$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: hTcu3jRQsk3jNbUqtBZXXhQxQ7Myt3iIqWiwoMEqy+A= Subject key identifier: B9:B5:D0:05:0B:D5:20:E4:7D:43:4E:21:D8:F8:BC:F1:56:8B:A5:E1 Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 5073 Signing time: Wed 06 Aug 2025 16:29:32 +0000 Manifest this update: Wed 06 Aug 2025 16:29:32 +0000 Manifest next update: Wed 13 Aug 2025 16:29:32 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: EFpTXBVKxdsBtbASBbyi2T5HS2uD/qeQzK4xs4z1ykI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: Aug 6 16:29:32 2025 GMT Not After : Aug 13 16:29:32 2025 GMT Subject: CN=689382ec-75c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:fa:8b:6d:49:21:bb:d9:0c:9e:8a:62:d2: 2d:f9:52:32:f7:11:9c:10:bd:67:a2:ed:b4:e4:c4: cb:99:38:52:a9:19:f7:a8:e4:ed:80:aa:7c:20:3a: 8c:80:e0:4a:52:e8:04:61:c0:f2:57:5f:38:81:0f: 9e:1c:5c:58:2a:eb:00:a8:f3:fb:47:e3:45:f7:54: 7a:70:45:fc:e9:1a:e5:cb:c5:b4:17:fa:e4:09:70: aa:3e:bd:84:30:8e:0c:37:df:84:92:ef:12:7b:d0: 35:64:17:a4:60:7b:b4:6f:f2:e0:73:45:9b:3f:45: 97:3e:da:97:77:73:8c:e2:f8:97:cc:b7:05:3d:fa: f1:e1:cb:c9:1c:96:81:f9:a6:5e:0a:87:df:30:6c: 5e:55:df:19:cd:19:cf:8e:3d:fe:33:f2:b7:b6:9b: 50:0b:bd:86:2e:4b:f3:7d:b2:d2:d6:20:cc:09:57: 7f:fd:ad:df:9f:5c:e4:a5:0d:d3:7c:96:df:48:72: be:79:e1:b9:a2:27:9c:24:e5:45:15:ed:3b:66:a9: 38:a6:7f:0c:50:e7:dc:61:5d:0c:46:22:d5:4b:02: 59:fc:4c:80:55:43:16:4f:93:4c:5e:9a:80:7b:3c: b5:b6:d7:ef:3a:e7:8f:ae:fe:0f:70:28:1e:9f:8f: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:D0:05:0B:D5:20:E4:7D:43:4E:21:D8:F8:BC:F1:56:8B:A5:E1 X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:b6:ae:91:83:42:98:a7:ba:ce:e9:a8:56:df:e0:5f:2c: b5:d0:51:b8:ff:1d:3a:dd:d6:45:df:b6:e7:e0:1a:19:b0:cc: ed:8a:0b:11:73:ce:d9:2f:11:5d:f3:53:3a:a7:39:bc:e4:fa: 09:7c:cd:03:80:2b:f9:fe:88:6b:de:4c:02:1f:20:06:a7:39: dd:3f:99:7b:0e:f3:30:f2:ce:bd:88:e2:4f:26:d2:bf:41:70: ca:56:74:ec:ec:fa:25:b0:db:2c:5d:52:44:ad:93:0c:e5:e1: e0:11:20:78:2b:1a:b9:e7:e3:71:10:3f:97:58:7e:89:48:ff: 9a:13:4a:8b:fe:81:16:a6:e2:8e:97:f0:cc:9f:ee:89:b6:82: c5:e0:26:c9:f7:93:16:c3:85:3b:73:51:d4:0b:d9:17:8c:93: 0c:b4:9d:c0:b8:6b:23:c4:36:22:c0:33:51:d5:46:67:cc:6c: cc:ae:1c:b5:11:97:aa:91:af:a9:cb:ed:09:0e:94:b0:26:8d: ba:56:9c:e9:a7:3c:d9:0d:11:64:ac:9f:12:8f:63:4c:f2:11: 1b:f4:63:c8:1c:b1:af:5e:3b:83:25:64:e4:14:7d:63:c3:f7: 44:39:16:d5:9a:44:e9:5c:d4:94:6d:0e:d8:c2:15:fd:0f:fe: a4:b5:a8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjUwODA2MTYyOTMyWhcNMjUwODEzMTYyOTMyWjAYMRYwFAYD VQQDEw02ODkzODJlYy03NWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9n6i21JIbvZDJ6KYtIt+VIy9xGcEL1nou205MTLmThSqRn3qOTtgKp8IDqM gOBKUugEYcDyV184gQ+eHFxYKusAqPP7R+NF91R6cEX86Rrly8W0F/rkCXCqPr2E MI4MN9+Eku8Se9A1ZBekYHu0b/Lgc0WbP0WXPtqXd3OM4viXzLcFPfrx4cvJHJaB +aZeCoffMGxeVd8ZzRnPjj3+M/K3tptQC72GLkvzfbLS1iDMCVd//a3fn1zkpQ3T fJbfSHK+eeG5oiecJOVFFe07Zqk4pn8MUOfcYV0MRiLVSwJZ/EyAVUMWT5NMXpqA ezy1ttfvOuePrv4PcCgen481lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLm10AUL 1SDkfUNOIdj4vPFWi6XhMB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtD7aukYNCmKe6zumoVt/gXyy10FG4/x063dZF37bn4BoZsMztigsR c87ZLxFd81M6pzm85PoJfM0DgCv5/ohr3kwCHyAGpzndP5l7DvMw8s69iOJPJtK/ QXDKVnTs7PolsNssXVJErZMM5eHgESB4Kxq55+NxED+XWH6JSP+aE0qL/oEWpuKO l/DMn+6JtoLF4CbJ95MWw4U7c1HUC9kXjJMMtJ3AuGsjxDYiwDNR1UZnzGzMrhy1 EZeqka+py+0JDpSwJo26VpzppzzZDRFkrJ8Sj2NM8hEb9GPIHLGvXjuDJWTkFH1j w/dEORbVmkTpXNSUbQ7YwhX9D/6ktaiV -----END CERTIFICATE-----Generated at Fri Aug 8 13:08:52 2025 by rpki-client