$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: 3itbgqDR6AFLxX8kHfuQwjGSAjNiwWwM9Bs8qcgBUZo= Subject key identifier: C6:C8:62:71:D5:FD:2C:67:15:DC:99:63:43:96:64:0D:18:49:08:FE Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: 8E Signing time: Mon 09 Jun 2025 05:25:58 +0000 Manifest this update: Mon 09 Jun 2025 05:25:57 +0000 Manifest next update: Mon 16 Jun 2025 05:25:57 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: PaSoYw5U+v/dr3ktvuMTra91zKVrPSyB8ccE7Q3u06I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 05:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Jun 9 05:25:57 2025 GMT Not After : Jun 16 05:25:57 2025 GMT Subject: CN=68467065-8d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:ee:68:3c:03:4c:7d:c0:04:12:e9:62:b5: ed:21:13:82:36:c0:c0:60:52:ee:2d:53:4f:4d:47: a2:59:b2:b6:f4:06:d5:0a:6d:9b:97:67:2e:2a:9a: 7e:b5:d0:b6:66:d9:91:2e:4c:5a:a5:ad:71:79:81: a7:c4:2b:6f:38:44:12:4a:2b:56:d8:3c:ac:49:c1: 99:9d:25:be:c1:49:40:60:a1:c6:68:37:1e:d4:f4: 21:87:d8:f9:65:7f:66:3b:b0:4a:e8:4e:fb:73:00: ac:03:c3:3d:45:90:c1:31:b7:07:5c:d1:df:9d:ab: e4:3a:00:2c:97:3e:a5:65:7d:32:78:4e:67:b5:5a: 8e:3a:64:2c:04:c1:e9:72:2d:cf:ac:9b:fc:f4:8d: f3:e0:97:3c:e0:36:6e:0e:dc:3e:9a:35:56:bb:85: 93:97:82:87:01:17:c8:b6:62:a6:81:35:ec:96:9e: e1:36:fd:79:bd:ba:37:60:e0:ae:43:bc:9c:e1:37: 13:a0:29:f2:fa:35:48:4f:af:1d:16:c5:fa:fa:1c: 9b:74:a8:c0:6e:ec:6e:61:d9:44:26:2c:2b:1c:84: 92:86:37:7f:bc:fc:3a:0c:84:44:d2:c5:6b:74:83: b3:7d:4c:51:07:1f:00:90:0b:ac:d8:c8:ae:0d:1d: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:62:71:D5:FD:2C:67:15:DC:99:63:43:96:64:0D:18:49:08:FE X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:7c:be:1f:91:b2:e7:fa:e2:d6:ba:e6:79:91:64:9c:b5:5d: 8e:85:86:05:3d:ff:3f:f5:1a:73:d1:0a:60:cb:4c:82:dc:7d: 00:00:84:ff:f4:74:e0:3c:35:37:57:71:2f:50:32:3b:8e:3a: 87:a1:0c:a9:58:e4:34:70:6c:9e:cc:c0:35:a6:97:f4:6e:55: f0:05:62:61:02:aa:11:d9:7d:5b:72:96:81:b1:6d:c6:d5:d3: fd:3e:44:6f:11:d4:6e:26:a5:b9:ab:80:00:9e:1d:59:07:6a: b7:f1:8c:a6:10:02:60:e0:3f:c6:cd:48:5c:50:6b:58:d8:d6: 90:82:49:67:82:22:8a:f6:49:77:c6:21:02:5f:d6:35:ed:7a: 28:7b:70:1f:4c:7c:1d:48:4a:b9:8f:2f:d2:df:35:27:0e:b5: 05:19:46:d2:2a:ec:ad:9a:41:b4:a0:c0:3f:1c:ed:dc:97:d9: 8f:5a:5c:21:37:4d:f2:d1:47:59:b5:3f:a3:a5:04:99:79:f9: 5a:14:45:43:e2:1b:11:e7:e1:b5:cf:e3:57:a8:06:0e:dc:c9: b5:10:74:67:ba:50:11:82:71:f8:52:9b:55:5d:52:8e:0c:ec: 29:73:65:be:dc:27:c4:7d:38:4b:59:b0:b1:07:ea:86:d3:87: e8:70:34:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjUwNjA5MDUyNTU3WhcNMjUwNjE2MDUyNTU3WjAYMRYwFAYD VQQDEw02ODQ2NzA2NS04ZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCTuaDwDTH3ABBLpYrXtIROCNsDAYFLuLVNPTUeiWbK29AbVCm2bl2cuKpp+ tdC2ZtmRLkxapa1xeYGnxCtvOEQSSitW2DysScGZnSW+wUlAYKHGaDce1PQhh9j5 ZX9mO7BK6E77cwCsA8M9RZDBMbcHXNHfnavkOgAslz6lZX0yeE5ntVqOOmQsBMHp ci3PrJv89I3z4Jc84DZuDtw+mjVWu4WTl4KHARfItmKmgTXslp7hNv15vbo3YOCu Q7yc4TcToCny+jVIT68dFsX6+hybdKjAbuxuYdlEJiwrHISShjd/vPw6DIRE0sVr dIOzfUxRBx8AkAus2MiuDR1M4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbIYnHV /SxnFdyZY0OWZA0YSQj+MB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2fL4fkbLn+uLWuuZ5kWSctV2OhYYFPf8/9Rpz0Qpgy0yC3H0AAIT/ 9HTgPDU3V3EvUDI7jjqHoQypWOQ0cGyezMA1ppf0blXwBWJhAqoR2X1bcpaBsW3G 1dP9PkRvEdRuJqW5q4AAnh1ZB2q38YymEAJg4D/GzUhcUGtY2NaQgklngiKK9kl3 xiECX9Y17Xooe3AfTHwdSEq5jy/S3zUnDrUFGUbSKuytmkG0oMA/HO3cl9mPWlwh N03y0UdZtT+jpQSZeflaFEVD4hsR5+G1z+NXqAYO3Mm1EHRnulARgnH4UptVXVKO DOwpc2W+3CfEfThLWbCxB+qG04focDTo -----END CERTIFICATE-----Generated at Mon Jun 9 20:03:09 2025 by rpki-client