$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 7c+4xRXVaZSWM6fIhdA+TsjhOCWy7gBJKN1nRBn9uq0= Subject key identifier: 03:58:25:B2:FD:6B:82:56:0E:C4:D3:CA:F8:C9:CB:E1:D7:E9:EF:41 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1152 Signing time: Thu 12 Jun 2025 19:25:25 +0000 Manifest this update: Thu 12 Jun 2025 19:25:24 +0000 Manifest next update: Thu 19 Jun 2025 19:25:24 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: z/amEW7mvKylqrF+kNI4I4iHHb0r2qrokiTEBz1ct5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Jun 12 19:25:24 2025 GMT Not After : Jun 19 19:25:24 2025 GMT Subject: CN=684b29a4-7118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:23:f5:5b:c3:13:27:f6:44:2d:2a:31:1b: 9e:b2:74:85:17:3c:8a:c4:1e:84:3f:34:b5:ff:48: bb:86:73:b8:0b:6b:6c:4a:2a:59:53:29:ec:ad:ba: c9:02:9c:14:5d:09:2b:1d:06:cb:6c:fc:91:52:d4: c3:ed:f8:b3:6f:a8:55:c0:56:a1:e5:54:01:19:ab: 72:79:a2:87:2d:25:22:8c:da:0a:9e:06:8f:cb:08: ab:e7:74:d5:13:f9:a3:4c:7e:79:e1:07:c7:27:1a: f8:5c:ba:10:22:76:84:3f:6d:cb:81:60:6e:c7:0b: 08:75:5c:be:81:b3:79:e4:36:cb:09:44:48:af:b9: cf:75:bb:a8:b5:32:d1:53:7f:8a:6b:e2:95:01:79: 55:ee:6c:f8:7e:2b:40:63:2c:d7:13:19:66:0c:cd: 10:52:61:a6:d2:1b:65:ca:22:44:78:f9:57:b1:4f: b3:53:de:95:5a:17:ce:a4:69:a9:48:ba:48:a5:14: 7d:8c:0a:7c:d4:5b:74:13:ce:fd:d4:39:2a:18:85: e2:36:7e:94:fc:b0:91:ca:9a:de:97:89:22:2b:fe: ed:6d:cb:f4:b1:b1:1c:55:ab:87:70:dc:dc:2f:00: 28:d8:bd:de:88:50:3f:80:10:65:a9:79:ee:e5:7e: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:25:B2:FD:6B:82:56:0E:C4:D3:CA:F8:C9:CB:E1:D7:E9:EF:41 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ad:de:27:97:2f:66:37:02:7f:38:e2:a1:20:18:79:bd:2e: 4c:8c:17:0d:ec:5b:86:ed:b7:ff:ed:ee:54:b2:f2:67:e4:ca: 9a:d5:9c:3f:19:fb:a6:01:05:24:0e:60:a4:8c:96:f9:27:8e: 7f:36:14:23:7d:1a:db:3d:57:5a:c5:f2:1d:fd:14:22:c1:9d: f0:7f:f2:b1:b3:84:34:99:e2:8c:f7:62:60:5b:0f:a7:4d:f4: 38:c8:2c:1b:0a:0c:bb:57:44:97:51:c0:a8:7f:b8:3c:c3:ed: e9:a8:13:21:59:b8:77:ad:72:8c:88:97:fd:d7:d9:0c:02:be: 0c:0f:d5:ee:c7:c6:e7:80:23:be:4d:7a:61:fd:30:c4:d5:31: e7:9f:b8:a7:a3:7e:a1:07:d9:65:bb:81:b7:2a:bb:3a:84:f8: 9f:48:3c:54:f4:55:f1:f5:e2:95:a7:ed:a4:df:2b:35:2b:82: 84:12:35:83:5a:9b:58:28:87:45:07:f6:8a:98:56:c9:ff:12: 4d:2b:d6:65:f5:da:d8:ab:05:9a:e5:ff:b3:9e:fb:c5:5f:dd: a6:20:ff:b9:35:98:a9:f6:e5:8c:72:bd:99:56:c6:38:13:e4: 90:38:5a:be:62:10:29:82:db:db:23:dd:c9:5f:dc:8d:2c:cd: 77:c0:d0:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwNjEyMTkyNTI0WhcNMjUwNjE5MTkyNTI0WjAYMRYwFAYD VQQDEw02ODRiMjlhNC03MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36sj9VvDEyf2RC0qMRuesnSFFzyKxB6EPzS1/0i7hnO4C2tsSipZUynsrbrJ ApwUXQkrHQbLbPyRUtTD7fizb6hVwFah5VQBGatyeaKHLSUijNoKngaPywir53TV E/mjTH554QfHJxr4XLoQInaEP23LgWBuxwsIdVy+gbN55DbLCURIr7nPdbuotTLR U3+Ka+KVAXlV7mz4fitAYyzXExlmDM0QUmGm0htlyiJEePlXsU+zU96VWhfOpGmp SLpIpRR9jAp81Ft0E8791DkqGIXiNn6U/LCRyprel4kiK/7tbcv0sbEcVauHcNzc LwAo2L3eiFA/gBBlqXnu5X5CrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANYJbL9 a4JWDsTTyvjJy+HX6e9BMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjrd4nly9mNwJ/OOKhIBh5vS5MjBcN7FuG7bf/7e5UsvJn5Mqa1Zw/ GfumAQUkDmCkjJb5J45/NhQjfRrbPVdaxfId/RQiwZ3wf/Kxs4Q0meKM92JgWw+n TfQ4yCwbCgy7V0SXUcCof7g8w+3pqBMhWbh3rXKMiJf919kMAr4MD9Xux8bngCO+ TXph/TDE1THnn7ino36hB9llu4G3Krs6hPifSDxU9FXx9eKVp+2k3ys1K4KEEjWD WptYKIdFB/aKmFbJ/xJNK9Zl9drYqwWa5f+znvvFX92mIP+5NZip9uWMcr2ZVsY4 E+SQOFq+YhApgtvbI93JX9yNLM13wNAz -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:33 2025 by rpki-client