$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: trgWbu9gW999e8rI+KhKCjbcFlYEDWWq1nbiWUNZ+E8= Subject key identifier: 6F:0B:24:44:D7:61:8E:DC:04:8D:07:AF:35:82:A7:A1:97:06:47:CE Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E32 Signing time: Fri 22 Aug 2025 17:53:54 +0000 Manifest this update: Fri 22 Aug 2025 17:53:54 +0000 Manifest next update: Fri 29 Aug 2025 17:53:54 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: Q9/xS3Fu2tDcpmlFCa6CfK25JxfSzXPjUly9+3ykc0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3635 (0xe33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Aug 22 17:53:54 2025 GMT Not After : Aug 29 17:53:54 2025 GMT Subject: CN=68a8aeb2-7150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:d5:cd:b6:0a:e5:30:b4:73:ef:cf:0f:5f: f6:ff:11:58:45:22:6a:26:f7:23:cb:28:97:28:07: d4:4f:c1:fb:e2:3c:0d:7d:b3:93:d7:b9:3d:bf:2e: 87:71:56:90:15:f8:3b:d0:ff:4e:14:d6:96:7e:38: 30:5b:a9:ab:5f:ba:79:cb:d0:7d:25:44:77:40:05: e2:c8:b8:c5:5f:73:ae:43:e2:41:83:64:79:5e:04: 6c:eb:24:96:3e:a3:18:0c:27:25:e4:56:e1:25:94: c0:21:ba:b2:9c:29:e9:a0:ef:a1:36:ea:bd:cb:82: 68:4e:0e:72:b2:d7:ca:88:81:b8:44:4d:a5:eb:70: 70:84:f9:2c:80:5b:69:4e:35:d1:3b:ec:88:52:77: d2:94:58:8f:6c:19:5a:bb:1f:7d:b9:2f:10:08:fb: ba:52:1e:f6:05:75:f3:a7:9b:25:f3:80:4b:f4:d2: f5:41:a9:98:61:c0:fc:93:62:88:19:fa:42:97:e4: 1e:86:13:e5:fc:2e:df:8c:9b:b4:a3:39:cb:4a:9b: f3:14:7c:ab:2a:0b:80:b0:70:13:16:5c:df:bf:a1: 5a:15:a9:7e:9d:26:69:77:bb:5f:75:7d:23:ba:ed: 5d:ab:0b:ac:17:65:db:17:50:81:62:18:56:01:b0: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:24:44:D7:61:8E:DC:04:8D:07:AF:35:82:A7:A1:97:06:47:CE X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:01:3b:f0:90:01:f5:19:58:c9:ee:cd:42:44:01:66:74:6b: 33:6b:bf:18:4a:71:05:c0:f9:9e:f8:57:c1:52:53:33:77:f8: f2:20:39:ea:3f:f5:12:de:6b:5f:bc:b4:01:19:b9:cc:d4:1c: 71:35:4c:54:e9:d9:50:2f:41:42:93:ce:3a:6f:bd:03:ae:41: 8b:cb:3b:9e:e7:b6:c0:48:ed:d0:22:2e:e6:f3:b3:1e:cc:7a: fe:43:b5:c1:09:53:47:bd:54:4d:5c:64:06:c2:d2:b3:88:d5: 18:bc:e7:d9:11:f4:7c:39:95:06:26:a7:e1:1c:60:2b:e4:79: 55:55:69:d9:f2:cc:6e:02:74:9d:d0:de:f4:6e:da:94:6e:71: 1d:1e:f9:82:a1:c1:b1:f3:bb:5c:63:cb:35:9e:91:f9:6c:4d: 45:e6:1b:de:74:7e:86:da:c4:75:24:2e:5f:e7:ef:85:cc:e5: 34:21:60:c6:fb:47:6a:6c:18:77:92:e0:48:56:2b:e0:71:1d: 36:00:6f:c2:58:86:5e:16:86:87:93:e9:e8:9d:8b:54:f5:af: dd:29:a1:8a:13:35:ea:2d:2f:ff:93:49:65:99:5c:d0:26:b3: dd:c2:84:08:2b:71:77:76:ac:6e:a1:b4:41:86:f7:a5:74:37: 94:1b:f5:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUwODIyMTc1MzU0WhcNMjUwODI5MTc1MzU0WjAYMRYwFAYD VQQDEw02OGE4YWViMi03MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OjVzbYK5TC0c+/PD1/2/xFYRSJqJvcjyyiXKAfUT8H74jwNfbOT17k9vy6H cVaQFfg70P9OFNaWfjgwW6mrX7p5y9B9JUR3QAXiyLjFX3OuQ+JBg2R5XgRs6ySW PqMYDCcl5FbhJZTAIbqynCnpoO+hNuq9y4JoTg5ystfKiIG4RE2l63BwhPksgFtp TjXRO+yIUnfSlFiPbBlaux99uS8QCPu6Uh72BXXzp5sl84BL9NL1QamYYcD8k2KI GfpCl+QehhPl/C7fjJu0oznLSpvzFHyrKguAsHATFlzfv6FaFal+nSZpd7tfdX0j uu1dqwusF2XbF1CBYhhWAbA4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8LJETX YY7cBI0HrzWCp6GXBkfOMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFATvwkAH1GVjJ7s1CRAFmdGsza78YSnEFwPme+FfBUlMzd/jyIDnq P/US3mtfvLQBGbnM1BxxNUxU6dlQL0FCk846b70DrkGLyzue57bASO3QIi7m87Me zHr+Q7XBCVNHvVRNXGQGwtKziNUYvOfZEfR8OZUGJqfhHGAr5HlVVWnZ8sxuAnSd 0N70btqUbnEdHvmCocGx87tcY8s1npH5bE1F5hvedH6G2sR1JC5f5++FzOU0IWDG +0dqbBh3kuBIVivgcR02AG/CWIZeFoaHk+nonYtU9a/dKaGKEzXqLS//k0llmVzQ JrPdwoQIK3F3dqxuobRBhveldDeUG/Uw -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:10 2025 by rpki-client