$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: hbkTb0uA0pawAtMBEAW2MJr+wZaQXynMFZd0IcotVIc= Subject key identifier: 47:8E:1E:C1:9E:7A:0B:B7:67:A7:C1:AA:E4:9E:C6:BE:23:2E:4A:8B Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: BE Signing time: Sun 29 Jun 2025 04:52:34 +0000 Manifest this update: Sun 29 Jun 2025 04:52:33 +0000 Manifest next update: Sun 06 Jul 2025 04:52:33 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: PTETElBR+6w0oJ4WHs8Q/RpWQJ7yakbcHy1Q2Z8XMLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Jun 29 04:52:33 2025 GMT Not After : Jul 6 04:52:33 2025 GMT Subject: CN=6860c692-e4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:f0:46:fd:bb:82:cb:f5:13:03:21:a0:80: 22:3c:74:ae:91:d8:72:60:a9:bc:b3:a4:f3:d6:96: bb:74:d0:10:35:85:a7:ae:b8:0d:06:a3:7b:c2:a4: 80:4d:1b:9d:49:fb:81:08:bd:76:89:a2:fb:f6:3f: 2c:6d:e1:79:64:f8:2a:e2:c4:97:b7:f9:fd:9c:ba: c8:15:6b:d2:d6:38:73:b4:b0:16:82:20:a1:bc:83: 4b:66:3e:32:de:74:8d:d7:04:56:07:b4:cc:84:ee: 96:45:b7:55:9a:e8:42:47:10:ef:f1:ed:bb:36:d5: 20:6e:19:50:fa:31:ce:d9:7a:70:b3:25:c5:3b:81: 25:bd:4e:7e:84:f1:ab:ae:20:53:c7:32:2c:a9:23: 48:0d:16:2f:31:ad:e1:b1:80:c7:09:55:ea:f6:1e: 8b:56:19:53:51:40:cc:ab:6e:f2:c8:88:f7:ee:75: 76:1d:96:d5:59:1a:35:a7:e1:61:10:dd:e3:45:40: fd:14:c2:f0:60:5c:64:ef:f2:a5:9b:24:b8:b8:36: 93:3d:27:be:46:b2:33:87:f7:bc:df:29:5b:e8:29: 5e:6a:f8:d5:f2:62:8a:68:6e:24:36:51:b6:52:57: 18:f4:fc:f3:3e:3f:c2:60:6f:c8:6e:ce:53:23:f2: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:1E:C1:9E:7A:0B:B7:67:A7:C1:AA:E4:9E:C6:BE:23:2E:4A:8B X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d2:eb:1b:42:cb:e3:f2:6b:ec:92:ce:75:69:a0:3c:f9:11: ce:3e:8b:55:f1:6e:6d:53:e5:ef:4e:96:31:b4:76:be:69:63: fa:7b:51:24:ef:86:a8:63:14:cd:d4:99:41:30:d6:c3:e4:d2: ba:40:19:48:38:d4:52:31:2a:78:c6:58:61:f5:b9:56:07:cb: 7b:ee:92:dc:79:9b:9e:5d:fa:22:e8:b9:8e:1a:20:4d:32:d8: cf:ac:5f:67:75:57:71:c7:86:ad:23:cc:d8:74:b1:80:13:dd: 61:ca:0d:15:7f:2e:c3:bb:3b:81:47:ca:a5:a8:d5:53:a3:c8: 56:63:1c:65:ca:2a:c4:f1:41:54:53:34:91:02:b4:eb:ce:49: c1:f9:70:f3:55:ae:fb:6b:96:c4:97:7b:31:f5:81:63:65:ef: 96:0a:e1:7a:5f:90:70:16:1b:ab:7d:0a:1b:96:eb:f2:5c:6f: 52:73:42:60:a1:80:3a:1b:a1:8c:af:be:78:ce:91:48:fd:a6: 82:c6:8e:bc:6b:5d:e5:ea:55:a6:8a:09:6b:59:d1:8b:0c:9d: 5e:c6:0d:a5:0b:67:cb:a3:6c:39:b7:b5:8e:f1:32:0a:1e:d1: 9a:d8:6e:f5:f4:14:22:59:4d:d6:2f:34:73:bb:58:7d:d1:73: e6:b8:ac:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUwNjI5MDQ1MjMzWhcNMjUwNzA2MDQ1MjMzWjAYMRYwFAYD VQQDEw02ODYwYzY5Mi1lNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dXwRv27gsv1EwMhoIAiPHSukdhyYKm8s6Tz1pa7dNAQNYWnrrgNBqN7wqSA TRudSfuBCL12iaL79j8sbeF5ZPgq4sSXt/n9nLrIFWvS1jhztLAWgiChvINLZj4y 3nSN1wRWB7TMhO6WRbdVmuhCRxDv8e27NtUgbhlQ+jHO2XpwsyXFO4ElvU5+hPGr riBTxzIsqSNIDRYvMa3hsYDHCVXq9h6LVhlTUUDMq27yyIj37nV2HZbVWRo1p+Fh EN3jRUD9FMLwYFxk7/KlmyS4uDaTPSe+RrIzh/e83ylb6CleavjV8mKKaG4kNlG2 UlcY9PzzPj/CYG/Ibs5TI/JekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeOHsGe egu3Z6fBquSexr4jLkqLMB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE0usbQsvj8mvsks51aaA8+RHOPotV8W5tU+XvTpYxtHa+aWP6e1Ek 74aoYxTN1JlBMNbD5NK6QBlIONRSMSp4xlhh9blWB8t77pLceZueXfoi6LmOGiBN MtjPrF9ndVdxx4atI8zYdLGAE91hyg0Vfy7DuzuBR8qlqNVTo8hWYxxlyirE8UFU UzSRArTrzknB+XDzVa77a5bEl3sx9YFjZe+WCuF6X5BwFhurfQobluvyXG9Sc0Jg oYA6G6GMr754zpFI/aaCxo68a13l6lWmiglrWdGLDJ1exg2lC2fLo2w5t7WO8TIK HtGa2G719BQiWU3WLzRzu1h90XPmuKzZ -----END CERTIFICATE-----Generated at Mon Jun 30 17:30:03 2025 by rpki-client