$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json) Hash identifier: 24AAwIbf+AVtL7lBAvXH2LOXy8XTK86rnvXr0tXDDMg= Subject key identifier: EA:70:20:E3:35:6A:48:F2:CC:9E:5A:81:CC:67:A9:6E:6A:66:5D:24 Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft Manifest number: 88 Signing time: Tue 01 Jul 2025 07:16:40 +0000 Manifest this update: Tue 01 Jul 2025 07:16:39 +0000 Manifest next update: Tue 08 Jul 2025 07:16:39 +0000 Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: 6RE+TNA5UBHAv1NeJuYqD6ImYzB2cX1eB6g2Rg8BLEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Validity Not Before: Jul 1 07:16:39 2025 GMT Not After : Jul 8 07:16:39 2025 GMT Subject: CN=68638b57-deeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:33:1a:6b:0b:36:67:d4:51:e5:cc:be:0c: b4:fb:66:c3:a8:67:71:7c:d9:78:91:42:69:ec:c4: 76:31:e0:30:70:8c:4d:1a:bd:b7:0e:45:24:cd:8d: 21:fb:f3:f9:1f:e2:67:11:52:6e:ab:18:74:46:bf: c1:48:10:d2:96:b1:c6:93:47:1e:32:4b:a6:2a:bb: 6d:c2:50:71:51:3c:da:16:03:d8:3c:d0:e5:6d:1a: bd:d2:a4:e0:5c:d3:35:85:cd:33:fc:c0:f4:bf:66: a6:ab:68:2f:29:34:51:c0:05:a2:c4:ee:be:cb:9c: 57:43:de:23:79:80:29:e4:83:9e:c5:98:5a:63:fd: a2:47:d4:1e:91:da:5e:28:dd:6b:2a:53:6c:38:38: 44:6c:c9:1f:2f:6d:f0:ef:fd:36:b5:0d:a1:52:06: 8e:f8:07:3a:b9:cc:fb:ec:09:1d:10:a9:6a:2d:df: 20:e5:50:28:74:79:3e:6f:37:41:e5:36:a2:a9:65: 7e:d6:f0:ad:0b:69:de:55:96:0a:1c:17:9d:32:d5: 57:d2:3a:e8:9c:86:ff:1e:7a:30:38:fd:30:0e:8d: 68:2d:b4:7b:42:a9:1e:76:d9:f5:41:6d:f1:99:0c: a9:2e:3c:a7:08:fb:8b:26:8d:2c:16:7f:ca:2d:fa: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:20:E3:35:6A:48:F2:CC:9E:5A:81:CC:67:A9:6E:6A:66:5D:24 X509v3 Authority Key Identifier: keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:dc:c2:68:0a:94:d8:e1:30:6c:bc:45:81:66:c2:b1:4e:06: fd:ac:51:9c:a2:ff:37:d4:f7:2e:ee:e0:0d:c6:ef:3f:49:97: e0:a1:a0:aa:86:f7:4d:26:b9:bd:01:01:69:52:20:16:41:31: e8:b7:69:17:13:67:56:ac:60:47:d6:6d:6f:19:d9:5a:93:bb: 09:55:bd:19:9b:1d:31:b7:18:27:7e:7c:df:47:13:a5:3b:ab: 1d:4d:5a:a8:78:42:51:ef:5c:f1:f5:2b:55:6e:27:22:d8:bf: 64:db:53:e7:6e:ae:04:dd:3a:bb:31:51:ad:73:18:07:a8:a3: 72:ed:be:22:ea:1e:63:7f:a1:09:7f:1a:74:b4:09:fb:d8:4b: f9:4e:e2:eb:81:33:4a:5a:74:5e:68:a1:12:15:00:f4:69:58: 94:23:67:bd:05:47:6f:ff:e6:b5:37:d8:82:e5:1f:4d:45:31: aa:bb:34:74:ed:cf:fd:71:19:4d:86:b4:66:a4:c1:b0:db:54: 47:47:38:46:c8:88:47:7d:d4:1d:08:1b:58:ee:03:fc:62:e0: 91:b1:09:bd:d3:49:ae:12:b7:1b:d7:b1:5f:7e:c8:53:a8:2b: 69:8d:56:50:da:47:1b:7b:20:05:0d:47:09:a3:12:5a:4b:96: 7f:ab:16:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDYxMUUxQzE0OTUyOEYxN0EwRUM3OTlDMzlENTYyNjE5 QzlBMTUxMDAwHhcNMjUwNzAxMDcxNjM5WhcNMjUwNzA4MDcxNjM5WjAYMRYwFAYD VQQDEw02ODYzOGI1Ny1kZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWgzGmsLNmfUUeXMvgy0+2bDqGdxfNl4kUJp7MR2MeAwcIxNGr23DkUkzY0h +/P5H+JnEVJuqxh0Rr/BSBDSlrHGk0ceMkumKrttwlBxUTzaFgPYPNDlbRq90qTg XNM1hc0z/MD0v2amq2gvKTRRwAWixO6+y5xXQ94jeYAp5IOexZhaY/2iR9Qekdpe KN1rKlNsODhEbMkfL23w7/02tQ2hUgaO+Ac6ucz77AkdEKlqLd8g5VAodHk+bzdB 5TaiqWV+1vCtC2neVZYKHBedMtVX0jronIb/HnowOP0wDo1oLbR7Qqkedtn1QW3x mQypLjynCPuLJo0sFn/KLfqVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpwIOM1 akjyzJ5agcxnqW5qZl0kMB8GA1UdIwQYMBaAFGEeHBSVKPF6DseZw51WJhnJoVEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81RTA3MkFGRTg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhYb094NW5EblZZbUdjbWhV UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81RTA3MkFGRTg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhY b094NW5EblZZbUdjbWhVUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy3MJoCpTY4TBsvEWBZsKxTgb9rFGcov831Pcu7uANxu8/SZfgoaCq hvdNJrm9AQFpUiAWQTHot2kXE2dWrGBH1m1vGdlak7sJVb0Zmx0xtxgnfnzfRxOl O6sdTVqoeEJR71zx9StVbici2L9k21Pnbq4E3Tq7MVGtcxgHqKNy7b4i6h5jf6EJ fxp0tAn72Ev5TuLrgTNKWnReaKESFQD0aViUI2e9BUdv/+a1N9iC5R9NRTGquzR0 7c/9cRlNhrRmpMGw21RHRzhGyIhHfdQdCBtY7gP8YuCRsQm900muErcb17FffshT qCtpjVZQ2kcbeyAFDUcJoxJaS5Z/qxY+ -----END CERTIFICATE-----Generated at Wed Jul 2 10:39:30 2025 by rpki-client