$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: FTPw7pmE4LNLey6Ct9e9y6nrygRwSEHDeYlu135H0Y8= Subject key identifier: 6F:62:63:8F:D1:A3:36:12:B3:54:EF:5B:F1:DA:3F:53:73:78:5A:5A Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0652 Signing time: Wed 02 Jul 2025 22:39:36 +0000 Manifest this update: Wed 02 Jul 2025 22:39:36 +0000 Manifest next update: Wed 09 Jul 2025 22:39:36 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: v++rPLgcr1WIBlN/Aj9pE2rcN/496sn8EPyLD8LP2D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Jul 2 22:39:36 2025 GMT Not After : Jul 9 22:39:36 2025 GMT Subject: CN=6865b528-ff0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:9a:cd:54:92:90:10:04:70:43:f5:6a:d2: 75:d6:9d:52:c1:42:70:f1:8b:fc:7e:f6:9f:56:78: c0:9f:26:16:2a:83:d6:d5:04:f7:e2:23:86:34:61: f2:0a:55:b0:d6:8e:7c:8c:ae:ef:ec:d1:f2:fa:8d: db:c0:ad:a9:89:76:73:04:97:bf:b5:60:5f:ae:36: 43:a9:26:f2:d1:80:fe:e1:b5:d7:96:83:15:98:3a: ae:b3:f6:c2:a6:4e:7e:9b:6f:b1:f3:13:51:4b:90: 8d:a6:6b:ec:5c:a4:8c:86:68:69:14:78:d2:5d:81: d1:b9:30:21:2d:fd:55:ba:42:e0:66:17:42:09:3a: 36:ac:04:b4:71:0f:02:9d:50:b1:53:86:1f:20:a5: 0f:94:c6:71:12:41:f1:f1:b7:8a:d2:19:de:3b:24: a0:c9:e4:ac:f4:bb:0d:c1:d8:6f:d6:62:7b:e0:95: 89:50:41:50:8c:fc:da:a1:51:f4:fa:72:fc:de:c1: c7:be:dc:c9:e6:e3:f3:a0:3c:a6:6d:00:30:9b:69: 78:1d:32:3d:1b:2e:62:a6:62:70:82:5f:6d:3b:12: 2e:23:1f:b1:fd:36:82:53:e6:d0:40:ca:70:08:f2: 98:66:60:af:3b:b9:fb:4c:dd:1d:af:5e:25:79:10: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:62:63:8F:D1:A3:36:12:B3:54:EF:5B:F1:DA:3F:53:73:78:5A:5A X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ab:2c:d4:86:cd:3d:cd:96:fe:2f:e5:7c:7d:90:71:3d:25: 66:78:84:6d:97:93:75:44:d4:4a:4a:20:2c:e4:2f:c7:63:d1: fd:97:d9:cf:2c:9e:55:b7:a5:78:79:b5:08:fd:d6:16:1d:c5: e0:c9:41:51:38:73:89:b7:24:cd:29:19:27:3f:cb:41:b1:63: 18:dd:c2:bc:dd:5c:b6:d2:10:5e:16:8c:bb:a4:b7:e0:0c:8c: 2f:df:c0:8f:55:dc:8a:3f:85:77:39:6a:d2:ea:8c:68:af:03: 8e:e7:a4:b7:6a:03:c2:4b:d1:c5:49:83:86:29:3b:45:c5:1e: 0d:b0:22:fa:39:c7:58:bc:94:15:05:df:63:a9:b2:2a:20:22: c4:3f:d5:8f:ea:fe:ec:ae:5f:16:8e:cf:36:90:17:7a:85:2c: 49:6a:c4:d8:f6:65:c3:39:fc:0b:5a:f7:7c:ad:08:d5:c8:46: 38:b7:56:b8:ef:97:73:5b:32:0f:9c:ad:14:ad:c6:e1:0b:8a: 8d:66:8c:5a:03:93:53:d7:cf:2b:9a:62:1d:2a:52:58:d0:7d: 5b:22:de:c3:3e:36:d9:d5:7a:47:1d:1b:9e:b7:d9:b1:5d:b5: 50:32:c2:79:f4:b0:fa:ba:78:81:c1:74:0b:48:e7:44:77:ed: 17:70:8e:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwNzAyMjIzOTM2WhcNMjUwNzA5MjIzOTM2WjAYMRYwFAYD VQQDEw02ODY1YjUyOC1mZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYCazVSSkBAEcEP1atJ11p1SwUJw8Yv8fvafVnjAnyYWKoPW1QT34iOGNGHy ClWw1o58jK7v7NHy+o3bwK2piXZzBJe/tWBfrjZDqSby0YD+4bXXloMVmDqus/bC pk5+m2+x8xNRS5CNpmvsXKSMhmhpFHjSXYHRuTAhLf1VukLgZhdCCTo2rAS0cQ8C nVCxU4YfIKUPlMZxEkHx8beK0hneOySgyeSs9LsNwdhv1mJ74JWJUEFQjPzaoVH0 +nL83sHHvtzJ5uPzoDymbQAwm2l4HTI9Gy5ipmJwgl9tOxIuIx+x/TaCU+bQQMpw CPKYZmCvO7n7TN0dr14leRAICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9iY4/R ozYSs1TvW/HaP1NzeFpaMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCqyzUhs09zZb+L+V8fZBxPSVmeIRtl5N1RNRKSiAs5C/HY9H9l9nP LJ5Vt6V4ebUI/dYWHcXgyUFROHOJtyTNKRknP8tBsWMY3cK83Vy20hBeFoy7pLfg DIwv38CPVdyKP4V3OWrS6oxorwOO56S3agPCS9HFSYOGKTtFxR4NsCL6OcdYvJQV Bd9jqbIqICLEP9WP6v7srl8Wjs82kBd6hSxJasTY9mXDOfwLWvd8rQjVyEY4t1a4 75dzWzIPnK0UrcbhC4qNZoxaA5NT188rmmIdKlJY0H1bIt7DPjbZ1XpHHRuet9mx XbVQMsJ59LD6uniBwXQLSOdEd+0XcI6w -----END CERTIFICATE-----Generated at Fri Jul 4 07:50:59 2025 by rpki-client