$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: UFNhs71gfOJh2vawFvsjA6gBeI524w7olkgn4dkEMWc= Subject key identifier: 3C:56:CF:36:CD:FB:DA:99:77:25:26:58:1E:D6:8E:C5:9C:8B:FF:20 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 0166 Signing time: Sun 15 Jun 2025 03:28:33 +0000 Manifest this update: Sun 15 Jun 2025 03:28:32 +0000 Manifest next update: Sun 22 Jun 2025 03:28:32 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: og2s9dB1LnbYDOF1VuC1wtUGlXG/vq/mALnW4jE2d48=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Jun 15 03:28:32 2025 GMT Not After : Jun 22 03:28:32 2025 GMT Subject: CN=684e3de0-f7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:65:ee:c6:3a:82:ba:80:4e:3d:2e:05:83:91: 3c:ed:f2:9b:31:ea:cc:cb:39:00:7d:34:d5:9b:15: d7:22:ea:c6:d0:09:e1:a6:bb:08:b5:8f:40:ee:e6: 93:3b:5e:78:e5:9f:5d:92:4a:2b:75:49:3d:72:b9: 15:4c:15:37:84:80:29:7b:dc:e6:cd:01:f8:b9:d6: 16:db:4e:41:ca:32:ce:ed:39:9a:45:8d:da:9f:69: 21:b4:0b:dc:1e:94:b2:9c:ba:ad:b7:2e:50:74:0c: bf:bd:00:75:13:3c:c7:fd:cf:bf:c1:6e:c9:65:6e: b1:f4:b4:12:a1:ec:e4:8e:c6:89:93:6f:62:10:35: 6f:0b:41:85:77:a0:ee:7d:a5:ca:07:82:e5:71:f0: f1:ef:16:9f:bd:73:d4:3d:e1:2c:70:05:90:49:df: 43:06:7d:e5:3a:45:60:80:9d:12:e2:c6:08:17:8b: 3f:17:ad:9f:d7:0e:5a:9a:66:9a:c5:b1:56:0d:f6: ce:74:da:6d:2e:c8:8c:52:2a:0e:e5:5e:19:9a:88: b7:96:53:ff:82:b4:85:ee:17:9f:cc:a4:db:cd:74: 00:fa:b7:1b:84:2f:60:8e:1a:2d:bc:f6:87:ce:28: fd:45:cf:26:ee:3e:7e:e9:9a:43:3d:eb:0f:b0:1d: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:CF:36:CD:FB:DA:99:77:25:26:58:1E:D6:8E:C5:9C:8B:FF:20 X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:21:e5:46:da:ab:b5:84:4a:4d:17:ec:17:82:cb:5e:83:e2: 29:42:9e:d8:8c:11:2b:ce:c7:cf:f0:57:97:89:77:55:7e:45: f3:64:e6:4f:bb:9d:1c:8f:66:0b:e1:6a:c4:de:8e:87:f0:bb: 2b:fe:54:54:82:24:0d:35:f7:47:90:c4:05:df:a0:5b:43:44: 03:de:50:53:e2:2d:98:da:95:12:93:9b:4c:30:40:a0:35:62: 8c:ba:8f:75:4a:f5:ef:9a:72:c1:19:eb:0a:ec:51:b1:b2:11: 01:f5:18:c8:eb:2f:13:0b:ae:8d:7f:d4:27:b2:c0:7b:45:6b: f6:f6:f6:7f:6d:c2:10:b6:22:43:32:20:a5:43:8a:e0:3b:4b: 41:56:07:d1:fb:d5:63:9a:ce:8c:d4:9d:fc:31:9b:6a:4a:4a: 26:1e:30:ff:dc:f1:40:da:85:4d:7a:81:2f:c9:b8:4f:da:5b: 81:e4:77:38:69:04:86:70:7e:68:ca:a3:1d:69:f5:d3:05:ff: e4:6a:93:fc:d1:02:d9:e9:3a:1f:a0:ed:62:16:e4:93:cc:1b: 29:b0:f5:a9:45:f5:c5:b3:7b:b7:29:60:0f:1f:c1:9e:29:a6: 0b:82:6c:8e:1c:6c:3d:7f:eb:0b:89:88:51:68:81:af:82:07: 72:f8:c8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUwNjE1MDMyODMyWhcNMjUwNjIyMDMyODMyWjAYMRYwFAYD VQQDEw02ODRlM2RlMC1mN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWXuxjqCuoBOPS4Fg5E87fKbMerMyzkAfTTVmxXXIurG0AnhprsItY9A7uaT O1545Z9dkkordUk9crkVTBU3hIApe9zmzQH4udYW205ByjLO7TmaRY3an2khtAvc HpSynLqtty5QdAy/vQB1EzzH/c+/wW7JZW6x9LQSoezkjsaJk29iEDVvC0GFd6Du faXKB4LlcfDx7xafvXPUPeEscAWQSd9DBn3lOkVggJ0S4sYIF4s/F62f1w5ammaa xbFWDfbOdNptLsiMUioO5V4Zmoi3llP/grSF7hefzKTbzXQA+rcbhC9gjhotvPaH zij9Rc8m7j5+6ZpDPesPsB3LUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxWzzbN +9qZdyUmWB7WjsWci/8gMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIIeVG2qu1hEpNF+wXgsteg+IpQp7YjBErzsfP8FeXiXdVfkXzZOZP u50cj2YL4WrE3o6H8Lsr/lRUgiQNNfdHkMQF36BbQ0QD3lBT4i2Y2pUSk5tMMECg NWKMuo91SvXvmnLBGesK7FGxshEB9RjI6y8TC66Nf9QnssB7RWv29vZ/bcIQtiJD MiClQ4rgO0tBVgfR+9Vjms6M1J38MZtqSkomHjD/3PFA2oVNeoEvybhP2luB5Hc4 aQSGcH5oyqMdafXTBf/kapP80QLZ6TofoO1iFuSTzBspsPWpRfXFs3u3KWAPH8Ge KaYLgmyOHGw9f+sLiYhRaIGvggdy+Mjn -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:04 2025 by rpki-client