$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: LTIP8Wh9rzyYZ4Xmdxd3FIPlpAhtCInkO2x5O9mjK0s= Subject key identifier: D2:F4:F7:CA:C4:36:E3:E7:4F:29:D4:E2:E5:83:D7:B4:CC:A2:28:A9 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: 9A Signing time: Thu 03 Jul 2025 06:30:45 +0000 Manifest this update: Thu 03 Jul 2025 06:30:45 +0000 Manifest next update: Thu 10 Jul 2025 06:30:45 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: nzd/mWJP1Q5UOEC62EnLJWWZQLZx7k5qTDK+/lTY/f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Jul 3 06:30:45 2025 GMT Not After : Jul 10 06:30:45 2025 GMT Subject: CN=68662395-757c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:c2:00:e5:68:7c:c0:8f:ad:2a:51:65:ab: 3d:1d:d2:ea:dd:34:0b:c6:f3:f0:7a:e5:6f:5b:88: 83:89:c5:df:6b:77:a1:ae:7b:72:43:4d:f8:1a:2d: 9f:e6:a0:11:50:c0:ab:51:30:eb:1c:ba:6c:14:30: ed:3f:93:86:c7:da:fa:38:a3:bc:4b:3b:96:75:12: d0:33:ec:20:ae:b9:8f:29:e5:52:8f:ce:08:f1:09: 6b:9d:ac:ff:77:55:7c:d0:cf:71:17:1d:fe:d6:a9: 43:38:18:57:52:57:b6:30:9f:14:77:6a:7a:81:6d: 9b:e2:f6:cc:8f:ce:41:0a:f7:b9:b5:8b:b2:3b:a1: 1b:c0:c4:b8:c9:76:b7:59:f2:41:ff:cc:c5:5c:99: 85:8a:20:6f:6d:71:6f:3a:6a:f1:e4:87:34:73:87: ed:1e:77:04:8c:a9:a4:f7:ba:7b:ae:22:38:84:26: 03:10:5c:e3:6e:7f:03:af:33:10:24:1f:33:c3:de: df:b9:82:6d:58:0c:83:f6:c5:95:a5:09:32:67:f7: af:18:06:bf:36:47:1e:50:3c:ff:cc:01:60:36:e0: e2:18:1e:18:41:d2:96:8c:31:cf:55:04:ef:7e:31: a3:c4:7f:bf:d9:32:af:2d:3f:d7:85:94:22:71:6c: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:F7:CA:C4:36:E3:E7:4F:29:D4:E2:E5:83:D7:B4:CC:A2:28:A9 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:36:3a:34:2e:5f:57:52:7b:81:9e:84:19:ce:07:81:74:33: 8e:54:2c:24:67:19:d1:9c:c0:3e:2e:89:cc:a9:ab:26:65:d6: 41:83:cc:ff:70:d7:28:01:cd:d2:4c:34:cb:82:bb:2b:28:02: 1f:70:e0:a0:e8:9b:83:fd:d5:74:be:dd:5a:68:79:35:c5:3c: a7:e6:45:c3:3d:d6:f4:2f:a9:fa:88:21:b5:f9:03:95:2c:1e: 56:01:0d:53:4f:82:cf:d0:f9:be:94:56:a2:5e:75:4c:bc:ff: f0:d7:65:10:6d:bd:8b:76:19:61:6f:1e:84:c2:fb:3d:88:7d: 08:91:8f:a4:9c:7a:92:fb:69:df:ff:d9:c1:5a:7b:4b:bf:1e: 31:36:08:5b:e3:9f:7a:3b:3e:43:31:c1:4e:05:97:8c:6c:a8: c6:12:39:63:59:a8:e6:64:8c:1f:e6:93:43:39:2f:9c:b6:b1: 5f:6a:57:95:ac:cf:f0:21:3c:f4:af:30:0c:3f:a9:00:2c:88: 40:2c:35:27:4f:2a:63:9c:6c:57:95:20:57:16:04:d0:5a:78: cd:58:45:14:81:92:43:e8:d8:cf:8b:1d:75:8b:e2:5f:eb:ef: 0a:b9:6f:7d:f7:fe:35:01:8f:35:b8:64:f6:78:5b:54:3a:47: b6:09:74:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjUwNzAzMDYzMDQ1WhcNMjUwNzEwMDYzMDQ1WjAYMRYwFAYD VQQDEw02ODY2MjM5NS03NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+PCAOVofMCPrSpRZas9HdLq3TQLxvPweuVvW4iDicXfa3ehrntyQ034Gi2f 5qARUMCrUTDrHLpsFDDtP5OGx9r6OKO8SzuWdRLQM+wgrrmPKeVSj84I8Qlrnaz/ d1V80M9xFx3+1qlDOBhXUle2MJ8Ud2p6gW2b4vbMj85BCve5tYuyO6EbwMS4yXa3 WfJB/8zFXJmFiiBvbXFvOmrx5Ic0c4ftHncEjKmk97p7riI4hCYDEFzjbn8DrzMQ JB8zw97fuYJtWAyD9sWVpQkyZ/evGAa/NkceUDz/zAFgNuDiGB4YQdKWjDHPVQTv fjGjxH+/2TKvLT/XhZQicWx+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL098rE NuPnTynU4uWD17TMoiipMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBENjo0Ll9XUnuBnoQZzgeBdDOOVCwkZxnRnMA+LonMqasmZdZBg8z/ cNcoAc3STDTLgrsrKAIfcOCg6JuD/dV0vt1aaHk1xTyn5kXDPdb0L6n6iCG1+QOV LB5WAQ1TT4LP0Pm+lFaiXnVMvP/w12UQbb2Ldhlhbx6Ewvs9iH0IkY+knHqS+2nf /9nBWntLvx4xNghb4596Oz5DMcFOBZeMbKjGEjljWajmZIwf5pNDOS+ctrFfaleV rM/wITz0rzAMP6kALIhALDUnTypjnGxXlSBXFgTQWnjNWEUUgZJD6NjPix11i+Jf 6+8KuW999/41AY81uGT2eFtUOke2CXSR -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:08 2025 by rpki-client