$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json) Hash identifier: MQJT5wY71T/OS7q2sHMDP6A7SPp3R9rzPmT6oBYEghk= Subject key identifier: 50:06:2E:D4:9D:98:9E:5F:91:BF:D0:50:56:FB:84:EB:AC:EE:A4:D0 Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft Manifest number: B8 Signing time: Mon 11 Aug 2025 06:09:28 +0000 Manifest this update: Mon 11 Aug 2025 06:09:28 +0000 Manifest next update: Mon 18 Aug 2025 06:09:28 +0000 Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: kc2omIHNi3aTU/ILx0gmb0MaJNKnQmN8YU8/PDdK1hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Validity Not Before: Aug 11 06:09:28 2025 GMT Not After : Aug 18 06:09:28 2025 GMT Subject: CN=68998918-0b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:c0:90:35:0b:94:6e:03:af:58:bf:ea:cf: 59:ac:41:13:99:5e:19:85:8d:05:27:84:97:a7:96: 84:bc:b4:d2:bc:49:c5:3c:ba:da:d2:48:83:f5:78: cb:10:f3:49:a9:e4:fd:2e:7b:b5:f7:04:0f:38:25: cb:6e:25:80:37:dc:e8:27:35:41:e5:53:74:14:39: d3:f9:d0:b4:e2:78:ad:1e:67:26:46:ac:eb:ba:b1: d5:ad:cc:5d:75:3b:1c:2c:fe:7f:11:8e:5d:84:24: 7b:57:1e:bd:b4:e2:e6:61:63:1c:55:78:46:81:60: 62:05:08:ec:75:e6:a2:a8:27:41:8f:2e:dd:6c:9f: 0b:1e:e2:59:a1:3c:ab:f2:47:71:ec:bd:59:5a:e2: fb:64:29:c6:1f:f2:a5:b2:53:40:39:a9:fd:c3:69: 2f:9e:4b:bc:94:e6:43:8b:6b:e7:04:fe:99:f3:a3: d8:6c:8b:64:3c:91:b7:d4:68:75:5e:c1:3a:ed:17: 15:39:85:0d:bd:de:7b:17:b1:38:df:cf:f9:59:8b: 3e:fb:cc:4f:d6:75:6e:52:42:08:65:84:c8:81:ee: 70:2c:ea:d5:b5:a9:be:fe:10:40:ba:65:d8:9c:18: 53:ff:9a:7e:ef:76:4a:a5:e6:73:0f:cb:1e:3b:8a: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:06:2E:D4:9D:98:9E:5F:91:BF:D0:50:56:FB:84:EB:AC:EE:A4:D0 X509v3 Authority Key Identifier: keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3f:24:ed:40:e6:15:01:f9:fa:68:70:2f:13:b1:8d:f6:76: da:0c:31:36:16:fa:d1:4b:6a:a0:e3:cf:df:e6:d5:f3:35:8b: 09:b7:59:f4:a4:68:0d:1b:1d:15:ec:3f:37:42:c1:4e:95:b7: 73:1e:ed:b0:e6:eb:b4:e8:1b:07:20:ff:1e:05:eb:04:c5:fb: 7a:20:11:bb:96:ad:95:9f:f3:24:b0:f4:86:34:41:a5:2b:f6: 26:f9:ff:76:6b:a9:c1:1f:8e:31:ca:83:38:11:37:7f:57:e9: 98:b5:0c:b1:a3:d1:39:66:e9:8e:f4:46:63:6e:a8:21:66:96: 52:d3:70:0d:49:e1:f1:d8:1b:f9:4e:d3:1e:a3:40:fe:d7:b2: 5d:85:35:c0:de:d4:0f:58:df:6f:80:04:98:aa:1d:c9:44:e1: 33:77:95:df:51:11:01:af:ba:3d:ff:a9:88:47:8f:a9:81:d7: 72:a1:c5:c3:ac:16:f8:af:40:58:ea:a3:c5:14:13:54:9c:6d: ba:8b:66:17:f2:2e:92:a9:07:6f:5e:56:a4:44:b6:1e:ff:32: 72:0d:b1:e3:f0:6d:1c:e4:27:be:d0:19:ec:a0:7a:fe:56:b9: 65:aa:ce:4d:4d:28:01:b2:e9:48:ec:47:22:54:9e:4a:09:d2: cd:cb:db:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2 MUYwODA0MUUwHhcNMjUwODExMDYwOTI4WhcNMjUwODE4MDYwOTI4WjAYMRYwFAYD VQQDEw02ODk5ODkxOC0wYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplbAkDULlG4Dr1i/6s9ZrEETmV4ZhY0FJ4SXp5aEvLTSvEnFPLra0kiD9XjL EPNJqeT9Lnu19wQPOCXLbiWAN9zoJzVB5VN0FDnT+dC04nitHmcmRqzrurHVrcxd dTscLP5/EY5dhCR7Vx69tOLmYWMcVXhGgWBiBQjsdeaiqCdBjy7dbJ8LHuJZoTyr 8kdx7L1ZWuL7ZCnGH/KlslNAOan9w2kvnku8lOZDi2vnBP6Z86PYbItkPJG31Gh1 XsE67RcVOYUNvd57F7E438/5WYs++8xP1nVuUkIIZYTIge5wLOrVtam+/hBAumXY nBhT/5p+73ZKpeZzD8seO4rPbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAGLtSd mJ5fkb/QUFb7hOus7qTQMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4 S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgPyTtQOYVAfn6aHAvE7GN9nbaDDE2FvrRS2qg48/f5tXzNYsJt1n0 pGgNGx0V7D83QsFOlbdzHu2w5uu06BsHIP8eBesExft6IBG7lq2Vn/MksPSGNEGl K/Ym+f92a6nBH44xyoM4ETd/V+mYtQyxo9E5ZumO9EZjbqghZpZS03ANSeHx2Bv5 TtMeo0D+17JdhTXA3tQPWN9vgASYqh3JROEzd5XfUREBr7o9/6mIR4+pgddyocXD rBb4r0BY6qPFFBNUnG26i2YX8i6SqQdvXlakRLYe/zJyDbHj8G0c5Ce+0BnsoHr+ Vrllqs5NTSgBsulI7EciVJ5KCdLNy9sa -----END CERTIFICATE-----Generated at Wed Aug 13 05:36:07 2025 by rpki-client