$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: 4H8GfC5Z2xqhHYGltAVxfCrBjITFWIJ+eQVSTNo5JSM= Subject key identifier: 6C:81:11:CB:11:4F:7D:E7:9B:A7:8D:28:BA:63:1E:CF:E9:77:4E:DE Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: 0106 Signing time: Thu 03 Jul 2025 05:12:01 +0000 Manifest this update: Thu 03 Jul 2025 05:12:00 +0000 Manifest next update: Thu 10 Jul 2025 05:12:00 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: 8X+dIA974zcVsbFXyKIN/fM0YVm/6aikXsT6OCqCoxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Jul 3 05:12:00 2025 GMT Not After : Jul 10 05:12:00 2025 GMT Subject: CN=68661121-dbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:d0:36:64:60:67:9c:29:8b:ed:c3:69:ec: 74:c3:15:2f:eb:8e:36:97:1b:ee:1d:82:5c:fc:98: 83:11:e7:6d:d9:7a:fe:e8:1f:af:72:df:ae:c5:61: ce:a4:1f:3b:c1:29:f1:2a:c3:6f:32:20:3e:46:a9: 7f:2b:65:ad:a7:3b:96:d6:18:d4:2d:5a:05:fa:7e: 22:8c:55:65:54:a1:db:06:45:7b:55:20:bc:88:ce: 8a:94:d2:1c:db:6c:f3:4b:c7:64:3e:50:fa:45:cc: 68:ef:58:ba:06:d4:1e:30:3a:6c:1c:0b:ad:35:eb: 66:47:26:b7:25:a7:69:ef:e2:bd:33:c1:18:1b:9b: c0:1d:38:be:f5:d4:4a:20:d4:c9:d8:45:2a:b0:3e: 45:f8:db:da:6b:5a:90:95:ef:b8:03:75:2d:56:81: 8a:0c:6e:76:7b:59:1f:68:18:db:d5:6a:4a:64:33: 6c:9f:13:31:dc:2e:56:03:cc:1b:ec:09:19:a3:c7: 9a:56:e1:38:81:cc:76:02:a3:61:e3:b5:89:3b:d6: 71:7e:33:ce:64:71:0b:30:e5:1a:21:ba:92:3e:bb: ed:80:da:8b:b0:1c:56:08:1c:e7:a4:57:d5:05:c7: 97:94:37:6b:7b:8c:92:dc:37:f9:b3:b0:55:ad:ab: 7b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:81:11:CB:11:4F:7D:E7:9B:A7:8D:28:BA:63:1E:CF:E9:77:4E:DE X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3b:66:0c:35:47:b1:63:0c:33:1e:d0:4e:4b:74:cd:de:bf: e5:ea:38:1b:bd:bf:6f:3a:6f:0e:59:a4:2d:34:71:72:e5:d4: 4f:2b:80:40:be:2b:fe:9f:e4:c6:c5:c0:df:ef:3d:9c:c8:b8: 29:77:a9:09:04:4f:cc:7b:77:9f:f0:ee:3e:ca:6a:ae:cc:87: 63:c3:86:b9:9c:5d:a0:78:c3:1c:ba:54:ea:7f:63:7a:d1:ed: 6c:39:28:c4:d9:ee:bd:9d:c0:91:01:8c:9c:28:28:f0:f0:e7: 91:18:31:cb:88:ea:4a:b3:4f:50:57:74:61:30:47:e6:6a:f7: 39:d9:b4:47:14:47:dd:6f:47:3d:bf:75:ec:a7:91:d5:61:28: ef:c1:d8:40:d0:c5:1c:2c:b9:3c:c8:65:71:e1:96:ea:09:b3: 7b:05:20:fd:18:cb:1c:53:b0:5c:d6:1f:41:af:9e:25:65:53: 82:25:df:85:50:df:d5:ee:35:19:8e:fb:d5:df:a6:44:64:3e: 8e:73:4c:3e:7f:13:be:f8:3a:08:54:98:b9:62:e3:5d:87:6c: 7d:58:bf:8f:1b:f3:ec:cf:6e:57:3a:f7:3e:40:58:25:ae:a5: f8:fc:5f:ba:8b:43:6e:5d:a1:86:66:ad:cb:e7:f2:7d:aa:87: 4e:28:53:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUwNzAzMDUxMjAwWhcNMjUwNzEwMDUxMjAwWjAYMRYwFAYD VQQDEw02ODY2MTEyMS1kYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSHQNmRgZ5wpi+3Daex0wxUv6442lxvuHYJc/JiDEedt2Xr+6B+vct+uxWHO pB87wSnxKsNvMiA+Rql/K2WtpzuW1hjULVoF+n4ijFVlVKHbBkV7VSC8iM6KlNIc 22zzS8dkPlD6Rcxo71i6BtQeMDpsHAutNetmRya3Jadp7+K9M8EYG5vAHTi+9dRK INTJ2EUqsD5F+Nvaa1qQle+4A3UtVoGKDG52e1kfaBjb1WpKZDNsnxMx3C5WA8wb 7AkZo8eaVuE4gcx2AqNh47WJO9ZxfjPOZHELMOUaIbqSPrvtgNqLsBxWCBznpFfV BceXlDdre4yS3Df5s7BVrat7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyBEcsR T33nm6eNKLpjHs/pd07eMB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNO2YMNUexYwwzHtBOS3TN3r/l6jgbvb9vOm8OWaQtNHFy5dRPK4BA viv+n+TGxcDf7z2cyLgpd6kJBE/Me3ef8O4+ymquzIdjw4a5nF2geMMculTqf2N6 0e1sOSjE2e69ncCRAYycKCjw8OeRGDHLiOpKs09QV3RhMEfmavc52bRHFEfdb0c9 v3Xsp5HVYSjvwdhA0MUcLLk8yGVx4ZbqCbN7BSD9GMscU7Bc1h9Br54lZVOCJd+F UN/V7jUZjvvV36ZEZD6Oc0w+fxO++DoIVJi5YuNdh2x9WL+PG/Psz25XOvc+QFgl rqX4/F+6i0NuXaGGZq3L5/J9qodOKFMj -----END CERTIFICATE-----Generated at Fri Jul 4 21:12:00 2025 by rpki-client