$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: 3oV8n8c62APOaf6kCrIQuqMjEDRIKFO2x9MsQkRKb3Q= Subject key identifier: E6:27:EC:08:28:CB:3C:05:6D:38:3A:96:A6:76:D7:C0:55:C0:9A:B1 Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 0908 Signing time: Wed 02 Jul 2025 20:33:58 +0000 Manifest this update: Wed 02 Jul 2025 20:33:58 +0000 Manifest next update: Wed 09 Jul 2025 20:33:58 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: ad9TWtXpxZlS8AGIINk0I6481C9tzS1bfigZ5UrGkN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721, serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: Jul 2 20:33:58 2025 GMT Not After : Jul 9 20:33:58 2025 GMT Subject: CN=686597b6-a814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:93:41:1c:10:09:01:36:7b:65:ac:40:3d: d2:c8:0d:56:01:90:a2:e1:12:97:14:a7:42:56:96: 7f:39:03:c4:0c:59:22:e4:9e:ec:c7:e1:02:0f:79: fd:5e:24:7a:ae:a5:bf:24:9f:9e:8b:f9:9c:28:6d: 27:6c:a4:7f:6a:d2:b3:44:70:44:49:43:cf:a1:11: 0d:a3:3e:a3:5f:b4:fb:0d:e1:1a:43:e2:dd:a0:80: 02:8d:84:ae:75:86:e8:c4:e5:a5:43:64:06:58:94: 05:6a:82:a5:f1:5a:30:72:4c:f0:41:86:76:8f:f6: b1:ee:8c:18:65:85:8d:ff:ed:c9:3a:b0:87:66:bc: 6b:01:ec:00:44:f3:46:88:79:2e:3e:83:c9:ef:73: 1f:8a:8c:ed:dd:76:3f:13:fe:7d:db:df:48:0e:3a: a2:52:d8:51:af:c8:da:ee:bd:bd:81:34:4a:3c:52: 6b:d7:3d:11:fd:89:53:19:91:60:f4:33:87:e8:04: b5:e9:5c:95:c0:e4:de:2d:fd:40:db:0c:9a:c3:19: 7e:0a:a6:80:f8:eb:84:41:d0:3b:d3:82:b0:d8:71: 1d:5d:5d:aa:60:08:4b:03:7e:32:85:a3:7e:ba:e0: ca:23:53:59:ac:7d:8c:73:2b:5a:80:dc:27:59:f8: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:EC:08:28:CB:3C:05:6D:38:3A:96:A6:76:D7:C0:55:C0:9A:B1 X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:70:42:5f:88:a9:02:a9:86:c4:3a:fc:19:a2:67:47:e7:8f: a3:a5:d5:74:a5:d7:11:81:8b:8c:ab:69:cd:70:e0:ff:3d:05: 44:61:8c:63:3b:08:2d:e3:b3:4a:6c:b4:f6:0e:05:13:90:f7: dd:56:b9:95:9f:7e:21:62:bd:9a:b3:5a:2d:69:b7:0e:e7:72: f0:4b:8b:e7:0f:d0:b4:e1:26:d3:da:e2:d3:ee:82:4a:db:df: e3:05:08:2f:71:52:ca:9c:3e:d0:54:ac:7c:f1:53:25:f8:ea: 48:e3:a3:fc:a3:46:fc:25:a0:6d:4b:b8:a1:a7:71:e2:a4:d0: 5f:6a:1f:81:e9:02:9f:33:7c:29:a9:e8:83:3a:88:71:22:25: 19:49:27:f3:2e:f5:c0:df:b6:d6:01:47:84:7e:ff:ba:8e:18: 3d:bc:ab:d0:66:eb:39:ba:33:5b:8a:03:1e:93:73:c2:99:b4: 36:ed:bb:1d:7f:ce:84:33:24:93:ab:c0:51:0d:19:e2:66:73: c1:0c:bf:b0:ea:d7:df:15:bd:13:47:fa:7a:77:88:ad:82:1c: cf:72:da:53:1c:4b:b4:20:80:0c:23:71:d0:f9:3f:be:4b:2c: 52:8d:92:c7:df:57:6e:25:13:f3:3e:a4:8a:99:85:1d:f4:77: 6c:29:2c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjUwNzAyMjAzMzU4WhcNMjUwNzA5MjAzMzU4WjAYMRYwFAYD VQQDEw02ODY1OTdiNi1hODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNmTQRwQCQE2e2WsQD3SyA1WAZCi4RKXFKdCVpZ/OQPEDFki5J7sx+ECD3n9 XiR6rqW/JJ+ei/mcKG0nbKR/atKzRHBESUPPoRENoz6jX7T7DeEaQ+LdoIACjYSu dYboxOWlQ2QGWJQFaoKl8VowckzwQYZ2j/ax7owYZYWN/+3JOrCHZrxrAewARPNG iHkuPoPJ73Mfiozt3XY/E/59299IDjqiUthRr8ja7r29gTRKPFJr1z0R/YlTGZFg 9DOH6AS16VyVwOTeLf1A2wyawxl+CqaA+OuEQdA704Kw2HEdXV2qYAhLA34yhaN+ uuDKI1NZrH2McytagNwnWfh39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYn7Ago yzwFbTg6lqZ218BVwJqxMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQcEJfiKkCqYbEOvwZomdH54+jpdV0pdcRgYuMq2nNcOD/PQVEYYxj Owgt47NKbLT2DgUTkPfdVrmVn34hYr2as1otabcO53LwS4vnD9C04SbT2uLT7oJK 29/jBQgvcVLKnD7QVKx88VMl+OpI46P8o0b8JaBtS7ihp3HipNBfah+B6QKfM3wp qeiDOohxIiUZSSfzLvXA37bWAUeEfv+6jhg9vKvQZus5ujNbigMek3PCmbQ27bsd f86EMySTq8BRDRniZnPBDL+w6tffFb0TR/p6d4itghzPctpTHEu0IIAMI3HQ+T++ SyxSjZLH31duJRPzPqSKmYUd9HdsKSzd -----END CERTIFICATE-----Generated at Fri Jul 4 07:55:43 2025 by rpki-client