$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: PIzRdYDGrnghOgZJNDI5z1oEJFMFRqO+HqjlJ8YCmYo= Subject key identifier: 71:08:A2:04:02:30:35:87:49:E9:8D:54:34:8E:18:DC:DB:45:B8:67 Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 34A8 Signing time: Mon 04 Aug 2025 15:15:22 +0000 Manifest this update: Mon 04 Aug 2025 15:15:21 +0000 Manifest next update: Mon 11 Aug 2025 15:15:21 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: T9TOD/Fb+7XQof1OdSA5SdnQMS77WLYs8bEIex+tKmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Aug 4 15:15:21 2025 GMT Not After : Aug 11 15:15:21 2025 GMT Subject: CN=6890ce8a-67a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:de:e6:9e:25:37:0f:ae:45:82:09:66:ea: 0a:4d:5c:24:5d:b7:fe:6d:e3:e9:90:5a:33:25:f3: 38:96:0e:fb:33:5b:b5:be:c8:90:65:bb:c5:19:52: 96:bc:41:59:43:14:22:cc:c3:11:e9:e5:87:73:f9: 47:e0:2b:17:7c:74:96:ee:6d:b6:d3:ae:9b:0e:9e: 78:4f:5b:cd:cd:e0:fd:ae:25:09:9e:35:d2:af:15: 36:37:b1:27:dd:f6:9a:22:33:0e:d2:4a:a8:9a:2a: 0a:4e:d0:d2:0f:79:70:01:62:e2:01:0a:33:ae:20: cb:bd:40:95:08:49:d5:55:81:fa:ca:d8:05:e0:a1: bb:f5:cf:be:0a:91:df:46:01:ff:d8:a8:82:88:77: c5:7b:be:62:dc:e0:a0:8a:a3:17:36:a1:08:3b:5d: 18:20:63:13:b8:73:4a:fc:7e:64:a6:e9:ad:a7:61: e0:9c:37:8b:d7:af:06:36:ab:d7:4b:c0:62:e3:4b: 71:5c:fd:f5:e5:66:cf:01:f5:26:0c:78:49:52:2d: 00:9c:99:37:be:30:af:32:4d:30:30:06:8d:0e:e3: a7:42:05:f1:58:35:ad:a0:a9:23:c8:47:cb:84:c0: 02:9c:04:2c:51:13:53:a9:b0:a4:0e:e7:90:09:67: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:08:A2:04:02:30:35:87:49:E9:8D:54:34:8E:18:DC:DB:45:B8:67 X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f7:5c:6d:17:31:34:a8:11:4e:a3:0a:e4:3f:c9:a0:dc:fb: 8b:a1:43:d4:71:bc:81:28:5d:33:e3:06:82:5a:1c:2e:8e:ad: 38:56:1b:87:f3:f3:45:b7:20:c7:2a:d6:02:1e:87:70:fd:62: 36:d8:87:e0:d0:fa:50:4e:5c:49:ba:40:4d:0b:84:28:91:c3: b3:48:c8:66:6b:8b:9e:79:9d:6d:57:4e:e6:af:ec:44:3d:fc: 63:68:5b:db:ab:84:92:93:47:a7:7c:79:11:6e:f2:00:a6:85: 58:9b:6e:c2:a3:e2:81:b0:c6:34:92:d9:e4:bc:49:a2:4f:72: 50:0c:49:c3:f7:8a:73:31:c3:ab:be:19:ca:d3:fc:a6:8a:99: e7:9f:00:03:39:07:53:20:8c:74:13:69:d5:d5:62:98:6e:22: 89:d4:ac:38:a4:f7:0f:bf:7c:52:6a:42:cb:69:9a:0c:40:e5: c3:95:d9:40:8b:c3:39:49:e7:f3:ca:dc:9a:e0:47:c5:8e:00: 0d:c0:64:65:68:cd:1f:4c:a6:85:5d:75:e2:53:11:6b:8c:55: bd:37:08:c8:99:e4:5f:be:0b:33:21:2f:ee:aa:03:4f:4d:ac: 5f:34:cd:08:83:45:f4:98:ab:4d:a3:f9:4b:50:bf:94:7c:1a: 9a:58:1a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUwODA0MTUxNTIxWhcNMjUwODExMTUxNTIxWjAYMRYwFAYD VQQDEw02ODkwY2U4YS02N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQfe5p4lNw+uRYIJZuoKTVwkXbf+bePpkFozJfM4lg77M1u1vsiQZbvFGVKW vEFZQxQizMMR6eWHc/lH4CsXfHSW7m22066bDp54T1vNzeD9riUJnjXSrxU2N7En 3faaIjMO0kqomioKTtDSD3lwAWLiAQozriDLvUCVCEnVVYH6ytgF4KG79c++CpHf RgH/2KiCiHfFe75i3OCgiqMXNqEIO10YIGMTuHNK/H5kpumtp2HgnDeL168GNqvX S8Bi40txXP315WbPAfUmDHhJUi0AnJk3vjCvMk0wMAaNDuOnQgXxWDWtoKkjyEfL hMACnAQsURNTqbCkDueQCWcEMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEIogQC MDWHSemNVDSOGNzbRbhnMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB591xtFzE0qBFOowrkP8mg3PuLoUPUcbyBKF0z4waCWhwujq04VhuH 8/NFtyDHKtYCHodw/WI22Ifg0PpQTlxJukBNC4QokcOzSMhma4ueeZ1tV07mr+xE PfxjaFvbq4SSk0enfHkRbvIApoVYm27Co+KBsMY0ktnkvEmiT3JQDEnD94pzMcOr vhnK0/ymipnnnwADOQdTIIx0E2nV1WKYbiKJ1Kw4pPcPv3xSakLLaZoMQOXDldlA i8M5Sefzytya4EfFjgANwGRlaM0fTKaFXXXiUxFrjFW9NwjImeRfvgszIS/uqgNP TaxfNM0Ig0X0mKtNo/lLUL+UfBqaWBpN -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:36 2025 by rpki-client