$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json) Hash identifier: X3/kXnenI00dXnKjg5grAEugow20Hs+qsYHC9XoLoKY= Subject key identifier: AC:0E:B5:06:16:5E:06:39:D0:1E:0B:9C:51:81:0C:EE:14:67:47:B8 Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft Manifest number: 1F46 Signing time: Fri 30 May 2025 16:15:46 +0000 Manifest this update: Fri 30 May 2025 16:15:45 +0000 Manifest next update: Fri 06 Jun 2025 16:15:45 +0000 Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: JIFun5mmkSdyowAZLfeIlPAYrRQL9LcO38YfhdNWrC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E Validity Not Before: May 30 16:15:45 2025 GMT Not After : Jun 6 16:15:45 2025 GMT Subject: CN=6839d9b2-3892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:91:ca:59:df:f9:3a:47:52:9e:91:e2:46: 98:1e:d3:dc:7c:65:b9:c9:9a:61:fd:a5:ab:c9:f8: c2:4a:42:41:ae:bb:a0:bb:8f:52:0f:a9:58:35:5d: f8:08:8e:ef:c0:bc:20:62:88:92:3f:70:4c:d1:30: d0:d4:e9:df:d2:97:02:0a:bb:5e:b6:cd:09:42:31: ea:a2:d4:32:f6:99:65:62:7b:07:92:45:cf:ce:c3: 49:eb:b9:d1:d4:a7:29:8b:73:f5:eb:18:78:96:1d: 32:15:d8:76:bf:04:68:68:29:04:d1:93:8f:d1:f2: 28:cb:36:79:4b:f8:f5:d6:09:04:5e:73:24:fa:8e: d7:3a:48:ab:02:e5:3c:ab:2f:2c:4c:07:fb:7c:4c: 97:ba:b6:73:07:aa:5f:2d:28:9e:06:c9:c3:17:20: f7:67:4b:81:6c:df:e4:2c:06:35:c4:6b:70:5a:8b: b8:1e:7a:58:84:7f:15:d6:38:f3:93:0a:05:bb:a3: a2:8a:aa:86:f2:1b:de:12:ee:88:96:41:74:a0:9c: 67:17:c5:b8:1e:79:f1:8b:39:55:b5:be:4f:1a:11: 2a:a6:6c:81:99:63:42:93:d2:6d:04:db:ab:1e:f8: 87:4a:87:3e:8d:54:29:11:78:9b:f0:66:e6:ac:24: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:B5:06:16:5E:06:39:D0:1E:0B:9C:51:81:0C:EE:14:67:47:B8 X509v3 Authority Key Identifier: keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:36:81:4a:8a:05:90:19:b7:19:ec:b3:0b:ad:40:01:49:6c: e8:1d:ed:96:e7:b2:1d:50:e2:b4:c1:98:77:f3:0c:69:d1:2d: 3c:60:72:9c:bf:59:45:d3:26:90:95:55:82:69:2f:a6:6b:db: 1a:18:2e:17:41:5b:98:59:5b:10:9d:d5:a1:72:f8:78:35:26: 80:9e:ad:c5:d1:e3:83:f3:a8:fe:13:78:23:45:02:b0:cd:dc: 05:24:ca:fa:6e:ba:12:2e:99:ef:55:b3:7d:fa:fd:10:4f:01: 1d:d8:87:a1:06:98:dc:51:02:28:ed:3f:92:7c:e8:ac:d1:eb: 44:7d:44:dc:5c:78:25:8b:58:77:eb:8c:09:58:e2:e4:e6:ce: 51:5b:d3:3d:88:93:48:52:bb:5d:f8:f9:34:ac:80:e3:47:8a: 81:73:fe:64:ba:65:af:c4:67:a2:c1:8d:2c:aa:c9:6c:5b:5e: 0b:6a:d2:83:42:d2:fe:06:3a:a1:fc:d8:04:ae:85:ee:6a:32: f0:e4:df:95:7b:07:80:93:97:d0:91:20:8f:92:38:7c:36:f1: 57:01:32:12:56:ad:36:80:9f:1b:9d:64:35:1e:0f:f2:b8:ce: 77:bf:c4:85:fe:3c:09:c9:9e:d2:c9:ac:ce:b4:81:57:89:e8: 4a:e7:e9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDczMjI1NERCRDYxOEYxODg2RDRERjkyMDEzOTNCRkRG OEI5RTAyMEUwHhcNMjUwNTMwMTYxNTQ1WhcNMjUwNjA2MTYxNTQ1WjAYMRYwFAYD VQQDEw02ODM5ZDliMi0zODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArW2Rylnf+TpHUp6R4kaYHtPcfGW5yZph/aWryfjCSkJBrrugu49SD6lYNV34 CI7vwLwgYoiSP3BM0TDQ1Onf0pcCCrtets0JQjHqotQy9pllYnsHkkXPzsNJ67nR 1Kcpi3P16xh4lh0yFdh2vwRoaCkE0ZOP0fIoyzZ5S/j11gkEXnMk+o7XOkirAuU8 qy8sTAf7fEyXurZzB6pfLSieBsnDFyD3Z0uBbN/kLAY1xGtwWou4HnpYhH8V1jjz kwoFu6OiiqqG8hveEu6IlkF0oJxnF8W4HnnxizlVtb5PGhEqpmyBmWNCk9JtBNur HviHSoc+jVQpEXib8GbmrCS3bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwOtQYW XgY50B4LnFGBDO4UZ0e4MB8GA1UdIwQYMBaAFHMiVNvWGPGIbU35IBOTv9+LngIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZaHRUZmtnRTVPXzM0dWVB ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5SlUyOVlZOFlodFRma2dFNU9fMzR1ZUFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9jeUpVMjlZWThZ aHRUZmtnRTVPXzM0dWVBZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNNoFKigWQGbcZ7LMLrUABSWzoHe2W57IdUOK0wZh38wxp0S08YHKc v1lF0yaQlVWCaS+ma9saGC4XQVuYWVsQndWhcvh4NSaAnq3F0eOD86j+E3gjRQKw zdwFJMr6broSLpnvVbN9+v0QTwEd2IehBpjcUQIo7T+SfOis0etEfUTcXHgli1h3 64wJWOLk5s5RW9M9iJNIUrtd+Pk0rIDjR4qBc/5kumWvxGeiwY0sqslsW14LatKD QtL+Bjqh/NgEroXuajLw5N+VeweAk5fQkSCPkjh8NvFXATISVq02gJ8bnWQ1Hg/y uM53v8SF/jwJyZ7SyazOtIFXiehK5+kf -----END CERTIFICATE-----Generated at Sat May 31 17:23:31 2025 by rpki-client