$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: Qpf2cN6NegeLEL9g6fck1gjbpfR7c4o5fTNqzH8lJ4o= Subject key identifier: 98:84:EE:82:C6:32:A2:8F:2C:A4:58:CE:10:BA:FC:50:C3:2B:9A:63 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 1F0E Signing time: Fri 04 Apr 2025 16:08:18 +0000 Manifest this update: Fri 04 Apr 2025 16:08:17 +0000 Manifest next update: Fri 11 Apr 2025 16:08:17 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: Fo+2b/snFdx2zLaVt1mmMOJ3THgN3xIIsGb1P+5ufNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA Validity Not Before: Apr 4 16:08:17 2025 GMT Not After : Apr 11 16:08:17 2025 GMT Subject: CN=67f003f1-3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:31:b9:78:88:5e:24:53:ae:00:af:c8:0e: 93:f7:18:ad:77:f7:bd:74:64:70:22:62:e9:fa:3d: 5e:ea:17:2a:d6:a5:cf:81:b6:9d:2d:88:06:a1:57: 59:16:f8:0b:04:40:92:b6:fe:65:fe:fe:74:64:a5: ee:97:72:e8:8d:d2:ec:b9:d0:08:95:c6:c0:27:70: 94:d5:95:64:93:c7:a1:1e:56:94:74:11:28:21:2b: f3:44:f0:9a:ab:bb:f2:23:6e:3d:97:e9:64:45:a6: 2b:d1:75:e8:e2:28:ef:0e:7a:5c:9d:e3:19:d0:dc: 09:7f:98:12:32:48:2d:75:0e:06:e2:5c:2e:0a:d2: e2:a4:13:f7:dc:9a:e7:05:95:da:f1:da:08:2b:53: b9:49:59:d0:55:5b:14:9e:7e:9f:f9:be:34:85:f2: 8a:24:29:30:a3:28:39:91:4d:9f:b9:0d:65:65:42: fb:42:f0:d3:3d:9a:71:db:b1:12:50:26:f1:fb:3a: 03:b7:1a:48:b5:d3:4d:05:66:bc:88:db:b9:34:73: c0:84:cd:7c:9b:31:19:9d:b5:84:60:0c:b6:8d:35: 96:dd:d0:84:67:60:5b:6c:0f:da:f6:b5:98:6a:62: c2:0d:ad:e9:a6:52:5c:ef:7d:ae:3e:e9:e5:a8:cd: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:84:EE:82:C6:32:A2:8F:2C:A4:58:CE:10:BA:FC:50:C3:2B:9A:63 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:58:73:82:65:c4:45:fe:c9:1e:fa:99:cc:82:cf:19:99:97: 92:0e:9f:40:36:a3:e4:38:ec:0c:8a:13:d7:62:1c:81:62:2d: 33:c9:f0:8a:ca:b0:d3:1f:61:b4:c5:62:ee:e7:07:4b:f6:19: 56:fa:05:0e:e8:95:48:d5:f0:c4:0f:c4:99:97:0f:77:0b:96: f0:e3:2e:5a:3f:c0:7f:9c:ea:62:7f:e0:84:95:65:93:a8:62: 5a:f1:29:5a:32:c8:b1:82:a6:c2:57:75:04:97:32:a5:3c:a4: 2a:32:4e:f0:88:7e:19:fb:ec:03:14:ce:ba:55:00:49:5e:99: c8:e1:77:84:24:c1:48:cd:09:b0:6d:29:ec:15:c2:67:fe:59: 7e:0d:73:db:08:cc:23:18:90:fb:76:6d:be:e2:ee:89:b1:72: 27:e6:be:39:1d:7c:42:3f:58:26:6d:32:b5:8f:25:51:78:cd: ff:95:21:62:bd:dc:ca:2c:2d:9b:0e:bd:9e:55:89:dc:4d:9f: 0c:74:f0:3d:11:47:e6:82:09:46:1c:43:48:a6:05:af:67:8b: 22:c7:9e:e2:40:8b:5d:98:57:5f:9e:30:aa:ef:03:d4:79:9f: 93:d0:b8:60:69:0a:19:71:39:dd:d2:c8:3f:6f:ee:e8:9b:67: a8:16:85:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUwNDA0MTYwODE3WhcNMjUwNDExMTYwODE3WjAYMRYwFAYD VQQDEw02N2YwMDNmMS0zYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oIxuXiIXiRTrgCvyA6T9xitd/e9dGRwImLp+j1e6hcq1qXPgbadLYgGoVdZ FvgLBECStv5l/v50ZKXul3LojdLsudAIlcbAJ3CU1ZVkk8ehHlaUdBEoISvzRPCa q7vyI249l+lkRaYr0XXo4ijvDnpcneMZ0NwJf5gSMkgtdQ4G4lwuCtLipBP33Jrn BZXa8doIK1O5SVnQVVsUnn6f+b40hfKKJCkwoyg5kU2fuQ1lZUL7QvDTPZpx27ES UCbx+zoDtxpItdNNBWa8iNu5NHPAhM18mzEZnbWEYAy2jTWW3dCEZ2BbbA/a9rWY amLCDa3pplJc732uPunlqM3IRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiE7oLG MqKPLKRYzhC6/FDDK5pjMB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKWHOCZcRF/ske+pnMgs8ZmZeSDp9ANqPkOOwMihPXYhyBYi0zyfCK yrDTH2G0xWLu5wdL9hlW+gUO6JVI1fDED8SZlw93C5bw4y5aP8B/nOpif+CElWWT qGJa8SlaMsixgqbCV3UElzKlPKQqMk7wiH4Z++wDFM66VQBJXpnI4XeEJMFIzQmw bSnsFcJn/ll+DXPbCMwjGJD7dm2+4u6JsXIn5r45HXxCP1gmbTK1jyVReM3/lSFi vdzKLC2bDr2eVYncTZ8MdPA9EUfmgglGHENIpgWvZ4six57iQItdmFdfnjCq7wPU eZ+T0LhgaQoZcTnd0sg/b+7om2eoFoUJ -----END CERTIFICATE-----Generated at Sun Apr 6 01:30:01 2025 by rpki-client