$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: KkdM9uNWP8TJEORgH3Wzocw29y/Vv89vDey7UVtZ2LY= Subject key identifier: 87:A0:EA:CA:E4:1B:64:33:33:30:4D:51:5F:63:20:58:91:33:19:46 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: 90 Signing time: Fri 13 Jun 2025 05:22:07 +0000 Manifest this update: Fri 13 Jun 2025 05:22:06 +0000 Manifest next update: Fri 20 Jun 2025 05:22:06 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: BIr237c9acTEkYdZxIsZvdvxgvmrjhWWG6TaDmbEWk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Jun 13 05:22:06 2025 GMT Not After : Jun 20 05:22:06 2025 GMT Subject: CN=684bb57f-0e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:06:6a:8f:9a:11:14:a7:7f:13:0c:5e:73:42: a9:f2:1b:b7:19:0b:10:71:84:e3:b2:f1:d9:98:74: e7:4d:98:68:1c:b1:0c:64:92:8e:d5:c6:d5:eb:a3: f5:70:c9:f2:df:f3:5e:84:2b:52:a4:45:b0:36:1a: e7:72:21:9d:93:a3:c4:36:a2:3b:4c:40:1d:4c:d7: d1:f5:22:04:cd:5a:3d:40:87:2a:ef:5b:2a:44:5d: 9d:78:15:75:c7:2b:bc:3b:f4:c0:c8:38:c4:e1:15: 49:77:53:a8:04:75:c1:db:08:86:20:48:f4:21:9f: 10:a7:ed:f3:e8:9b:0a:ef:cb:52:cd:d0:95:29:6f: f7:4a:ca:90:ba:87:5a:43:2c:7b:5c:fc:ea:a3:d1: 4a:32:49:d3:e1:51:08:76:2f:d4:de:0e:50:5a:ea: b0:ed:d8:27:fa:05:b3:59:9a:b9:58:42:c3:42:42: 86:1f:6a:33:40:cd:8d:4d:89:5f:6b:63:66:4a:7b: 12:4c:19:3a:7f:1d:11:b0:1a:3c:f5:cc:ce:25:12: bb:a3:67:9f:76:06:91:7a:f4:34:d1:ce:67:14:f5: d8:77:c0:78:29:85:30:d3:ce:d5:4f:df:01:c2:b4: 1d:71:e4:31:b4:60:a0:e0:66:a5:2f:e1:45:78:58: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:EA:CA:E4:1B:64:33:33:30:4D:51:5F:63:20:58:91:33:19:46 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f5:20:be:9c:e5:4b:dc:6f:a9:88:a9:4f:ff:30:2f:c9:e8: b4:df:0a:e4:6c:d7:77:30:f2:a3:dc:76:d2:47:13:3d:02:22: 33:b5:11:1d:60:73:7f:c8:da:0b:8d:55:d8:61:d9:31:47:81: a8:3e:ac:e2:59:78:7b:93:62:36:84:94:28:c8:4a:fe:c8:03: 34:bf:01:9f:6e:6d:f6:0c:95:1c:92:23:17:8a:65:f5:f8:7c: 89:c9:47:25:7f:0c:2e:70:01:da:f0:69:60:be:5f:5d:11:a8: 44:20:7b:e6:fc:05:55:61:a3:04:1b:e2:7d:29:54:dd:d4:1d: 70:73:9c:8d:5a:01:f6:31:fd:9f:40:8c:0b:c4:77:83:db:71: 87:37:48:4d:5d:a8:34:34:a3:54:f1:2c:48:f6:91:d5:12:86: f2:6f:56:19:7e:5d:a5:73:7c:4c:cb:0c:9a:34:37:a0:52:7a: b2:2e:2c:8a:e0:d9:a8:2c:04:62:d2:e6:2b:dd:cb:ba:81:5a: 93:05:ac:6b:62:e8:3f:68:7c:87:a7:63:23:14:ec:d2:98:ad: 94:a1:a5:55:c8:d0:60:07:d3:14:f1:d7:50:7e:6b:93:00:78: be:53:7d:57:ed:c2:a2:59:0c:68:31:70:5a:10:18:33:ae:cf: 58:b1:15:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjUwNjEzMDUyMjA2WhcNMjUwNjIwMDUyMjA2WjAYMRYwFAYD VQQDEw02ODRiYjU3Zi0wZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gZqj5oRFKd/Ewxec0Kp8hu3GQsQcYTjsvHZmHTnTZhoHLEMZJKO1cbV66P1 cMny3/NehCtSpEWwNhrnciGdk6PENqI7TEAdTNfR9SIEzVo9QIcq71sqRF2deBV1 xyu8O/TAyDjE4RVJd1OoBHXB2wiGIEj0IZ8Qp+3z6JsK78tSzdCVKW/3SsqQuoda Qyx7XPzqo9FKMknT4VEIdi/U3g5QWuqw7dgn+gWzWZq5WELDQkKGH2ozQM2NTYlf a2NmSnsSTBk6fx0RsBo89czOJRK7o2efdgaRevQ00c5nFPXYd8B4KYUw087VT98B wrQdceQxtGCg4GalL+FFeFj0zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeg6srk G2QzMzBNUV9jIFiRMxlGMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR9SC+nOVL3G+piKlP/zAvyei03wrkbNd3MPKj3HbSRxM9AiIztREd YHN/yNoLjVXYYdkxR4GoPqziWXh7k2I2hJQoyEr+yAM0vwGfbm32DJUckiMXimX1 +HyJyUclfwwucAHa8Glgvl9dEahEIHvm/AVVYaMEG+J9KVTd1B1wc5yNWgH2Mf2f QIwLxHeD23GHN0hNXag0NKNU8SxI9pHVEobyb1YZfl2lc3xMywyaNDegUnqyLiyK 4NmoLARi0uYr3cu6gVqTBaxrYug/aHyHp2MjFOzSmK2UoaVVyNBgB9MU8ddQfmuT AHi+U31X7cKiWQxoMXBaEBgzrs9YsRXo -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:58 2025 by rpki-client