$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: iHp0dpLBtToi/XHmAMqx2WMOqKJRUv+A2/5hHAmPsgg= Subject key identifier: 21:7C:D2:66:9C:59:C2:AB:2D:41:E7:13:A3:76:95:D6:B7:34:E1:82 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0DFE Signing time: Sat 10 May 2025 17:41:32 +0000 Manifest this update: Sat 10 May 2025 17:41:32 +0000 Manifest next update: Sat 17 May 2025 17:41:32 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: SO1scxI8vRE9APpKX4zSu+hzv/o5GLkrbPB8JmS0K20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: May 10 17:41:32 2025 GMT Not After : May 17 17:41:32 2025 GMT Subject: CN=681f8fcc-1829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:5c:f8:71:20:e5:1c:dd:99:0b:cb:15:3e: 33:07:25:7a:7e:da:12:62:07:23:bc:5a:25:f2:ea: 1e:c8:d4:4a:18:30:a0:9c:d6:91:a7:bd:d1:4f:70: f4:a0:16:13:5d:29:d5:04:a9:f5:69:68:29:b9:85: 41:20:89:86:15:12:0b:7d:82:57:3a:b8:3f:b9:aa: 21:41:70:a7:bb:b1:09:5b:db:db:ab:fd:7b:dc:9a: f0:b2:0f:ef:33:47:4f:74:0d:4d:ae:74:a8:d9:52: 81:14:c8:50:76:0d:25:d6:f0:d5:01:ad:3f:9a:64: b7:86:fb:1d:7e:17:89:1e:4d:76:74:1a:a4:c4:2b: da:c6:a0:67:d3:92:d9:a8:12:12:28:7e:d7:38:8c: d2:1b:4a:f4:a5:f2:16:dd:98:5f:2c:05:0e:11:a3: 61:2f:4d:2b:25:8f:00:40:78:53:ed:9e:de:b5:88: ef:a1:e3:54:31:c8:17:2a:0e:57:d6:c7:d2:79:9a: 8d:dc:00:70:d4:79:45:70:bd:60:fd:7e:3a:2b:65: 1d:ce:2a:88:82:48:17:41:c7:97:15:52:98:8f:29: 95:89:20:00:0f:2c:e8:bd:d8:c0:c3:90:81:a3:e1: a8:e2:92:86:ed:fe:88:b0:d9:e8:9b:41:51:75:00: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:D2:66:9C:59:C2:AB:2D:41:E7:13:A3:76:95:D6:B7:34:E1:82 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6f:0f:93:4c:d8:57:f8:a2:95:f4:dd:59:1a:cd:dd:31:75: 09:52:a7:69:00:b5:1f:2f:51:86:d8:c5:37:f8:03:85:aa:6d: c3:4e:85:ce:4e:ff:8c:fe:98:a3:1b:55:c2:e0:35:6d:1d:ad: e4:9c:3d:4d:07:af:75:ad:59:9d:da:2e:db:08:a1:24:eb:ab: ce:35:03:9a:a5:f1:ba:77:27:4c:9b:4c:b9:07:c9:40:9b:96: 84:6b:3b:84:b2:7b:39:a5:15:ef:07:b7:15:cb:c7:c2:e4:4c: e5:2e:e1:c7:be:78:eb:da:61:72:58:ee:41:fa:2c:5f:80:7f: 9b:d7:d3:33:6e:63:5d:02:4c:75:06:8a:a2:17:13:07:68:0c: 73:0f:59:69:a6:62:1c:26:ac:c5:b8:03:46:25:21:3a:78:e8: 3e:54:8f:f3:9e:6a:a3:50:58:43:b4:7a:de:50:e7:c8:fd:60: ea:1d:5e:14:51:10:0b:b7:60:7b:75:6a:ba:75:71:95:04:c6: c5:2b:1c:5a:5c:51:a7:66:b2:df:cf:50:37:a0:0d:22:8c:79: 5d:e0:e4:23:85:fe:a3:8a:9d:8e:f8:d0:ff:dd:d5:9d:86:9e: e8:00:1e:c1:15:0c:eb:2d:4e:d5:4f:a4:a3:89:24:8b:e3:10: 07:19:c8:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUwNTEwMTc0MTMyWhcNMjUwNTE3MTc0MTMyWjAYMRYwFAYD VQQDEw02ODFmOGZjYy0xODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswdc+HEg5RzdmQvLFT4zByV6ftoSYgcjvFol8uoeyNRKGDCgnNaRp73RT3D0 oBYTXSnVBKn1aWgpuYVBIImGFRILfYJXOrg/uaohQXCnu7EJW9vbq/173Jrwsg/v M0dPdA1NrnSo2VKBFMhQdg0l1vDVAa0/mmS3hvsdfheJHk12dBqkxCvaxqBn05LZ qBISKH7XOIzSG0r0pfIW3ZhfLAUOEaNhL00rJY8AQHhT7Z7etYjvoeNUMcgXKg5X 1sfSeZqN3ABw1HlFcL1g/X46K2UdziqIgkgXQceXFVKYjymViSAADyzovdjAw5CB o+Go4pKG7f6IsNnom0FRdQChuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCF80mac WcKrLUHnE6N2lda3NOGCMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBubw+TTNhX+KKV9N1ZGs3dMXUJUqdpALUfL1GG2MU3+AOFqm3DToXO Tv+M/pijG1XC4DVtHa3knD1NB691rVmd2i7bCKEk66vONQOapfG6dydMm0y5B8lA m5aEazuEsns5pRXvB7cVy8fC5EzlLuHHvnjr2mFyWO5B+ixfgH+b19MzbmNdAkx1 BoqiFxMHaAxzD1lppmIcJqzFuANGJSE6eOg+VI/znmqjUFhDtHreUOfI/WDqHV4U URALt2B7dWq6dXGVBMbFKxxaXFGnZrLfz1A3oA0ijHld4OQjhf6jip2O+ND/3dWd hp7oAB7BFQzrLU7VT6SjiSSL4xAHGcgh -----END CERTIFICATE-----Generated at Mon May 12 15:07:09 2025 by rpki-client