$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: gbaBJCAef3nCUFNlcZ6TVk5JzqM3yFQrn0bA9Pe7hl0= Subject key identifier: 72:FF:10:8D:34:22:2A:9D:1C:36:D3:DB:84:81:77:62:2C:DF:2E:34 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 0687 Signing time: Mon 16 Jun 2025 21:56:03 +0000 Manifest this update: Mon 16 Jun 2025 21:56:02 +0000 Manifest next update: Mon 23 Jun 2025 21:56:02 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: B0psZ3HTwwiAJcpPKwTE3GgQnUKvsvjFQP6x8kS3szI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Jun 16 21:56:02 2025 GMT Not After : Jun 23 21:56:02 2025 GMT Subject: CN=685092f3-4ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:53:3d:15:e4:0c:7c:f9:ea:e6:89:e5:cd: 21:df:2a:ab:ce:69:55:cf:90:b3:88:d6:bb:ac:36: 1a:97:ac:2e:83:3e:03:7a:35:12:62:80:37:8b:23: fa:fc:8e:29:6b:32:7a:03:9c:d8:1e:2e:de:bc:52: 42:c7:b9:5c:38:dd:8b:19:5c:90:0c:cc:f9:96:e7: ef:cb:ef:56:4d:8a:1d:2a:13:9c:49:65:9d:ca:0e: 69:00:87:3d:ac:d1:17:1e:34:6a:f0:fd:38:5c:88: e3:97:d0:be:71:ec:99:38:16:cf:28:01:d3:b4:6b: 35:50:84:2f:e1:a9:53:0b:0b:14:1c:6a:da:ed:40: 29:71:51:a0:4c:32:65:48:ae:ee:6b:79:48:1c:04: 4e:7f:87:52:0b:52:36:5c:0a:de:37:d2:31:94:4f: 93:be:58:cc:f5:cb:23:b3:bc:1e:70:94:e8:ef:63: 4b:0d:cb:e4:e7:c4:62:9d:63:12:5b:07:cd:b7:a7: 4a:b5:20:3b:39:24:93:90:e2:a2:3f:8d:24:42:9f: 7c:a7:4a:48:2e:4d:9d:9e:32:bc:38:3c:4e:6b:df: 21:b1:7c:d7:46:de:b4:72:80:0a:e7:77:5e:4f:70: f4:26:4f:7b:9d:da:ef:46:fa:b8:fb:52:84:bf:68: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FF:10:8D:34:22:2A:9D:1C:36:D3:DB:84:81:77:62:2C:DF:2E:34 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3a:54:0a:e9:ed:96:18:67:57:ee:e7:8e:74:23:bd:c6:05: ea:eb:54:f3:3c:b6:00:68:f0:43:00:29:40:f4:69:83:bf:01: 84:5c:cb:4e:da:6c:9b:7b:62:38:78:a7:b9:45:a8:88:37:3d: 8c:6a:90:d3:41:de:4a:97:9e:41:34:ea:79:bf:bc:27:a0:aa: a3:eb:f2:93:2f:d8:1b:eb:ef:1e:f4:5c:4b:0d:6f:98:7d:59: e4:17:a5:7c:ac:af:34:dc:2d:57:4f:5b:17:3b:7c:10:1d:17: cd:52:cc:30:41:e5:92:bd:f3:52:e0:fb:31:e0:88:7b:6c:c2: 04:b4:ce:16:33:aa:62:f6:2c:c2:94:07:9b:dd:db:ff:40:ce: 9a:35:27:bf:f4:e7:d6:d5:ac:97:72:6c:ca:49:96:ec:3f:1b: 4b:6f:0c:9f:72:07:ee:ae:26:85:2d:c5:bf:dd:1d:15:f5:3a: f4:bc:b3:41:74:37:08:91:76:18:b5:4b:a9:e5:60:b0:86:87: 94:94:b0:56:12:66:91:33:1b:91:a5:ee:9a:f3:be:43:87:9d: d7:b3:37:d4:c6:28:f3:1a:a7:07:cb:5a:d6:c4:88:45:5b:fe: 37:14:e6:5d:19:d1:23:bf:e3:c0:f5:d2:f7:7f:26:e5:bd:1d: e0:c5:d1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUwNjE2MjE1NjAyWhcNMjUwNjIzMjE1NjAyWjAYMRYwFAYD VQQDEw02ODUwOTJmMy00Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k9TPRXkDHz56uaJ5c0h3yqrzmlVz5CziNa7rDYal6wugz4DejUSYoA3iyP6 /I4pazJ6A5zYHi7evFJCx7lcON2LGVyQDMz5lufvy+9WTYodKhOcSWWdyg5pAIc9 rNEXHjRq8P04XIjjl9C+ceyZOBbPKAHTtGs1UIQv4alTCwsUHGra7UApcVGgTDJl SK7ua3lIHAROf4dSC1I2XAreN9IxlE+TvljM9csjs7wecJTo72NLDcvk58RinWMS WwfNt6dKtSA7OSSTkOKiP40kQp98p0pILk2dnjK8ODxOa98hsXzXRt60coAK53de T3D0Jk97ndrvRvq4+1KEv2i4ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL/EI00 IiqdHDbT24SBd2Is3y40MB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtOlQK6e2WGGdX7ueOdCO9xgXq61TzPLYAaPBDAClA9GmDvwGEXMtO 2mybe2I4eKe5RaiINz2MapDTQd5Kl55BNOp5v7wnoKqj6/KTL9gb6+8e9FxLDW+Y fVnkF6V8rK803C1XT1sXO3wQHRfNUswwQeWSvfNS4Psx4Ih7bMIEtM4WM6pi9izC lAeb3dv/QM6aNSe/9OfW1ayXcmzKSZbsPxtLbwyfcgfuriaFLcW/3R0V9Tr0vLNB dDcIkXYYtUup5WCwhoeUlLBWEmaRMxuRpe6a875Dh53XszfUxijzGqcHy1rWxIhF W/43FOZdGdEjv+PA9dL3fyblvR3gxdHn -----END CERTIFICATE-----Generated at Tue Jun 17 19:54:26 2025 by rpki-client