 01:49:07 +0000 Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: AbxstiKXHHCQfKDm0muE+n0BHCAA6dIJv/H5gfPq/mo=) 2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: kCv4bHKTur2lJoL7asgYL11dC+z1ZsHw44gWQxYmfaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1 Validity Not Before: Jun 13 01:49:07 2025 GMT Not After : Jun 20 01:49:07 2025 GMT Subject: CN=684b8393-3edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:23:e4:da:b6:fc:bc:34:ee:6f:87:54:fa: 75:84:11:ff:f6:22:ad:d2:f6:45:de:7a:62:fe:00: 0b:91:24:10:52:b0:6c:a5:2f:fc:99:3c:76:33:2d: 86:e5:b5:3d:10:e2:dc:fc:e4:4e:cf:51:2b:35:65: 2c:89:8a:07:a3:80:db:d6:39:c2:d7:40:f8:5b:8f: 40:0e:47:97:ca:f9:c6:4d:ed:35:4d:d0:2b:9f:85: d6:52:4b:f1:fe:db:89:66:ee:f3:27:ee:9f:a5:67: 8f:9c:bd:f7:92:38:e5:dc:79:a5:80:8c:e1:f5:85: 8a:44:a6:fe:47:f9:07:94:18:f1:68:e3:db:51:f8: c3:13:23:37:09:18:15:96:f8:03:90:c3:03:73:5d: ef:58:0f:42:57:a6:bb:c0:64:d1:a2:cf:e8:47:fe: 1b:b3:78:60:a6:c5:a7:89:c0:7b:04:35:eb:91:f6: 9a:fd:c2:3e:b7:e0:d6:a0:f6:8a:e1:90:f8:d1:7b: 81:36:03:2d:af:a0:74:79:75:80:14:a0:c4:ba:75: 82:c9:92:a7:4a:29:48:67:ae:87:6c:87:3d:95:6f: ac:e0:5b:5c:87:8a:13:54:aa:2b:ca:b5:af:42:39: 57:cc:9d:cb:ec:5c:d6:e8:12:f7:22:3e:63:2e:a1: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F8:0A:06:F5:1F:CB:22:27:E4:43:A5:CF:76:0B:69:75:26:62:A9 X509v3 Authority Key Identifier: keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c4:3c:6b:1e:96:20:04:f6:28:d7:56:b1:86:29:5a:1e:57: 11:ec:5e:a3:04:85:2d:ae:21:a2:65:d3:32:bd:d8:64:3b:3b: aa:27:08:4c:e8:73:d3:a4:b5:da:92:d8:b6:fa:84:02:aa:23: 47:57:be:64:28:9e:9a:a2:25:47:45:9a:e6:68:58:37:f8:7e: a3:6e:bf:47:2e:cf:bf:d1:16:14:d9:78:91:df:87:ac:c6:d2: e3:4a:e1:0d:2d:40:71:b6:40:51:6f:e7:fe:a3:35:db:7c:1b: a1:92:0a:43:ef:81:b7:5f:a8:ee:3d:2a:bb:8d:55:70:fa:58: 0a:27:e0:42:96:be:01:9d:8d:43:0f:26:7f:be:03:3c:cc:07: cc:be:c1:c1:e7:cb:e9:5b:b4:85:c7:22:2a:f7:db:fc:32:2d: db:8e:28:86:e9:be:55:33:fe:26:b7:a6:c3:9e:79:0f:53:e1: 0e:22:2c:c8:63:ce:c5:9e:45:1a:df:57:50:1e:11:fd:a3:c0: f7:7f:df:ab:35:06:9e:04:3b:95:2f:87:2c:93:cc:92:92:47: 85:4d:12:a6:3f:11:07:16:3a:a2:16:fe:15:4d:5c:55:41:fe: c3:6c:50:93:38:fc:e9:8d:8f:4f:1b:98:e9:6b:6a:f5:9a:03: 95:4d:26:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQTUxMTAvBgNVBAUTKDYwMThCOTg1QzM5OUNCMDczMUMxNjM0Q0ZFNEI0Nzkx MkYyQUY1RDEwHhcNMjUwNjEzMDE0OTA3WhcNMjUwNjIwMDE0OTA3WjAYMRYwFAYD VQQDEw02ODRiODM5My0zZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArccj5Nq2/Lw07m+HVPp1hBH/9iKt0vZF3npi/gALkSQQUrBspS/8mTx2My2G 5bU9EOLc/OROz1ErNWUsiYoHo4Db1jnC10D4W49ADkeXyvnGTe01TdArn4XWUkvx /tuJZu7zJ+6fpWePnL33kjjl3HmlgIzh9YWKRKb+R/kHlBjxaOPbUfjDEyM3CRgV lvgDkMMDc13vWA9CV6a7wGTRos/oR/4bs3hgpsWnicB7BDXrkfaa/cI+t+DWoPaK 4ZD40XuBNgMtr6B0eXWAFKDEunWCyZKnSilIZ66HbIc9lW+s4Ftch4oTVKoryrWv QjlXzJ3L7FzW6BL3Ij5jLqE2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE34Cgb1 H8siJ+RDpc92C2l1JmKpMB8GA1UdIwQYMBaAFGAYuYXDmcsHMcFjTP5LR5EvKvXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JBNS8yODYyMENDNDcw NUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3Y3h3V05NX2t0SGtTOHE5 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3 Y3h3V05NX2t0SGtTOHE5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnxDxrHpYgBPYo11axhilaHlcR7F6jBIUtriGiZdMyvdhkOzuqJwhM 6HPTpLXakti2+oQCqiNHV75kKJ6aoiVHRZrmaFg3+H6jbr9HLs+/0RYU2XiR34es xtLjSuENLUBxtkBRb+f+ozXbfBuhkgpD74G3X6juPSq7jVVw+lgKJ+BClr4BnY1D DyZ/vgM8zAfMvsHB58vpW7SFxyIq99v8Mi3bjiiG6b5VM/4mt6bDnnkPU+EOIizI Y87FnkUa31dQHhH9o8D3f9+rNQaeBDuVL4csk8ySkkeFTRKmPxEHFjqiFv4VTVxV Qf7DbFCTOPzpjY9PG5jpa2r1mgOVTSbQ -----END CERTIFICATE-----Generated at Sat Jun 14 17:14:32 2025 by rpki-client