$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: cXCXxc8YDZrkBmi0sln2NHqwRw/cQYtkM0QYlmYqvOU= Subject key identifier: FF:E1:1B:69:F6:24:64:5B:E0:53:DE:90:95:11:73:AB:B6:2C:33:81 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 1F68 Signing time: Wed 02 Jul 2025 16:12:00 +0000 Manifest this update: Wed 02 Jul 2025 16:11:59 +0000 Manifest next update: Wed 09 Jul 2025 16:11:59 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: 9H/YmUAUWVvTaWW5ho99DReNv5ELy9JhObFB36sZPrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: Jul 2 16:11:59 2025 GMT Not After : Jul 9 16:11:59 2025 GMT Subject: CN=68655a4f-287a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:38:5d:41:b3:76:b8:a4:cb:85:45:02:a7: 58:31:77:98:be:57:2a:a9:52:3a:14:8c:fe:66:20: 75:98:9b:f1:5c:c4:12:d4:21:65:97:44:8e:cc:cd: 6d:58:53:a4:30:d4:df:8e:40:13:73:9d:4d:8d:a9: e5:0b:2e:4c:bc:40:c0:31:8b:09:7d:e2:d2:42:e0: 85:12:42:2a:4f:f0:9e:8f:94:1a:5b:6c:7b:2e:a4: a3:b6:66:9e:e5:b5:1b:c9:e4:4c:38:6b:06:7d:0f: a3:6c:fd:37:13:2d:6f:9d:ac:c1:de:ff:70:2e:a9: be:87:ff:6e:e3:2b:ef:48:6a:29:26:3f:c8:5d:d3: ba:ca:ea:19:30:6a:91:28:f4:43:79:02:76:d1:73: 75:87:7d:06:4d:be:57:a0:27:a1:13:00:08:01:47: 16:ee:c5:8d:38:57:6d:53:28:75:76:2e:18:eb:f7: 4f:fe:34:e9:ce:f5:64:f4:87:e3:18:ab:60:d4:af: 1f:40:65:de:e8:07:b5:86:81:cb:4e:06:40:9d:dc: 1c:45:1b:62:d1:d0:f7:51:a7:a2:70:5d:5f:05:d9: 21:d6:d9:21:4e:50:a0:19:80:8c:4b:a6:f5:05:ad: c1:21:c9:7f:d0:ff:4a:95:38:98:14:e3:f3:3c:b0: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:1B:69:F6:24:64:5B:E0:53:DE:90:95:11:73:AB:B6:2C:33:81 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:19:c3:bb:f5:2d:3f:ff:3a:90:51:6e:51:44:ef:46:c2:49: da:68:9f:3d:2a:29:0e:98:69:8c:74:12:fc:2e:00:ff:3a:2b: b2:89:dc:a9:9a:ce:2d:39:91:ce:af:6c:f8:81:26:47:56:d2: ab:f8:46:6b:6f:f8:3a:fd:ee:84:b3:75:b7:31:3b:03:ad:9a: d3:8d:9c:95:3e:e2:32:71:05:21:d1:66:83:f0:98:8e:e7:6b: 52:77:74:4c:95:df:6d:1d:06:29:de:32:65:40:b2:ac:89:e0: 70:50:9f:dd:c0:a3:c2:29:46:72:69:ca:aa:a7:23:dc:59:b2: ab:55:71:ea:2a:60:ab:31:18:ac:f6:4c:8d:c4:f3:b1:40:37: 0f:89:a0:85:69:76:9a:1a:68:7f:52:e6:80:ed:f8:a9:37:ee: 5d:ce:43:ad:13:9f:03:a0:1a:60:65:a6:ad:1c:86:8f:ff:0f: e1:72:f9:f2:35:71:77:54:94:ff:3f:53:f5:0c:79:95:6d:dc: 01:0e:3f:23:0e:d2:df:3c:95:1f:ee:40:ed:25:c1:ae:56:ab: 61:ef:a3:91:5c:c6:82:d3:3f:08:a1:70:8b:e8:ec:ac:14:b2: 59:b8:6a:a5:ad:8b:51:c7:e2:2c:d5:1b:00:c2:8f:d3:be:44: cd:5f:bd:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUwNzAyMTYxMTU5WhcNMjUwNzA5MTYxMTU5WjAYMRYwFAYD VQQDEw02ODY1NWE0Zi0yODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynU4XUGzdriky4VFAqdYMXeYvlcqqVI6FIz+ZiB1mJvxXMQS1CFll0SOzM1t WFOkMNTfjkATc51NjanlCy5MvEDAMYsJfeLSQuCFEkIqT/Cej5QaW2x7LqSjtmae 5bUbyeRMOGsGfQ+jbP03Ey1vnazB3v9wLqm+h/9u4yvvSGopJj/IXdO6yuoZMGqR KPRDeQJ20XN1h30GTb5XoCehEwAIAUcW7sWNOFdtUyh1di4Y6/dP/jTpzvVk9Ifj GKtg1K8fQGXe6Ae1hoHLTgZAndwcRRti0dD3UaeicF1fBdkh1tkhTlCgGYCMS6b1 Ba3BIcl/0P9KlTiYFOPzPLDDfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/hG2n2 JGRb4FPekJURc6u2LDOBMB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsGcO79S0//zqQUW5RRO9GwknaaJ89KikOmGmMdBL8LgD/Oiuyidyp ms4tOZHOr2z4gSZHVtKr+EZrb/g6/e6Es3W3MTsDrZrTjZyVPuIycQUh0WaD8JiO 52tSd3RMld9tHQYp3jJlQLKsieBwUJ/dwKPCKUZyacqqpyPcWbKrVXHqKmCrMRis 9kyNxPOxQDcPiaCFaXaaGmh/UuaA7fipN+5dzkOtE58DoBpgZaatHIaP/w/hcvny NXF3VJT/P1P1DHmVbdwBDj8jDtLfPJUf7kDtJcGuVqth76ORXMaC0z8IoXCL6Oys FLJZuGqlrYtRx+Is1RsAwo/TvkTNX70A -----END CERTIFICATE-----Generated at Thu Jul 3 01:19:05 2025 by rpki-client