$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: Ix6CO2shlv7mezmW9EMvUu5V2x1iA2f2YEGMFbumPIo= Subject key identifier: 48:DE:A8:12:A3:C6:9C:76:5E:63:8D:C4:65:F4:9D:23:17:13:64:A1 Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 041B Signing time: Sun 15 Jun 2025 00:06:44 +0000 Manifest this update: Sun 15 Jun 2025 00:06:43 +0000 Manifest next update: Sun 22 Jun 2025 00:06:43 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: 8mcxWS7lfQFzF+P3p+uX4daR1HXSLh7MNCX6EVGcpqo=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Jun 15 00:06:43 2025 GMT Not After : Jun 22 00:06:43 2025 GMT Subject: CN=684e0e94-a24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:18:4b:c3:e5:9b:3e:07:de:2d:b8:d8:e0: 6c:b8:28:79:3a:fe:77:33:89:f8:82:49:08:a6:9b: 23:65:87:ef:9d:b1:b5:42:56:5e:9d:24:63:36:ca: dc:d0:76:2f:23:f6:37:73:d8:9a:5d:7d:e6:29:9a: 9a:98:95:b9:aa:dd:19:bb:8e:16:db:3e:7f:33:39: 30:01:1d:0e:f8:bb:1e:ad:79:9a:1b:3c:5f:e7:35: fe:9c:30:6b:a5:75:33:3d:1a:e8:da:f0:e0:e9:57: 15:e1:9b:69:a4:9e:5c:ff:9a:45:26:19:9f:3c:32: 5e:e8:72:7b:9b:09:8d:54:1c:eb:82:1b:15:cc:6f: cd:33:fc:9b:f5:1f:60:07:11:1c:9b:7a:5f:df:77: 17:79:10:8b:a8:4f:14:21:2c:ec:69:a9:ec:e0:2b: ac:c3:84:7c:b8:38:e1:75:a5:a5:e5:11:0b:c6:01: 17:19:4e:97:74:80:c0:1e:7e:d9:c8:58:5a:bb:93: 6e:f5:59:96:d2:96:82:c5:5e:8e:3e:3d:e3:3c:27: e5:ac:73:5a:8f:61:5b:e2:c5:f3:c8:e2:30:c6:a4: 08:29:5e:b1:c6:37:a9:c1:00:f7:9a:f1:1a:26:87: bf:f1:89:80:b0:a9:4a:1a:4c:9c:5c:ff:8a:47:ec: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:A8:12:A3:C6:9C:76:5E:63:8D:C4:65:F4:9D:23:17:13:64:A1 X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:42:fd:b2:0a:a3:93:2b:86:71:8e:8f:10:24:23:17:6c:da: 4b:05:38:f6:83:6f:37:c2:b8:a1:72:2e:a5:7b:4b:db:42:a0: ce:3f:cf:3c:e1:8b:13:08:3a:a9:ec:d2:7e:16:c1:b0:cf:53: 51:0d:41:a6:46:22:d9:5b:2d:dc:ae:9c:2c:24:a6:77:fd:b8: 17:42:f7:48:df:87:62:71:8f:85:3e:47:a8:0c:94:72:4a:a4: 47:1a:55:b9:d8:a8:b8:ce:26:10:aa:17:75:48:6b:4b:7b:0f: d1:9e:08:ac:22:85:7b:79:62:3c:f3:c9:26:f6:36:d2:ea:7d: 63:f7:81:c8:00:97:c1:58:84:0f:59:44:ac:42:6c:1d:17:89: 55:63:5a:a0:62:8f:80:9f:10:a3:14:1f:e4:eb:5a:0c:ed:cf: 82:9b:92:f7:92:5a:04:56:54:cd:ff:fd:58:90:9d:12:59:fd: d2:91:33:7d:93:4a:f2:4f:05:b7:3a:92:b0:84:d9:02:02:c8: f3:81:53:95:b2:97:0e:a9:42:d4:ac:a4:12:6a:77:8f:df:d2: bc:c8:22:4c:42:ee:36:60:4f:2e:42:6f:88:1c:f4:29:09:b8: d7:d4:33:aa:ca:e0:10:86:f9:38:b9:ac:f3:c9:55:70:9d:30: 8c:93:ab:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUwNjE1MDAwNjQzWhcNMjUwNjIyMDAwNjQzWjAYMRYwFAYD VQQDEw02ODRlMGU5NC1hMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ooYS8Plmz4H3i242OBsuCh5Ov53M4n4gkkIppsjZYfvnbG1QlZenSRjNsrc 0HYvI/Y3c9iaXX3mKZqamJW5qt0Zu44W2z5/MzkwAR0O+LserXmaGzxf5zX+nDBr pXUzPRro2vDg6VcV4ZtppJ5c/5pFJhmfPDJe6HJ7mwmNVBzrghsVzG/NM/yb9R9g BxEcm3pf33cXeRCLqE8UISzsaans4Cusw4R8uDjhdaWl5RELxgEXGU6XdIDAHn7Z yFhau5Nu9VmW0paCxV6OPj3jPCflrHNaj2Fb4sXzyOIwxqQIKV6xxjepwQD3mvEa Joe/8YmAsKlKGkycXP+KR+zTXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjeqBKj xpx2XmONxGX0nSMXE2ShMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQv2yCqOTK4Zxjo8QJCMXbNpLBTj2g283wrihci6le0vbQqDOP888 4YsTCDqp7NJ+FsGwz1NRDUGmRiLZWy3crpwsJKZ3/bgXQvdI34dicY+FPkeoDJRy SqRHGlW52Ki4ziYQqhd1SGtLew/RngisIoV7eWI888km9jbS6n1j94HIAJfBWIQP WUSsQmwdF4lVY1qgYo+AnxCjFB/k61oM7c+Cm5L3kloEVlTN//1YkJ0SWf3SkTN9 k0ryTwW3OpKwhNkCAsjzgVOVspcOqULUrKQSaneP39K8yCJMQu42YE8uQm+IHPQp CbjX1DOqyuAQhvk4uazzyVVwnTCMk6t9 -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:48 2025 by rpki-client