$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: YAA3sLYiJ0PnVtzlcERa55f6XfGs+r6dko2o3SKqu6g= Subject key identifier: 6C:85:7D:0D:13:5C:11:88:E6:4E:2F:8F:91:23:74:BF:4B:F9:AC:97 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 07DA Signing time: Fri 08 Aug 2025 21:29:41 +0000 Manifest this update: Fri 08 Aug 2025 21:29:40 +0000 Manifest next update: Fri 15 Aug 2025 21:29:40 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: +5StsADaE1PkTugbCW5UwmacIp6swk3AVR2i0Pc1SDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Aug 8 21:29:40 2025 GMT Not After : Aug 15 21:29:40 2025 GMT Subject: CN=68966c45-1e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:dd:35:54:6d:87:ce:cb:97:ea:53:b9:42: 09:74:9c:63:95:10:b8:30:0b:63:8a:93:0a:5f:39: bd:58:65:cc:c5:77:7b:df:1b:42:49:08:f1:7d:84: 3c:c6:ca:ab:ef:c1:6e:71:2a:a2:52:51:29:eb:96: 20:c6:92:5e:b9:eb:74:2e:d8:cf:c9:8d:15:bc:c2: 7f:9d:79:9f:6a:15:d3:43:92:81:d5:c5:92:30:01: fb:62:59:85:fe:cd:7f:e2:a4:39:ce:de:8d:0c:e2: e1:3c:d5:3d:ed:c6:c4:c4:54:0c:ea:aa:31:ee:7a: ef:dd:86:18:d8:7a:c6:73:85:83:d5:70:de:cc:95: 3d:87:57:3c:4f:48:1a:ce:72:6c:40:30:65:fb:94: 5f:3a:3b:e0:c6:8b:6e:42:38:74:52:97:d3:06:ce: 65:e8:7c:ff:0a:65:ca:b3:17:cf:4a:5e:49:2c:d1: 07:23:56:71:c1:18:04:f3:65:14:c0:e9:1d:35:3d: ca:37:fb:5b:ae:62:a3:47:65:67:72:86:4a:a3:5c: cd:d8:f4:06:7f:d4:47:a4:fb:04:c7:ff:f2:c2:5a: 9a:49:e3:61:27:3f:ef:58:11:f5:1f:03:e9:27:30: ad:f1:3a:35:4c:6d:08:ea:e0:31:c7:fe:dc:f2:ec: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:85:7D:0D:13:5C:11:88:E6:4E:2F:8F:91:23:74:BF:4B:F9:AC:97 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d8:01:e6:b9:51:b3:2f:46:7b:1f:18:7e:d7:8f:d4:d7:f2: 59:e5:af:f5:1b:b7:f1:82:6f:07:da:ae:eb:4d:31:48:df:b7: b7:02:aa:d0:e0:3e:2a:88:1b:6d:0d:55:c6:4a:d0:23:aa:9a: 93:9e:48:b9:c6:97:55:06:4c:58:09:4b:40:f2:ba:e8:27:3a: fa:70:7f:32:ee:98:43:51:c3:d2:55:69:4c:61:f5:a5:37:93: ce:73:eb:bb:53:51:91:83:dc:c6:b3:8e:78:af:e9:70:c6:2e: 4d:d4:5a:7e:11:9e:b0:26:fa:66:6a:b3:05:d1:17:6f:09:5a: 8d:a1:a7:c5:58:9b:b9:13:c3:41:38:34:e1:95:c6:17:41:a0: ec:cd:18:26:8b:da:17:7b:f5:d6:e9:04:b6:8f:1d:9b:e3:1f: 29:55:b4:39:7b:a1:83:99:09:92:37:6d:a4:d2:8b:0a:e4:e8: 53:6c:2c:60:c8:0e:bd:fd:45:e5:af:32:67:e6:ca:d1:0d:1c: df:55:98:3e:a7:af:9f:06:a7:b1:d3:50:54:6d:a3:e4:08:b5: cf:bd:e9:da:3b:c6:60:9e:30:64:99:73:43:ff:50:5a:12:39: c5:4d:7d:d9:60:ec:fb:5a:ae:6e:39:a7:19:e3:32:8d:76:6e: 6e:9b:7e:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUwODA4MjEyOTQwWhcNMjUwODE1MjEyOTQwWjAYMRYwFAYD VQQDEw02ODk2NmM0NS0xZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T3dNVRth87Ll+pTuUIJdJxjlRC4MAtjipMKXzm9WGXMxXd73xtCSQjxfYQ8 xsqr78FucSqiUlEp65YgxpJeuet0LtjPyY0VvMJ/nXmfahXTQ5KB1cWSMAH7YlmF /s1/4qQ5zt6NDOLhPNU97cbExFQM6qox7nrv3YYY2HrGc4WD1XDezJU9h1c8T0ga znJsQDBl+5RfOjvgxotuQjh0UpfTBs5l6Hz/CmXKsxfPSl5JLNEHI1ZxwRgE82UU wOkdNT3KN/tbrmKjR2VncoZKo1zN2PQGf9RHpPsEx//ywlqaSeNhJz/vWBH1HwPp JzCt8To1TG0I6uAxx/7c8uwTYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyFfQ0T XBGI5k4vj5EjdL9L+ayXMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH2AHmuVGzL0Z7Hxh+14/U1/JZ5a/1G7fxgm8H2q7rTTFI37e3AqrQ 4D4qiBttDVXGStAjqpqTnki5xpdVBkxYCUtA8rroJzr6cH8y7phDUcPSVWlMYfWl N5POc+u7U1GRg9zGs454r+lwxi5N1Fp+EZ6wJvpmarMF0RdvCVqNoafFWJu5E8NB ODThlcYXQaDszRgmi9oXe/XW6QS2jx2b4x8pVbQ5e6GDmQmSN22k0osK5OhTbCxg yA69/UXlrzJn5srRDRzfVZg+p6+fBqex01BUbaPkCLXPvenaO8ZgnjBkmXND/1Ba EjnFTX3ZYOz7Wq5uOacZ4zKNdm5um34x -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:11 2025 by rpki-client