$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: sBWOf9t2D9aytekrgcXIpiGTSJzw/R+h/7je2rIpzAU= Subject key identifier: 74:63:83:ED:47:BF:6E:F2:8D:9E:E3:DA:10:15:58:08:05:71:1E:1E Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 5A Signing time: Sun 29 Jun 2025 06:09:02 +0000 Manifest this update: Sun 29 Jun 2025 06:09:01 +0000 Manifest next update: Sun 06 Jul 2025 06:09:01 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: Dvlz86JvjXXAJSIkAES73/fl+9e7jRnfmsGJbXLNfiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Jun 29 06:09:01 2025 GMT Not After : Jul 6 06:09:01 2025 GMT Subject: CN=6860d87d-31c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:d8:f6:17:7c:20:d1:86:e9:74:55:fa:3d: 95:7c:11:1d:8f:02:1a:c1:41:4d:31:14:f2:eb:46: 58:96:25:fc:bc:c5:3c:fa:28:41:89:ed:0e:73:1c: 8c:28:e8:f5:1e:f2:e4:e5:1e:98:05:07:40:69:a1: 6d:c3:61:0d:c9:69:b3:d6:aa:8a:7e:c0:47:4f:4a: 40:5c:4a:3d:ac:f0:ef:81:b9:e5:e7:b4:90:f2:12: f7:7c:1d:46:38:fd:df:61:53:41:9a:0a:ba:6c:6d: 12:68:eb:fe:ce:55:b2:93:0a:77:19:94:f7:00:c7: 82:67:18:67:36:53:94:9c:4b:81:f3:e4:4a:b5:9f: 0b:2e:b6:fc:c9:b1:aa:2e:bd:15:64:ce:b7:36:71: df:0f:0e:ed:f7:76:f0:ab:82:09:ab:7e:54:7b:32: b3:ca:2a:e6:ab:fb:ab:49:8e:fd:59:28:68:c1:72: 88:e6:0a:29:a9:8d:9c:74:d4:ac:1d:33:51:42:26: db:80:45:e2:d4:2c:a9:be:45:a7:2c:58:43:04:bf: 27:55:d6:75:25:6a:ba:66:88:bb:a4:ce:7c:4b:78: 27:fb:ed:12:3f:3c:c1:8f:c2:9f:7c:27:fc:7f:4c: 3b:4d:d0:c9:23:59:46:7c:59:06:14:b1:ce:88:d8: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:83:ED:47:BF:6E:F2:8D:9E:E3:DA:10:15:58:08:05:71:1E:1E X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:d8:96:cd:cd:d9:ef:ad:9b:3a:ba:1a:c1:f1:c8:99:18: 3a:7f:d1:40:ba:2e:1b:6f:13:5a:9c:cd:50:7d:c9:46:64:1e: fc:b0:48:4f:8c:ba:a6:df:b0:e4:38:f8:14:69:e3:64:0e:31: ae:94:37:90:c4:5d:e4:26:a3:19:9f:f0:c1:eb:50:ad:98:6a: be:dc:66:91:20:4c:d6:21:f7:a2:c5:9a:88:6d:a4:51:87:5b: 9f:11:f7:d9:8a:00:a8:aa:eb:17:a0:8c:8f:00:40:42:9c:b1: 68:82:73:6e:d6:1b:05:e1:4f:18:9e:69:ea:9d:5a:db:e0:c0: c9:1e:6e:fd:d5:0c:dc:80:4e:86:b0:6d:67:e7:7a:ed:91:5c: 0f:50:bc:c9:55:d8:c4:67:a1:71:c5:e5:40:a0:58:7c:da:04: bf:eb:1f:11:7e:7b:98:43:7f:53:d2:bc:23:56:d9:d3:fd:f2: 6d:71:71:67:5d:d4:48:28:4b:04:cd:86:28:89:5a:82:5f:7a: 43:6e:d2:7b:fd:56:bf:06:df:c3:aa:19:26:61:4d:f6:ba:02: 6d:f9:7b:dc:72:45:78:33:da:ec:31:b6:dc:2e:74:20:e5:cf: 90:c6:3f:c7:de:e8:dc:7c:73:4e:e3:8e:e5:55:93:d6:18:33: 70:43:3c:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTA2MjkwNjA5MDFaFw0yNTA3MDYwNjA5MDFaMBgxFjAUBgNV BAMTDTY4NjBkODdkLTMxYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6cdj2F3wg0YbpdFX6PZV8ER2PAhrBQU0xFPLrRliWJfy8xTz6KEGJ7Q5zHIwo 6PUe8uTlHpgFB0BpoW3DYQ3JabPWqop+wEdPSkBcSj2s8O+BueXntJDyEvd8HUY4 /d9hU0GaCrpsbRJo6/7OVbKTCncZlPcAx4JnGGc2U5ScS4Hz5Eq1nwsutvzJsaou vRVkzrc2cd8PDu33dvCrggmrflR7MrPKKuar+6tJjv1ZKGjBcojmCimpjZx01Kwd M1FCJtuAReLULKm+RacsWEMEvydV1nUlarpmiLukznxLeCf77RI/PMGPwp98J/x/ TDtN0MkjWUZ8WQYUsc6I2PadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdGOD7Ue/ bvKNnuPaEBVYCAVxHh4wHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwh2JbNzdnvrZs6uhrB8ciZGDp/0UC6LhtvE1qczVB9yUZkHvywSE+M uqbfsOQ4+BRp42QOMa6UN5DEXeQmoxmf8MHrUK2Yar7cZpEgTNYh96LFmohtpFGH W58R99mKAKiq6xegjI8AQEKcsWiCc27WGwXhTxieaeqdWtvgwMkebv3VDNyAToaw bWfneu2RXA9QvMlV2MRnoXHF5UCgWHzaBL/rHxF+e5hDf1PSvCNW2dP98m1xcWdd 1EgoSwTNhiiJWoJfekNu0nv9Vr8G38OqGSZhTfa6Am35e9xyRXgz2uwxttwudCDl z5DGP8fe6Nx8c07jjuVVk9YYM3BDPJA= -----END CERTIFICATE-----Generated at Mon Jun 30 19:07:08 2025 by rpki-client