$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: lYXWGLgjfH7ztfIiGE9yqc7lXS+8AWlaBOxsNEcH/QA= Subject key identifier: 00:21:11:42:88:A2:4D:38:23:D5:AE:58:FC:79:03:74:DD:70:CA:86 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 068E Signing time: Mon 30 Jun 2025 22:31:55 +0000 Manifest this update: Mon 30 Jun 2025 22:31:54 +0000 Manifest next update: Mon 07 Jul 2025 22:31:54 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: 7//1CAH6zz7xTrJ77Mj8lN8uu9jcvI6wN0NKmEqsaug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Jun 30 22:31:54 2025 GMT Not After : Jul 7 22:31:54 2025 GMT Subject: CN=6863105a-1f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:41:97:2c:08:59:82:85:5e:c3:7e:a0:5c: 96:aa:58:7c:60:1d:e2:c3:1c:76:3f:db:3b:45:f4: b6:99:c5:33:31:14:38:14:fa:95:2b:50:b4:f8:16: 75:3c:b3:77:b7:12:e1:1b:96:d9:2a:0d:53:e0:94: 77:69:5e:fc:4c:4f:51:66:2b:87:e6:bd:2e:dc:d2: 18:70:30:cc:f9:e7:92:33:e6:48:6f:13:74:b5:3e: 26:1a:7a:2f:54:8c:f7:f1:74:71:39:62:ec:d0:69: eb:15:ad:8b:dc:0d:44:93:8c:55:7d:65:dc:13:96: 95:97:c8:1b:9e:55:f0:42:12:c6:20:a7:cd:ff:f2: 0c:c0:17:d8:64:4a:e0:cc:b9:83:9d:a8:4d:f5:0a: 19:80:4d:c5:11:e7:37:4f:43:21:5c:a4:ae:01:96: 92:f3:a4:76:eb:fb:bc:fd:ca:18:df:6b:0f:f5:3d: 08:61:07:54:da:14:e9:0d:8d:e8:5e:eb:bd:0c:13: 40:c7:19:4a:f5:3f:73:2e:9e:35:61:99:0e:09:83: 7e:64:9a:86:04:a7:45:1e:a2:78:e3:51:72:27:fd: ae:5d:a7:e4:e4:ce:48:69:db:c2:d0:c6:60:4d:97: 07:53:9d:7d:47:d4:eb:ea:25:58:e8:d8:32:6a:ee: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:11:42:88:A2:4D:38:23:D5:AE:58:FC:79:03:74:DD:70:CA:86 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7b:46:96:cc:e3:78:d2:6d:7d:e1:19:31:97:17:a8:b5:15: 99:38:2d:7a:70:8d:15:f0:b7:7b:c3:17:ef:f5:eb:74:03:6b: 1c:2f:6d:0a:d7:4b:6a:e0:a9:34:cc:a4:3f:78:2c:03:29:fd: a2:9e:85:d9:47:2b:68:8b:c0:4b:e2:b9:26:44:15:f2:1f:d7: da:35:9f:d9:0b:4c:7f:83:4f:45:41:64:1a:eb:34:06:01:bb: 69:cc:cd:db:83:c2:9d:93:16:26:4d:29:8f:f6:f0:af:00:1d: a8:55:be:e3:a3:84:7b:70:67:91:81:31:63:f3:ce:78:76:ef: 4a:b4:89:8e:7b:a9:35:75:3c:44:6c:d6:a8:c2:ec:43:ed:0e: 8c:e2:e2:76:0c:6a:b5:f5:b3:d2:c0:c5:aa:85:fc:84:94:80: cc:03:4a:b9:af:7d:c3:ba:40:73:a9:4a:b6:b6:ac:1e:36:89: cb:25:21:42:17:38:a9:c5:23:17:33:be:88:23:d1:b6:68:28: 80:a4:06:87:8e:ee:21:98:07:dd:92:e0:33:8a:9e:ea:b2:e9: 02:f7:ab:14:f3:47:be:59:22:6b:dc:dc:af:ac:23:e9:be:dd: 10:3b:75:33:01:13:47:5b:27:61:b8:ae:87:d3:e8:74:6d:c8: bf:cd:fc:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUwNjMwMjIzMTU0WhcNMjUwNzA3MjIzMTU0WjAYMRYwFAYD VQQDEw02ODYzMTA1YS0xZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFRBlywIWYKFXsN+oFyWqlh8YB3iwxx2P9s7RfS2mcUzMRQ4FPqVK1C0+BZ1 PLN3txLhG5bZKg1T4JR3aV78TE9RZiuH5r0u3NIYcDDM+eeSM+ZIbxN0tT4mGnov VIz38XRxOWLs0GnrFa2L3A1Ek4xVfWXcE5aVl8gbnlXwQhLGIKfN//IMwBfYZErg zLmDnahN9QoZgE3FEec3T0MhXKSuAZaS86R26/u8/coY32sP9T0IYQdU2hTpDY3o Xuu9DBNAxxlK9T9zLp41YZkOCYN+ZJqGBKdFHqJ441FyJ/2uXafk5M5IadvC0MZg TZcHU519R9Tr6iVY6Ngyau6+FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAhEUKI ok04I9WuWPx5A3TdcMqGMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVe0aWzON40m194RkxlxeotRWZOC16cI0V8Ld7wxfv9et0A2scL20K 10tq4Kk0zKQ/eCwDKf2inoXZRytoi8BL4rkmRBXyH9faNZ/ZC0x/g09FQWQa6zQG AbtpzM3bg8KdkxYmTSmP9vCvAB2oVb7jo4R7cGeRgTFj8854du9KtImOe6k1dTxE bNaowuxD7Q6M4uJ2DGq19bPSwMWqhfyElIDMA0q5r33DukBzqUq2tqweNonLJSFC FzipxSMXM76II9G2aCiApAaHju4hmAfdkuAzip7qsukC96sU80e+WSJr3NyvrCPp vt0QO3UzARNHWydhuK6H0+h0bci/zfzJ -----END CERTIFICATE-----Generated at Tue Jul 1 21:13:28 2025 by rpki-client