$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: HCotzAMQWpBOquFSMqZ3CGY3TSnFrTarXgfaYfpum5I= Subject key identifier: 9F:41:11:6D:1C:59:77:3D:E6:76:D0:8F:D4:FB:2F:21:52:D4:F7:25 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 1F22 Signing time: Thu 24 Apr 2025 16:05:51 +0000 Manifest this update: Thu 24 Apr 2025 16:05:50 +0000 Manifest next update: Thu 01 May 2025 16:05:50 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: DYsBhy3n8edaRtzjfwdHvvUsOp0nxpKek9bz5Jm9YWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: Apr 24 16:05:50 2025 GMT Not After : May 1 16:05:50 2025 GMT Subject: CN=680a615f-a4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:79:db:1c:54:39:ef:f2:79:44:fd:ad:3f: bb:f8:ab:8d:99:f5:3b:18:7e:ea:96:95:8e:31:42: 04:60:b5:e2:65:21:76:a3:7c:e8:5f:da:96:61:3a: 06:54:f2:53:50:12:4c:08:bd:e3:36:55:3d:d2:1d: 3e:e8:da:2d:f8:84:74:8a:80:5d:89:2c:bf:84:db: 4f:22:4b:44:fa:e4:da:7e:ee:c7:fe:96:ff:b0:6e: 02:89:02:0b:26:40:f1:1b:97:2d:e3:54:d3:91:c1: 1d:16:ee:ce:7d:2e:74:b6:b7:7b:ee:eb:49:58:70: 48:5b:9a:3a:96:f9:6c:3c:17:fe:d7:7c:b7:ca:9a: 9e:79:b6:99:41:fb:73:d0:c1:b1:3a:ab:d6:74:f8: 37:fc:8e:55:ce:22:19:80:3e:ec:51:f4:15:12:8e: 61:96:d0:e3:2b:7e:23:6b:4f:3f:f5:96:1e:cc:64: f2:be:f2:3a:e2:f5:f1:79:92:54:f6:63:a7:8d:65: 71:ec:a4:37:e1:f9:05:7c:bd:b8:6a:02:ca:3d:28: 95:25:54:f1:54:bc:0d:5b:e0:86:13:f0:53:da:0f: b7:a9:49:48:b1:aa:cc:4c:6a:2c:9e:98:c0:2e:ad: 99:f2:ad:34:1d:f0:2e:6e:04:20:ff:22:1c:70:02: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:41:11:6D:1C:59:77:3D:E6:76:D0:8F:D4:FB:2F:21:52:D4:F7:25 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:bf:ea:27:25:c8:3b:2b:1e:de:62:fb:e5:de:31:c1:e0:6f: be:0a:4b:1b:e8:47:a5:ca:ec:07:98:af:e6:f7:bc:66:d3:75: 6a:47:dc:f1:77:0a:5d:07:c2:54:95:3c:17:7a:4b:cf:c6:f0: 2a:7f:bb:d6:84:0e:44:ba:5c:d9:bc:4a:3f:67:e3:b1:f8:cf: 60:8d:3f:61:6d:c2:da:e5:bb:39:ca:a0:50:31:a2:50:02:1b: d0:de:ba:af:ae:21:25:8d:97:48:b6:1e:0e:86:cc:5e:f4:86: 3c:38:26:2b:33:cd:5f:fa:fb:d7:3a:1b:58:d3:36:6b:28:32: dc:80:4d:94:f7:62:b3:87:83:55:19:49:df:9e:77:92:57:7f: 0c:dd:60:5f:98:a0:1b:86:7e:38:04:fc:63:83:21:c0:c1:ee: 29:87:98:b1:6e:50:26:4f:cb:d1:02:d8:5a:a5:41:fc:df:26: 8b:13:94:33:ff:65:f4:56:82:65:c3:b9:66:c5:36:75:f6:eb: 67:64:05:25:72:f8:77:32:e7:a0:a1:13:44:fb:8a:f5:28:e5: c2:61:4e:e1:ad:f3:1c:1f:e5:3d:80:f8:73:53:71:7e:dc:7a: 10:08:c3:b4:fc:f2:a2:7c:8a:33:5b:fb:2b:0f:ef:f1:ed:9e: c1:4a:57:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUwNDI0MTYwNTUwWhcNMjUwNTAxMTYwNTUwWjAYMRYwFAYD VQQDEw02ODBhNjE1Zi1hNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5952xxUOe/yeUT9rT+7+KuNmfU7GH7qlpWOMUIEYLXiZSF2o3zoX9qWYToG VPJTUBJMCL3jNlU90h0+6Not+IR0ioBdiSy/hNtPIktE+uTafu7H/pb/sG4CiQIL JkDxG5ct41TTkcEdFu7OfS50trd77utJWHBIW5o6lvlsPBf+13y3ypqeebaZQftz 0MGxOqvWdPg3/I5VziIZgD7sUfQVEo5hltDjK34ja08/9ZYezGTyvvI64vXxeZJU 9mOnjWVx7KQ34fkFfL24agLKPSiVJVTxVLwNW+CGE/BT2g+3qUlIsarMTGosnpjA Lq2Z8q00HfAubgQg/yIccAJYUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9BEW0c WXc95nbQj9T7LyFS1PclMB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDav+onJcg7Kx7eYvvl3jHB4G++Cksb6EelyuwHmK/m97xm03VqR9zx dwpdB8JUlTwXekvPxvAqf7vWhA5EulzZvEo/Z+Ox+M9gjT9hbcLa5bs5yqBQMaJQ AhvQ3rqvriEljZdIth4Ohsxe9IY8OCYrM81f+vvXOhtY0zZrKDLcgE2U92Kzh4NV GUnfnneSV38M3WBfmKAbhn44BPxjgyHAwe4ph5ixblAmT8vRAthapUH83yaLE5Qz /2X0VoJlw7lmxTZ19utnZAUlcvh3MuegoRNE+4r1KOXCYU7hrfMcH+U9gPhzU3F+ 3HoQCMO0/PKifIozW/srD+/x7Z7BSlc6 -----END CERTIFICATE-----Generated at Sat Apr 26 09:20:30 2025 by rpki-client