$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: OaGMCYVShS5OoLFfwmtx9QqLW7GsekGtJTyl/oOiGwk= Subject key identifier: 0C:57:34:AC:EC:FF:92:BD:BE:F5:5E:4D:71:1D:FE:A0:91:0C:DE:AE Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: 8E Signing time: Sat 05 Jul 2025 06:44:47 +0000 Manifest this update: Sat 05 Jul 2025 06:44:46 +0000 Manifest next update: Sat 12 Jul 2025 06:44:46 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: zsPmZVWwPmInTkr+aRiAj8SkwyfFx0dZks4auP3vtiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Jul 5 06:44:46 2025 GMT Not After : Jul 12 06:44:46 2025 GMT Subject: CN=6868c9df-6e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:44:18:dd:9a:c7:0d:2a:f3:46:35:e7:19: 87:34:80:d9:96:e5:7d:e6:1e:49:a6:89:38:44:62: 34:51:80:4a:0a:7d:07:d4:69:51:e5:d6:b5:47:c1: 02:5b:46:b4:ea:a8:aa:15:c3:76:ea:1a:6d:12:32: bd:bd:d3:ee:b7:49:cc:72:94:e0:ca:77:e3:cf:c5: b9:85:6a:c0:f2:f0:5c:19:85:94:72:9f:35:85:3b: 2d:ba:78:a9:7d:8d:0c:4c:44:7b:a0:b4:69:fd:70: f9:fc:29:c5:a6:c9:79:9e:a2:1e:d6:52:5d:28:9f: a3:91:43:15:1c:f2:ae:d5:d8:b0:2c:7b:f7:09:91: 15:8d:d5:8e:b4:88:9a:ba:8d:0a:04:c2:3c:0e:5a: 27:81:10:8b:63:a2:ed:a6:e1:15:b1:34:97:7a:09: af:b3:65:ee:69:c5:b0:e6:76:5e:9c:d9:fb:20:0a: 80:0d:45:ea:e8:0a:6a:68:f1:09:c7:f6:df:72:da: 31:ee:97:53:20:03:30:a5:2e:74:60:70:e8:1b:cb: 3f:42:6a:a8:61:63:42:f4:df:a6:dc:44:a2:15:30: bc:36:0e:ee:0d:60:1b:60:dd:00:88:bc:55:36:6d: 8a:1e:6f:e4:fa:9b:46:a7:0d:86:44:6a:1b:11:b8: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:34:AC:EC:FF:92:BD:BE:F5:5E:4D:71:1D:FE:A0:91:0C:DE:AE X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:66:e7:fa:4c:92:00:98:a7:29:ec:11:08:34:4d:23:72:dd: 1f:0d:4c:cf:16:dd:4b:1d:24:18:aa:5f:fc:f9:01:96:b8:56: 2f:ea:86:3c:06:af:29:68:58:04:89:31:68:94:4b:e3:9d:31: 12:60:b7:04:b3:b9:7b:0c:09:80:55:ff:0d:3c:dc:3a:76:11: 01:f9:87:3f:f6:8a:1d:20:73:d2:f0:81:e0:f5:a4:4e:69:1a: 08:9f:6d:d7:0d:d1:be:16:80:a7:c0:d2:52:87:06:63:4c:e3: db:e3:81:0a:68:88:5a:5e:bc:1e:6f:0c:db:29:5f:34:1f:e1: a9:9f:cb:2a:23:ae:a0:8c:73:07:ce:dd:a4:5f:f9:90:50:be: 7c:7c:2a:05:ea:7c:f1:38:1b:af:72:c4:c8:86:19:98:41:61: 9a:b5:d4:b7:18:c4:f8:7e:e8:43:7d:fd:3b:6b:d2:c3:61:00: d0:f5:02:0f:69:a5:50:26:4f:82:f3:bd:0a:f2:45:f7:01:c9: 08:53:3b:fb:f3:c4:cd:78:47:1d:7b:36:82:2f:d7:c8:00:e6: c2:a4:54:e5:fc:b1:af:d3:b1:03:1f:db:27:95:5e:95:4e:0f: 2c:44:a1:e5:10:ef:e5:e5:39:8f:23:b8:22:ec:2a:fe:86:30: ac:09:21:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUwNzA1MDY0NDQ2WhcNMjUwNzEyMDY0NDQ2WjAYMRYwFAYD VQQDEw02ODY4YzlkZi02ZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uJEGN2axw0q80Y15xmHNIDZluV95h5Jpok4RGI0UYBKCn0H1GlR5da1R8EC W0a06qiqFcN26hptEjK9vdPut0nMcpTgynfjz8W5hWrA8vBcGYWUcp81hTstunip fY0MTER7oLRp/XD5/CnFpsl5nqIe1lJdKJ+jkUMVHPKu1diwLHv3CZEVjdWOtIia uo0KBMI8DlongRCLY6LtpuEVsTSXegmvs2XuacWw5nZenNn7IAqADUXq6ApqaPEJ x/bfctox7pdTIAMwpS50YHDoG8s/QmqoYWNC9N+m3ESiFTC8Ng7uDWAbYN0AiLxV Nm2KHm/k+ptGpw2GRGobEbgQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxXNKzs /5K9vvVeTXEd/qCRDN6uMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXZuf6TJIAmKcp7BEINE0jct0fDUzPFt1LHSQYql/8+QGWuFYv6oY8 Bq8paFgEiTFolEvjnTESYLcEs7l7DAmAVf8NPNw6dhEB+Yc/9oodIHPS8IHg9aRO aRoIn23XDdG+FoCnwNJShwZjTOPb44EKaIhaXrwebwzbKV80H+Gpn8sqI66gjHMH zt2kX/mQUL58fCoF6nzxOBuvcsTIhhmYQWGatdS3GMT4fuhDff07a9LDYQDQ9QIP aaVQJk+C870K8kX3AckIUzv788TNeEcdezaCL9fIAObCpFTl/LGv07EDH9snlV6V Tg8sRKHlEO/l5TmPI7gi7Cr+hjCsCSFx -----END CERTIFICATE-----Generated at Sat Jul 5 22:11:19 2025 by rpki-client