$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: AZkapSQ8A0q50Z2v2xJgjW6git2JBNvjLGHCAsJ8TbY= Subject key identifier: 86:0E:31:00:FA:4F:8C:04:4F:D6:EC:A7:C5:87:4C:CF:C0:B2:84:1B Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 1385 Signing time: Fri 08 Aug 2025 19:19:53 +0000 Manifest this update: Fri 08 Aug 2025 19:19:52 +0000 Manifest next update: Fri 15 Aug 2025 19:19:52 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: gdmscESQ+Y8IA8E7fVZs8cKVrWQ2LkZbmYejw41+U3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: Aug 8 19:19:52 2025 GMT Not After : Aug 15 19:19:52 2025 GMT Subject: CN=68964dd8-0a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:e7:e2:b7:a4:1b:8a:c6:13:a4:39:0a:b2: 68:d1:bd:b8:eb:28:e3:e3:a9:3b:93:3a:88:8b:d4: 76:a4:fb:b8:e7:a0:e1:4d:b6:03:43:0d:3b:7c:f1: b1:37:d4:fb:67:f8:34:44:a2:54:f7:e0:30:dc:4d: f2:b2:b9:d8:ed:18:bc:e0:98:f1:75:5b:a5:06:04: ac:01:1f:9a:43:7a:13:fa:71:0f:fd:1d:a5:fa:6a: 82:54:67:75:de:2d:d5:a7:e6:5e:15:a2:6f:c5:07: 1d:93:1e:5d:e5:38:bf:d4:1e:0d:c0:40:8c:41:e5: b9:70:cf:e3:fd:23:b8:9e:b7:6b:4c:05:b6:21:a3: 24:38:e2:5e:f0:3a:4d:cc:db:45:e4:05:d2:c6:50: df:89:a6:78:8b:d7:da:2b:56:d9:d1:8f:6c:d3:22: 84:88:f4:7b:22:12:98:8b:df:1d:86:fe:2d:a1:13: 7c:cd:ce:e2:15:4a:79:ac:a1:70:0d:95:3c:56:2b: 62:9f:b9:6e:9d:21:8a:51:83:a4:00:0c:a2:d8:87: 09:2b:d8:c0:d0:0f:2a:1f:93:49:a1:0f:4c:8e:96: f1:68:1b:93:49:a3:14:a4:ed:46:df:6b:5d:36:f6: 13:68:27:9f:7a:e3:3a:13:22:26:ec:21:76:1a:ee: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0E:31:00:FA:4F:8C:04:4F:D6:EC:A7:C5:87:4C:CF:C0:B2:84:1B X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1a:19:c9:9e:0c:92:7c:e9:ef:df:8a:f5:86:fd:78:19:2e: 4b:b0:1e:cd:21:bc:4b:5f:55:31:63:db:51:ed:0c:72:70:8b: b1:d9:38:23:9f:00:b8:af:8c:01:c3:ae:40:54:8a:81:85:a1: 9a:61:20:06:10:67:92:c4:ae:7f:2b:16:c2:4b:61:86:20:07: 6e:b5:72:4f:09:ce:d4:72:f5:c0:5e:ab:26:6c:0f:91:24:fc: 80:54:28:54:24:57:4b:49:79:ee:db:b5:8a:6c:26:28:3a:04: fe:b5:0c:24:9e:31:e9:8c:3a:76:0f:3f:8e:e9:c9:a6:b8:fe: 03:48:fa:20:72:99:72:c1:7e:20:99:56:ff:39:6d:83:08:63: 20:e0:c4:e3:bd:d8:49:2a:2b:f5:d2:e0:0b:04:8d:b0:c8:b8: c6:00:a6:0f:a8:3f:3d:fe:d4:51:14:20:4f:11:48:9c:5a:9a: f2:f9:ec:d1:bf:f0:12:67:b7:8e:84:e5:a3:d4:2c:3c:07:c4: b8:7c:20:c5:bc:60:93:f4:1d:32:f0:94:1a:38:46:4d:40:6a: 24:be:12:6f:06:c7:1d:8a:5d:38:95:0a:ba:f8:82:84:43:d3: d0:51:e6:c3:b2:49:8b:03:00:0c:b3:68:13:25:a5:f9:b3:a0: 81:9e:ca:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjUwODA4MTkxOTUyWhcNMjUwODE1MTkxOTUyWjAYMRYwFAYD VQQDEw02ODk2NGRkOC0wYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnXn4rekG4rGE6Q5CrJo0b246yjj46k7kzqIi9R2pPu456DhTbYDQw07fPGx N9T7Z/g0RKJU9+Aw3E3ysrnY7Ri84JjxdVulBgSsAR+aQ3oT+nEP/R2l+mqCVGd1 3i3Vp+ZeFaJvxQcdkx5d5Ti/1B4NwECMQeW5cM/j/SO4nrdrTAW2IaMkOOJe8DpN zNtF5AXSxlDfiaZ4i9faK1bZ0Y9s0yKEiPR7IhKYi98dhv4toRN8zc7iFUp5rKFw DZU8Vitin7lunSGKUYOkAAyi2IcJK9jA0A8qH5NJoQ9MjpbxaBuTSaMUpO1G32td NvYTaCefeuM6EyIm7CF2Gu4mGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYOMQD6 T4wET9bsp8WHTM/AsoQbMB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfGhnJngySfOnv34r1hv14GS5LsB7NIbxLX1UxY9tR7QxycIux2Tgj nwC4r4wBw65AVIqBhaGaYSAGEGeSxK5/KxbCS2GGIAdutXJPCc7UcvXAXqsmbA+R JPyAVChUJFdLSXnu27WKbCYoOgT+tQwknjHpjDp2Dz+O6cmmuP4DSPogcplywX4g mVb/OW2DCGMg4MTjvdhJKiv10uALBI2wyLjGAKYPqD89/tRRFCBPEUicWpry+ezR v/ASZ7eOhOWj1Cw8B8S4fCDFvGCT9B0y8JQaOEZNQGokvhJvBscdil04lQq6+IKE Q9PQUebDskmLAwAMs2gTJaX5s6CBnspX -----END CERTIFICATE-----Generated at Sun Aug 10 04:56:34 2025 by rpki-client