$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: FjFkwJZtFqwSswtTutrPtizrNZtCNPGqWJI2Qj1zWws= Subject key identifier: 18:C3:75:60:7D:38:CA:F5:E1:C9:47:0D:95:A7:A3:5D:E9:F5:E4:51 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 67 Signing time: Sat 09 Aug 2025 07:29:50 +0000 Manifest this update: Sat 09 Aug 2025 07:29:49 +0000 Manifest next update: Sat 16 Aug 2025 07:29:49 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: jIMLq81m2b4A4jMBwzOAPYmpAdPJMg27s707efysNI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Aug 9 07:29:49 2025 GMT Not After : Aug 16 07:29:49 2025 GMT Subject: CN=6896f8ed-e422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:df:c0:aa:9a:b2:49:72:25:13:63:6e:ab: f8:d4:10:10:c1:f1:7c:f8:43:09:5b:6d:8d:1f:49: a2:eb:c6:4b:8d:e6:cd:51:d3:c4:de:d5:7e:cd:96: a1:24:20:35:6b:a4:1e:a1:72:49:eb:6e:b4:3e:49: cb:57:5b:3f:04:73:e2:79:1b:3e:97:0c:ac:08:43: 9b:0e:89:4c:f7:d6:11:1b:c2:78:a1:c5:7f:48:bc: 33:bf:28:c5:d1:1d:85:65:51:c2:3a:9c:6c:1d:bc: 88:7c:cd:2a:cb:47:fc:00:07:45:83:7b:05:39:a7: 2a:e8:34:d0:a7:9f:6f:5b:44:29:99:2c:ca:f3:93: 2b:40:32:f3:d4:65:bf:c0:1c:83:1c:88:ef:94:ea: 85:fd:d4:ec:00:2b:13:af:30:cb:f3:62:e2:45:c4: e5:e5:40:4b:5f:6d:2f:30:70:2c:ae:03:21:c9:1c: 40:98:03:6a:bf:44:31:14:49:94:64:fc:a5:aa:9e: cd:07:e7:f9:67:71:3b:73:08:d9:cb:6a:40:11:84: 1c:1d:0c:87:1f:31:6a:1b:0f:a9:ea:87:a0:e5:43: d2:e0:e8:4d:3c:d8:5e:10:2c:f9:fa:41:e6:68:b0: 04:0f:6c:44:8e:ec:02:21:b0:9e:50:de:c1:f5:38: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C3:75:60:7D:38:CA:F5:E1:C9:47:0D:95:A7:A3:5D:E9:F5:E4:51 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:73:a2:8f:f7:51:6f:5e:df:0e:4d:b3:49:4e:ad:f7:aa:bf: 6c:57:83:e9:5a:a3:50:79:65:45:ae:fa:84:23:f5:af:56:89: ed:59:4e:3d:fd:81:57:69:77:35:ac:a8:ee:f9:26:d4:bf:de: de:d1:6e:78:52:1e:fd:c6:05:91:f2:e1:cf:29:3e:cd:a1:f2: 08:be:0d:00:1c:de:f0:d2:b2:40:9e:74:b7:9b:37:97:58:71: 6f:07:27:ba:d4:73:db:a7:c6:5b:3d:49:86:ba:be:53:8d:0e: e8:81:0b:b7:35:12:13:c3:54:bf:b6:de:fd:c1:00:68:70:62: 28:48:aa:79:b2:b8:3a:73:61:9c:d0:b5:ef:fa:3d:2e:ae:6d: 82:66:2e:db:86:23:4c:a4:63:8a:e0:53:91:1a:3e:23:39:2a: 2c:69:03:cb:66:bf:04:94:b6:85:17:67:e9:47:db:74:f1:f1: f1:27:91:7c:e3:69:43:80:51:55:5e:0c:73:d5:c3:c2:36:4b: 0f:41:3c:0e:f6:8f:40:88:58:21:ce:d7:04:04:2d:fe:2d:4c: f9:20:24:8a:05:c3:0a:3a:23:33:43:86:10:81:4c:5a:cf:be: d9:52:e1:01:d7:8b:75:5b:60:b9:00:f2:4b:3d:bb:47:e0:13: 29:cc:2d:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA4MDkwNzI5NDlaFw0yNTA4MTYwNzI5NDlaMBgxFjAUBgNV BAMTDTY4OTZmOGVkLWU0MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFyN/AqpqySXIlE2Nuq/jUEBDB8Xz4QwlbbY0fSaLrxkuN5s1R08Te1X7NlqEk IDVrpB6hcknrbrQ+SctXWz8Ec+J5Gz6XDKwIQ5sOiUz31hEbwnihxX9IvDO/KMXR HYVlUcI6nGwdvIh8zSrLR/wAB0WDewU5pyroNNCnn29bRCmZLMrzkytAMvPUZb/A HIMciO+U6oX91OwAKxOvMMvzYuJFxOXlQEtfbS8wcCyuAyHJHECYA2q/RDEUSZRk /KWqns0H5/lncTtzCNnLakARhBwdDIcfMWobD6nqh6DlQ9Lg6E082F4QLPn6QeZo sAQPbESO7AIhsJ5Q3sH1ONhrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGMN1YH04 yvXhyUcNlaejXen15FEwHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNzoo/3UW9e3w5Ns0lOrfeqv2xXg+lao1B5ZUWu+oQj9a9Wie1ZTj39 gVdpdzWsqO75JtS/3t7RbnhSHv3GBZHy4c8pPs2h8gi+DQAc3vDSskCedLebN5dY cW8HJ7rUc9unxls9SYa6vlONDuiBC7c1EhPDVL+23v3BAGhwYihIqnmyuDpzYZzQ te/6PS6ubYJmLtuGI0ykY4rgU5EaPiM5KixpA8tmvwSUtoUXZ+lH23Tx8fEnkXzj aUOAUVVeDHPVw8I2Sw9BPA72j0CIWCHO1wQELf4tTPkgJIoFwwo6IzNDhhCBTFrP vtlS4QHXi3VbYLkA8ks9u0fgEynMLe4= -----END CERTIFICATE-----Generated at Sun Aug 10 18:50:54 2025 by rpki-client