$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft File: CmH1ryEJpoNhH7ogbyCM7-NImCE.mft (raw, json) Hash identifier: 5zpV0poG9T8t1SLf95q/jriQlaCSAGplJJgTheu1ztA= Subject key identifier: A6:67:8C:8F:E3:2C:DC:C3:8A:1E:40:A4:99:3C:62:C3:12:96:2E:19 Authority key identifier: 0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 Certificate issuer: /CN=A91559AC/serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft Manifest number: 0AE6 Signing time: Fri 08 Aug 2025 19:51:32 +0000 Manifest this update: Fri 08 Aug 2025 19:51:32 +0000 Manifest next update: Fri 15 Aug 2025 19:51:32 +0000 Files and hashes: 1: CmH1ryEJpoNhH7ogbyCM7-NImCE.crl (hash: dUc+rYO48px4Ppoif1R6NlIDuhxGsf1Yfkpqpphvxz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91559AC, serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Validity Not Before: Aug 8 19:51:32 2025 GMT Not After : Aug 15 19:51:32 2025 GMT Subject: CN=68965544-7cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:fd:3d:83:e2:9a:7b:10:79:ac:1e:74:d6: 90:c1:c5:92:63:97:5a:c4:61:91:d2:98:03:ca:a2: a8:fe:aa:a1:f9:30:16:20:a6:0c:2d:29:2b:a7:ff: d0:6d:f4:0c:ba:67:e1:91:9f:bf:b4:4c:b4:72:50: 81:e2:23:17:68:37:a7:45:0c:67:40:91:ac:a2:d4: 47:9a:fc:45:9a:eb:84:d2:c7:45:ab:20:81:26:90: bd:ca:84:51:73:e0:00:cc:ef:4d:30:e7:bd:0f:6c: aa:d2:01:53:d3:c2:3e:5f:20:83:f5:89:78:21:d4: ae:f6:20:f5:d6:4d:e0:6c:44:0a:f7:dc:3a:43:30: 6b:b6:e8:98:92:c1:5b:bd:c8:ef:dd:b1:4e:df:49: a6:98:b9:7f:3f:f9:b4:79:83:7c:34:75:e8:fe:2e: 26:5f:50:54:7e:07:64:4b:17:95:61:7f:f1:4d:d5: 70:33:07:b9:32:7b:06:44:d7:1f:ee:ec:ce:8c:7f: 9b:ae:44:42:14:c0:f8:90:f4:ec:07:e6:5c:9e:7f: d2:66:98:1d:a2:be:79:80:ad:ed:ef:f0:cf:db:43: 8c:d6:58:21:5c:17:2f:c9:99:d2:48:bd:d0:d5:04: 1d:9d:e6:7f:15:70:01:c2:44:96:b7:75:c4:f3:a8: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:67:8C:8F:E3:2C:DC:C3:8A:1E:40:A4:99:3C:62:C3:12:96:2E:19 X509v3 Authority Key Identifier: keyid:0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a8:25:80:f3:35:84:4e:c8:5c:9d:8f:1b:fe:9d:a9:c3:86: d5:75:b6:18:28:c8:ce:98:79:bf:6c:45:82:56:7d:b5:87:b0: 1a:ec:72:f3:47:70:77:3e:70:fc:2e:c9:4c:12:2e:c5:b0:e8: c4:54:c2:40:88:88:ff:77:e8:9d:b6:e5:04:d7:a8:4c:a6:58: c5:73:03:38:be:e3:c0:b3:b4:f1:26:b3:e8:65:17:06:ff:76: 3c:cd:fd:86:b2:57:54:27:26:67:bb:15:43:bc:d5:33:63:ee: cd:88:d4:9f:4a:d2:d0:39:94:ae:b3:74:01:bc:53:b8:4f:92: 1d:c1:71:aa:8c:ed:7e:66:9c:78:02:f5:38:59:82:e0:91:3c: cf:3b:24:5e:77:b8:13:25:76:bb:9d:56:b4:ad:85:08:84:e6: 2f:d7:72:79:bd:ae:35:bd:22:f7:12:8e:19:77:27:05:fd:b7: 36:56:08:d1:d6:e4:2c:75:52:50:d1:99:7e:ed:e7:ce:84:f4: b6:cc:65:b8:4d:7f:05:8d:3f:f5:10:87:30:9f:ee:1a:ed:3e: df:c3:ae:de:fe:f0:53:b0:84:23:16:e8:c6:74:09:62:bc:04: 84:38:fb:90:55:f5:b0:b3:65:5f:05:23:0e:cb:1b:b5:25:d4: 53:1f:c9:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU5QUMxMTAvBgNVBAUTKDBBNjFGNUFGMjEwOUE2ODM2MTFGQkEyMDZGMjA4Q0VG RTM0ODk4MjEwHhcNMjUwODA4MTk1MTMyWhcNMjUwODE1MTk1MTMyWjAYMRYwFAYD VQQDEw02ODk2NTU0NC03Y2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0f9PYPimnsQeawedNaQwcWSY5daxGGR0pgDyqKo/qqh+TAWIKYMLSkrp//Q bfQMumfhkZ+/tEy0clCB4iMXaDenRQxnQJGsotRHmvxFmuuE0sdFqyCBJpC9yoRR c+AAzO9NMOe9D2yq0gFT08I+XyCD9Yl4IdSu9iD11k3gbEQK99w6QzBrtuiYksFb vcjv3bFO30mmmLl/P/m0eYN8NHXo/i4mX1BUfgdkSxeVYX/xTdVwMwe5MnsGRNcf 7uzOjH+brkRCFMD4kPTsB+Zcnn/SZpgdor55gK3t7/DP20OM1lghXBcvyZnSSL3Q 1QQdneZ/FXABwkSWt3XE86ikuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZnjI/j LNzDih5ApJk8YsMSli4ZMB8GA1UdIwQYMBaAFAph9a8hCaaDYR+6IG8gjO/jSJgh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTlBQy9DMDYxMzUxNjVG OEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBvTmhIN29nYnlDTTctTklt Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtSDFyeUVKcG9OaEg3b2dieUNNNy1OSW1DRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBv TmhIN29nYnlDTTctTkltQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLqCWA8zWETshcnY8b/p2pw4bVdbYYKMjOmHm/bEWCVn21h7Aa7HLz R3B3PnD8LslMEi7FsOjEVMJAiIj/d+idtuUE16hMpljFcwM4vuPAs7TxJrPoZRcG /3Y8zf2GsldUJyZnuxVDvNUzY+7NiNSfStLQOZSus3QBvFO4T5IdwXGqjO1+Zpx4 AvU4WYLgkTzPOyRed7gTJXa7nVa0rYUIhOYv13J5va41vSL3Eo4ZdycF/bc2VgjR 1uQsdVJQ0Zl+7efOhPS2zGW4TX8FjT/1EIcwn+4a7T7fw67e/vBTsIQjFujGdAli vASEOPuQVfWws2VfBSMOyxu1JdRTH8nl -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:38 2025 by rpki-client