$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: W1vpyHRBaYBnmuRwdWRU5SDw9CZzBap4ncmFAevmmv8= Subject key identifier: 9A:76:75:A5:A8:72:6A:8A:08:EE:BC:EB:48:21:4E:08:46:23:9B:82 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0DF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0DF6 Signing time: Thu 24 Apr 2025 17:48:23 +0000 Manifest this update: Thu 24 Apr 2025 17:48:23 +0000 Manifest next update: Thu 01 May 2025 17:48:23 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: FF8pcyK1l80zHYDX9C+GS/CgMZioDpq0x15nbRhu1SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Apr 24 17:48:23 2025 GMT Not After : May 1 17:48:23 2025 GMT Subject: CN=680a7967-b291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:ac:91:02:d0:ef:56:5a:b6:64:7c:1a:d8: 1a:5a:3a:50:a0:38:d0:a4:55:a0:36:67:45:e7:a2: ae:73:19:89:4f:77:dd:d6:c1:de:25:a2:5c:39:87: c9:c2:7c:ab:78:86:cc:c8:c6:73:f5:c7:52:39:58: 59:4c:1d:24:b9:6f:c6:69:fd:9d:39:3e:94:e8:3a: d0:84:c4:d0:0c:7d:ba:98:5e:5f:2a:84:39:36:b0: 52:a6:3c:fa:1a:7f:48:a4:17:a5:82:af:18:7b:69: 99:85:8e:74:f1:d7:52:80:bc:38:95:4c:6d:b0:23: b3:7b:b0:9b:38:9a:13:ff:27:58:48:b6:0e:36:0b: d6:02:99:59:66:35:d2:5b:4a:fd:e6:2d:06:c3:0b: 4a:47:72:92:3d:47:60:04:40:ef:ba:08:dd:53:e0: 1f:6d:ab:f9:bd:1c:e2:d2:cd:28:7c:cb:2f:89:54: 7f:b0:75:a7:54:52:f6:d3:14:38:c0:5a:56:38:1a: 83:95:06:37:ab:26:7b:16:43:9e:fd:7c:4c:eb:01: 74:ea:96:c8:18:35:c6:7f:d6:f9:e4:73:08:2b:25: 71:36:e3:74:c0:3b:3a:16:14:9f:7d:ea:9f:ee:12: 36:5a:d2:af:2a:da:f1:8e:58:04:04:7e:49:d3:ac: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:76:75:A5:A8:72:6A:8A:08:EE:BC:EB:48:21:4E:08:46:23:9B:82 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:57:da:5e:b4:4f:07:30:d3:b2:b5:c8:da:d9:87:7a:3b:a3: 1b:25:39:aa:f9:f2:6a:50:d9:80:a1:27:4d:be:99:9c:e3:eb: 3d:88:49:6b:af:16:7a:4d:af:e5:35:5b:38:e9:1d:74:a3:e9: 30:77:9b:c3:c1:4d:64:57:29:74:17:74:34:74:49:ba:de:89: 84:28:ef:c7:04:cb:67:1b:18:83:cc:9f:6c:54:23:81:28:8a: be:2e:f2:48:8c:b1:93:33:5f:3e:90:71:2e:64:92:6e:e8:e5: 86:44:6f:85:e4:c4:0b:6a:b9:1a:e9:bf:8e:e3:df:9f:66:6f: ce:b7:f4:2c:46:c1:0f:44:61:af:61:37:56:cf:fb:af:e8:77: 2f:36:bf:2a:b1:81:03:15:73:b1:26:75:d0:73:5a:47:76:d9: 69:f8:3e:53:37:3c:63:10:99:fd:37:e9:12:71:4c:c2:9e:0d: 2d:cb:4b:2c:72:5e:c5:56:02:cb:bf:fd:62:c9:17:03:82:6f: 89:f9:d5:1f:19:d6:be:2c:c4:66:a7:a6:d4:ce:a7:85:5e:f6: f0:03:10:a4:82:e3:91:da:6f:4e:78:ed:d2:63:d6:da:d0:a9: 6d:e0:2b:81:00:08:d2:32:13:4f:f3:f8:0e:02:fe:d5:00:1c: ce:51:fb:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUwNDI0MTc0ODIzWhcNMjUwNTAxMTc0ODIzWjAYMRYwFAYD VQQDEw02ODBhNzk2Ny1iMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LeskQLQ71ZatmR8GtgaWjpQoDjQpFWgNmdF56KucxmJT3fd1sHeJaJcOYfJ wnyreIbMyMZz9cdSOVhZTB0kuW/Gaf2dOT6U6DrQhMTQDH26mF5fKoQ5NrBSpjz6 Gn9IpBelgq8Ye2mZhY508ddSgLw4lUxtsCOze7CbOJoT/ydYSLYONgvWAplZZjXS W0r95i0GwwtKR3KSPUdgBEDvugjdU+Afbav5vRzi0s0ofMsviVR/sHWnVFL20xQ4 wFpWOBqDlQY3qyZ7FkOe/XxM6wF06pbIGDXGf9b55HMIKyVxNuN0wDs6FhSffeqf 7hI2WtKvKtrxjlgEBH5J06yY4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp2daWo cmqKCO6860ghTghGI5uCMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiV9petE8HMNOytcja2Yd6O6MbJTmq+fJqUNmAoSdNvpmc4+s9iElr rxZ6Ta/lNVs46R10o+kwd5vDwU1kVyl0F3Q0dEm63omEKO/HBMtnGxiDzJ9sVCOB KIq+LvJIjLGTM18+kHEuZJJu6OWGRG+F5MQLarka6b+O49+fZm/Ot/QsRsEPRGGv YTdWz/uv6HcvNr8qsYEDFXOxJnXQc1pHdtlp+D5TNzxjEJn9N+kScUzCng0ty0ss cl7FVgLLv/1iyRcDgm+J+dUfGda+LMRmp6bUzqeFXvbwAxCkguOR2m9OeO3SY9ba 0Klt4CuBAAjSMhNP8/gOAv7VABzOUfuB -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:56 2025 by rpki-client