$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft File: CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft (raw, json) Hash identifier: fOjSpWsOTUqMFoHFPu7BTYwoJFb+u4HLt9yE0KYGM5g= Subject key identifier: B6:90:81:24:E7:3E:1B:B8:D7:BE:73:24:F5:13:3A:B0:EC:E9:D3:62 Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD Certificate issuer: /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft Manifest number: 06BF Signing time: Fri 08 Aug 2025 22:28:49 +0000 Manifest this update: Fri 08 Aug 2025 22:28:49 +0000 Manifest next update: Fri 15 Aug 2025 22:28:49 +0000 Files and hashes: 1: CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl (hash: tWxAe7wmqkr/9OB4jvvBzbq6KviVwbEmFtmue6Jq1Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD Validity Not Before: Aug 8 22:28:49 2025 GMT Not After : Aug 15 22:28:49 2025 GMT Subject: CN=68967a21-6c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:6e:bc:71:d9:ed:9d:77:66:1f:f8:18:d3: ab:26:97:6f:cd:c6:81:d7:8d:ad:f6:67:40:a5:e6: dc:1e:c0:08:0f:a2:b0:ee:4e:66:60:1a:10:d8:e1: f2:11:d9:de:e1:c6:60:93:5e:a3:3b:42:5f:a8:78: 15:a9:ea:2c:19:92:f9:9a:db:63:0b:a1:0f:23:a8: 40:48:2f:f2:61:02:f8:b0:cc:82:e3:df:e9:c5:16: 38:6e:de:ec:77:6c:d8:3c:02:29:e2:37:e3:f8:80: 3b:26:bc:48:19:f3:7a:10:d2:0c:ff:31:ca:c6:17: a1:0c:ea:50:b2:b0:b3:32:b2:bc:6b:02:2c:79:61: f6:32:5e:99:0b:33:81:46:47:56:c5:55:1c:8d:9d: c7:e5:40:82:02:42:75:c5:87:33:6b:43:aa:d7:b6: 54:97:a8:72:42:37:44:64:13:e7:74:3b:8d:6b:aa: 74:4d:2f:2d:db:39:be:e3:f3:f9:74:33:e1:1e:e2: 9a:b6:51:1e:53:c3:a2:73:a6:bf:0b:54:f4:dc:a7: 82:59:10:09:55:22:e6:6b:42:27:f2:db:1b:8d:ea: 29:70:72:96:56:f2:80:ef:bb:98:98:e1:52:1b:5d: 8e:b0:e9:ad:18:e1:da:46:4f:a7:1f:b0:cf:cd:cf: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:81:24:E7:3E:1B:B8:D7:BE:73:24:F5:13:3A:B0:EC:E9:D3:62 X509v3 Authority Key Identifier: keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:22:a8:e2:63:11:1a:6a:c7:bc:66:15:04:e2:b1:7f:28:a0: 26:78:2f:03:01:dd:af:02:6f:f1:89:3f:d8:45:b8:50:6f:ac: 62:f1:d8:f4:b9:76:ce:0a:4e:3e:43:fd:d7:98:6b:95:77:4a: 90:1b:2b:75:5e:d4:99:84:2b:35:36:c2:5a:aa:52:33:f9:68: b2:f1:52:7d:6e:e3:69:d3:fe:b6:ee:56:a5:c5:e9:a3:90:bd: e3:37:b1:b0:7a:be:91:1f:78:6d:68:9b:8c:b8:15:34:8d:76: 38:83:5a:78:5a:84:fe:b7:11:a5:77:e7:99:0c:8f:80:33:89: 97:69:98:d0:ca:9c:96:b6:76:f7:c2:f2:8e:70:41:ad:c5:4c: f8:4c:aa:73:7f:cc:d4:8f:59:5b:84:ea:23:8f:1c:70:b4:6c: b8:36:b2:16:bd:a9:56:dd:c8:df:49:2e:3c:52:3b:b6:90:95: 0e:96:d4:32:f0:67:2f:52:be:3d:a9:0b:e7:d6:9c:09:bc:ae: 36:35:66:c9:1a:ca:22:a6:5c:33:2b:ce:55:ea:49:83:5a:ff: 4b:ef:55:18:ee:b2:ad:53:28:6d:08:2a:8a:8d:a5:b1:8d:56: c7:a0:2e:67:86:d6:7b:b5:19:b1:76:e7:3a:16:7b:6e:2d:3a: 98:0a:d9:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM3RUExMTAvBgNVBAUTKDA5MTFFOTlBQURGNjY0RjAzOTkyOUNBQkJCNDg3NEEz QTE2MUNBQUQwHhcNMjUwODA4MjIyODQ5WhcNMjUwODE1MjIyODQ5WjAYMRYwFAYD VQQDEw02ODk2N2EyMS02YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/RuvHHZ7Z13Zh/4GNOrJpdvzcaB142t9mdApebcHsAID6Kw7k5mYBoQ2OHy Edne4cZgk16jO0JfqHgVqeosGZL5mttjC6EPI6hASC/yYQL4sMyC49/pxRY4bt7s d2zYPAIp4jfj+IA7JrxIGfN6ENIM/zHKxhehDOpQsrCzMrK8awIseWH2Ml6ZCzOB RkdWxVUcjZ3H5UCCAkJ1xYcza0Oq17ZUl6hyQjdEZBPndDuNa6p0TS8t2zm+4/P5 dDPhHuKatlEeU8Oic6a/C1T03KeCWRAJVSLma0In8tsbjeopcHKWVvKA77uYmOFS G12OsOmtGOHaRk+nH7DPzc/1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaQgSTn Phu4175zJPUTOrDs6dNiMB8GA1UdIwQYMBaAFAkR6Zqt9mTwOZKcq7tIdKOhYcqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzdFQS8xRTk2NTYzMDZB NTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQQTVrcHlydTBoMG82Rmh5 cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NSSHBtcTMyWlBBNWtweXJ1MGgwbzZGaHlxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzdFQS8xRTk2NTYzMDZBNTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQ QTVrcHlydTBoMG82Rmh5cTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEIqjiYxEaase8ZhUE4rF/KKAmeC8DAd2vAm/xiT/YRbhQb6xi8dj0 uXbOCk4+Q/3XmGuVd0qQGyt1XtSZhCs1NsJaqlIz+Wiy8VJ9buNp0/627lalxemj kL3jN7Gwer6RH3htaJuMuBU0jXY4g1p4WoT+txGld+eZDI+AM4mXaZjQypyWtnb3 wvKOcEGtxUz4TKpzf8zUj1lbhOojjxxwtGy4NrIWvalW3cjfSS48Uju2kJUOltQy 8GcvUr49qQvn1pwJvK42NWbJGsoiplwzK85V6kmDWv9L71UY7rKtUyhtCCqKjaWx jVbHoC5nhtZ7tRmxduc6FntuLTqYCtnI -----END CERTIFICATE-----Generated at Sun Aug 10 05:43:25 2025 by rpki-client