$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: N9ao7vLJ8u+ARCkhQVM/QreIv+eNBXv538iXnqZdW3I= Subject key identifier: 2C:1C:5D:83:31:D1:79:47:57:D4:B1:8B:87:6D:54:BE:BC:BD:DD:69 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 1F36 Signing time: Wed 14 May 2025 16:10:01 +0000 Manifest this update: Wed 14 May 2025 16:10:00 +0000 Manifest next update: Wed 21 May 2025 16:10:00 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: MZhqyuMkJG9g1wpJ1CAnbueGvQOJbub6wGF87f6s1vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: May 14 16:10:00 2025 GMT Not After : May 21 16:10:00 2025 GMT Subject: CN=6824c059-f767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:63:50:8b:fb:15:f0:57:f7:bb:60:34:f2: 1a:36:66:6f:21:4b:22:9c:01:f5:6f:2d:39:1c:8b: a7:ac:09:f0:d9:cd:ff:b2:dd:28:92:e8:07:72:62: fb:a0:f7:94:0e:9f:d3:83:b0:47:de:50:5a:87:ee: 8a:07:c3:4c:ec:7c:82:7b:73:64:fc:92:88:6c:ec: d9:66:7e:24:ba:af:37:36:64:ab:95:09:e8:0c:8a: 6a:5a:06:5f:50:e8:2a:bd:27:12:06:f0:1a:4d:d3: 53:94:0b:69:bc:b4:b9:9f:f6:80:ce:ee:3f:db:3b: b7:b7:6b:fb:e4:a1:dc:c4:ce:2d:a2:c6:2c:d7:7f: 7c:ad:ec:c9:f9:27:b4:fd:19:ed:fe:69:c2:58:b3: 89:61:85:07:8e:9e:14:8a:a7:d9:d2:58:10:09:cf: 57:f2:e8:fc:fb:96:7c:e5:90:ae:a7:f1:fa:fa:5f: e3:fd:32:47:4a:57:1d:bd:ec:e9:48:45:80:41:b4: 5e:ee:ea:57:16:05:e5:96:a0:05:59:24:7d:9f:ea: 31:b5:99:a9:63:a2:42:a0:ee:dc:dc:fe:da:42:dd: 09:d1:4e:c9:a3:8c:69:45:de:2b:26:b4:2d:dd:4b: ee:3f:af:ee:f8:79:64:8f:a0:62:38:6c:16:53:39: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1C:5D:83:31:D1:79:47:57:D4:B1:8B:87:6D:54:BE:BC:BD:DD:69 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fc:51:7b:a7:c2:78:2a:97:45:78:08:fb:fe:67:97:7f:9b: 51:28:1b:db:88:6c:36:f4:ed:7f:b4:0f:2a:3b:a1:f4:98:6b: 30:d7:e2:9f:c4:51:a9:dd:df:96:fe:25:fe:4c:e5:90:50:f0: 75:cd:d3:25:91:e8:17:d6:9d:d4:8e:db:b1:08:13:05:da:d3: 53:b0:81:16:89:e7:ca:1c:0a:e8:a5:84:5a:c9:60:b7:e1:ef: 05:ab:c0:85:fc:84:3b:f4:a9:dc:ac:ef:21:6c:ac:12:11:58: c5:f2:68:79:b7:ed:7b:5c:22:12:16:ea:73:eb:63:ef:b8:a3: 3d:99:95:19:7a:44:be:cc:51:ab:0c:71:47:c0:d3:37:8f:93: e4:95:92:31:79:ca:8e:d6:1d:2e:19:cb:22:5d:21:07:1a:ba: 09:94:df:f8:9c:10:69:db:bb:10:11:c7:0e:84:4f:a3:45:15: 0f:f8:c7:51:02:aa:49:d8:03:9e:51:76:71:a0:b3:76:72:bf: d6:96:1f:94:20:04:fa:14:55:57:4e:1a:e0:a3:62:67:e1:e8: 57:bc:25:8a:98:93:70:ca:de:37:48:09:27:1c:ca:f8:52:70: c8:44:c8:8f:07:3a:8a:b8:c7:50:71:bd:fa:c4:f4:d2:56:91: 07:52:33:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUwNTE0MTYxMDAwWhcNMjUwNTIxMTYxMDAwWjAYMRYwFAYD VQQDEw02ODI0YzA1OS1mNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqldjUIv7FfBX97tgNPIaNmZvIUsinAH1by05HIunrAnw2c3/st0okugHcmL7 oPeUDp/Tg7BH3lBah+6KB8NM7HyCe3Nk/JKIbOzZZn4kuq83NmSrlQnoDIpqWgZf UOgqvScSBvAaTdNTlAtpvLS5n/aAzu4/2zu3t2v75KHcxM4tosYs1398rezJ+Se0 /Rnt/mnCWLOJYYUHjp4UiqfZ0lgQCc9X8uj8+5Z85ZCup/H6+l/j/TJHSlcdvezp SEWAQbRe7upXFgXllqAFWSR9n+oxtZmpY6JCoO7c3P7aQt0J0U7Jo4xpRd4rJrQt 3UvuP6/u+Hlkj6BiOGwWUznrawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwcXYMx 0XlHV9Sxi4dtVL68vd1pMB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/FF7p8J4KpdFeAj7/meXf5tRKBvbiGw29O1/tA8qO6H0mGsw1+Kf xFGp3d+W/iX+TOWQUPB1zdMlkegX1p3UjtuxCBMF2tNTsIEWiefKHAropYRayWC3 4e8Fq8CF/IQ79KncrO8hbKwSEVjF8mh5t+17XCISFupz62PvuKM9mZUZekS+zFGr DHFHwNM3j5PklZIxecqO1h0uGcsiXSEHGroJlN/4nBBp27sQEccOhE+jRRUP+MdR AqpJ2AOeUXZxoLN2cr/Wlh+UIAT6FFVXThrgo2Jn4ehXvCWKmJNwyt43SAknHMr4 UnDIRMiPBzqKuMdQcb36xPTSVpEHUjMh -----END CERTIFICATE-----Generated at Wed May 14 22:56:04 2025 by rpki-client