$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: 9DQ30BCKeEtBuKB6N2aBb6vAI0jhA9rU6xBCQIiIaJw= Subject key identifier: E2:54:63:F3:9C:5B:43:2C:6C:0A:32:29:D9:5F:4B:60:AC:BE:48:68 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E07 Signing time: Fri 30 May 2025 17:59:37 +0000 Manifest this update: Fri 30 May 2025 17:59:36 +0000 Manifest next update: Fri 06 Jun 2025 17:59:36 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: OWcG7nA6Y5XUGbbIDLys5MXGCNMes5QTy1b5RpH0kEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: May 30 17:59:36 2025 GMT Not After : Jun 6 17:59:36 2025 GMT Subject: CN=6839f209-b82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:bd:2c:b4:36:4a:79:d1:38:76:c3:01:67: c7:65:b0:19:4d:04:40:a9:84:64:8c:cd:a7:c6:6c: 1e:72:0f:a9:01:4d:5c:92:77:42:83:3d:be:0e:b5: 7d:5e:7f:a7:38:da:a8:e5:86:c0:11:a6:68:57:00: 3c:08:ea:99:ab:85:21:6d:f1:22:0b:d9:cf:d1:f4: 75:d3:9d:22:43:04:60:d6:5c:73:2c:7e:76:32:94: ea:09:03:32:93:05:64:95:61:49:5f:56:ed:fc:91: 89:58:25:37:84:db:30:dd:b7:61:0a:11:81:5d:34: 3c:39:48:f8:8f:63:96:41:5c:8f:ca:c0:29:c9:c6: 99:3a:f9:8f:da:f5:82:b3:0f:72:a5:62:b1:3e:29: 93:5d:05:2d:e0:84:eb:85:8e:77:8f:98:54:b1:18: 83:1b:c7:f8:cb:1e:04:a9:5a:4c:f3:6f:64:63:22: f4:6c:0d:cb:d6:62:a2:aa:dc:aa:f9:b7:ec:ff:23: 16:96:af:61:65:15:e3:26:67:31:15:3f:57:d6:0d: 4f:cc:e9:1d:4e:82:55:c1:96:b4:3a:5a:b5:9c:ca: 74:2c:11:56:ec:cd:14:c1:2a:b7:21:0d:2d:00:65: c5:9d:21:ad:b5:e9:49:62:41:42:c3:75:8c:9f:48: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:54:63:F3:9C:5B:43:2C:6C:0A:32:29:D9:5F:4B:60:AC:BE:48:68 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4a:e0:af:70:1d:fa:e6:b0:f8:06:6b:a7:5e:bb:eb:ef:ed: 2e:d0:b7:ec:0d:71:06:78:98:d2:ff:97:4c:9e:11:3b:fe:aa: ea:be:49:7a:a3:f6:5c:e6:4a:07:15:a0:d3:91:95:d9:c7:24: 0c:6e:d5:44:83:de:de:30:8b:ce:81:5f:0d:45:37:48:50:ce: 12:a0:39:62:c7:95:1b:6c:62:a2:ac:8e:68:4f:c2:ff:12:a8: ed:ee:1c:66:8d:26:2c:18:4d:da:1d:8e:fb:6f:31:ea:50:96: d6:0c:7a:11:49:a6:35:25:e3:7f:5a:12:80:1d:40:51:d6:20: 4d:4d:d7:9f:60:d4:c0:28:73:c6:a0:87:73:69:b1:4a:f8:bc: 6c:e5:77:41:32:6f:b7:aa:90:62:73:2f:e6:0e:6a:d3:b7:c3: 70:d9:1d:d7:03:70:b3:03:46:ab:9f:28:7a:6f:6c:db:5b:05: e9:bf:75:1b:be:88:fb:36:75:11:ae:b2:90:c0:86:b3:7c:2a: 6c:1b:d7:a6:4d:ce:97:37:0c:cc:90:1a:eb:9e:90:fc:25:0e: 03:be:19:81:12:00:66:68:7e:d2:bd:10:a0:76:9f:8c:70:48: c9:9b:7b:b9:19:23:d2:d7:10:25:22:7f:a5:18:6b:ed:d5:33: 49:44:b9:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUwNTMwMTc1OTM2WhcNMjUwNjA2MTc1OTM2WjAYMRYwFAYD VQQDEw02ODM5ZjIwOS1iODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvty9LLQ2SnnROHbDAWfHZbAZTQRAqYRkjM2nxmwecg+pAU1ckndCgz2+DrV9 Xn+nONqo5YbAEaZoVwA8COqZq4UhbfEiC9nP0fR1050iQwRg1lxzLH52MpTqCQMy kwVklWFJX1bt/JGJWCU3hNsw3bdhChGBXTQ8OUj4j2OWQVyPysApycaZOvmP2vWC sw9ypWKxPimTXQUt4ITrhY53j5hUsRiDG8f4yx4EqVpM829kYyL0bA3L1mKiqtyq +bfs/yMWlq9hZRXjJmcxFT9X1g1PzOkdToJVwZa0Olq1nMp0LBFW7M0UwSq3IQ0t AGXFnSGttelJYkFCw3WMn0i1eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJUY/Oc W0MsbAoyKdlfS2CsvkhoMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SuCvcB365rD4BmunXrvr7+0u0LfsDXEGeJjS/5dMnhE7/qrqvkl6 o/Zc5koHFaDTkZXZxyQMbtVEg97eMIvOgV8NRTdIUM4SoDlix5UbbGKirI5oT8L/ Eqjt7hxmjSYsGE3aHY77bzHqUJbWDHoRSaY1JeN/WhKAHUBR1iBNTdefYNTAKHPG oIdzabFK+Lxs5XdBMm+3qpBicy/mDmrTt8Nw2R3XA3CzA0arnyh6b2zbWwXpv3Ub voj7NnURrrKQwIazfCpsG9emTc6XNwzMkBrrnpD8JQ4DvhmBEgBmaH7SvRCgdp+M cEjJm3u5GSPS1xAlIn+lGGvt1TNJRLlw -----END CERTIFICATE-----Generated at Sat May 31 16:42:57 2025 by rpki-client