$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: p4e+7+laKD6dVNjkUD32InsRKawS4yY+EMeqxBYTn6Y= Subject key identifier: A5:DE:86:89:7C:B5:DC:84:5E:86:9E:76:8B:67:C5:DC:70:92:52:37 Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 511F Signing time: Fri 08 Aug 2025 15:19:00 +0000 Manifest this update: Fri 08 Aug 2025 15:19:00 +0000 Manifest next update: Fri 15 Aug 2025 15:19:00 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: M9X7ZW0eJj092f+oG+V0xTMAE0U5z2oTf8vodYZvCSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Aug 8 15:19:00 2025 GMT Not After : Aug 15 15:19:00 2025 GMT Subject: CN=68961564-1af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:03:5d:6c:12:d8:ef:f1:06:64:5f:35:a4: 82:2c:7b:fb:50:52:ce:84:8e:4d:84:cc:aa:59:49: 26:18:c4:5f:90:1e:04:76:1d:f7:8e:ef:53:34:01: c7:a0:2a:3c:5f:43:75:a4:7a:5b:41:05:8c:68:8a: f4:1d:26:e1:4d:70:94:6e:06:ee:15:92:4b:5c:aa: 63:c5:10:47:5a:9c:95:fb:4f:5d:aa:da:37:68:43: 9e:02:d6:e2:e9:f2:cb:48:42:1b:b7:5f:85:a2:85: e7:48:84:e6:60:a3:95:75:4c:a6:9a:47:b0:17:21: df:82:2a:a9:99:dd:44:ab:d4:d6:71:0c:f8:d0:ea: d1:7b:0d:2d:9d:0b:5c:15:6e:16:66:5b:1e:15:49: 11:9e:a0:35:85:37:a3:19:66:b6:10:e3:47:18:88: 95:a8:02:2e:b6:7e:89:2e:29:54:90:f1:90:2d:5d: f8:ea:a1:0b:89:8f:a8:3a:10:22:d1:c9:91:fe:99: ba:bb:1f:b4:8a:0f:3d:dd:a9:3d:3f:42:e2:c7:21: 8a:7e:7c:64:a8:b4:97:5c:b0:46:f0:42:fa:97:b2: 8a:54:ee:98:11:30:aa:3a:70:35:f9:da:43:18:ec: b6:f6:c2:7a:01:6a:f4:75:58:1d:35:5e:a5:5c:3c: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:86:89:7C:B5:DC:84:5E:86:9E:76:8B:67:C5:DC:70:92:52:37 X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:4b:b1:cc:04:9b:b9:b7:21:39:6a:d9:1b:0b:26:95:6a: 59:f2:34:47:e3:18:0c:08:b1:df:dd:4b:df:b9:35:e7:6c:6c: a4:77:eb:11:be:49:9e:62:75:0c:e2:0e:f6:9b:a4:16:b7:19: 44:8e:ac:73:45:2b:51:f0:6f:d4:be:02:7f:71:b5:8f:b9:06: 18:ed:d0:4c:0c:d5:a2:df:a4:1e:fa:52:a5:99:14:a9:e4:e0: 86:5b:17:3e:c3:80:6d:42:37:85:37:f2:49:73:64:45:d0:60: 7a:b0:6a:1a:72:dc:8d:fc:c2:13:47:e7:51:bb:71:f8:6e:92: c1:44:5b:0e:79:c4:df:71:6c:a2:e6:0e:e8:3e:12:15:5a:ee: 77:3f:dc:79:54:d5:a4:e2:6a:c2:de:cc:76:07:8c:5c:e4:6b: 94:41:3f:cf:87:0e:04:e7:c2:72:da:02:9b:3c:b3:b9:6b:a8: 9d:3d:af:94:9e:81:29:9b:1c:2a:af:de:18:e4:df:a1:84:e4: b6:3a:c8:44:32:af:ac:47:b4:22:f1:01:b7:9f:fd:88:63:c3: 17:54:3e:c5:ca:75:89:e1:c0:37:54:3d:69:6b:76:dc:0f:91: 95:f8:2f:ec:24:bb:aa:b9:ed:6d:e7:03:cf:4f:5f:ad:98:55: 98:b9:ba:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUwODA4MTUxOTAwWhcNMjUwODE1MTUxOTAwWjAYMRYwFAYD VQQDEw02ODk2MTU2NC0xYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu4DXWwS2O/xBmRfNaSCLHv7UFLOhI5NhMyqWUkmGMRfkB4Edh33ju9TNAHH oCo8X0N1pHpbQQWMaIr0HSbhTXCUbgbuFZJLXKpjxRBHWpyV+09dqto3aEOeAtbi 6fLLSEIbt1+FooXnSITmYKOVdUymmkewFyHfgiqpmd1Eq9TWcQz40OrRew0tnQtc FW4WZlseFUkRnqA1hTejGWa2EONHGIiVqAIutn6JLilUkPGQLV346qELiY+oOhAi 0cmR/pm6ux+0ig893ak9P0LixyGKfnxkqLSXXLBG8EL6l7KKVO6YETCqOnA1+dpD GOy29sJ6AWr0dVgdNV6lXDzmkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXehol8 tdyEXoaedotnxdxwklI3MB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWw0uxzASbubchOWrZGwsmlWpZ8jRH4xgMCLHf3UvfuTXnbGykd+sR vkmeYnUM4g72m6QWtxlEjqxzRStR8G/UvgJ/cbWPuQYY7dBMDNWi36Qe+lKlmRSp 5OCGWxc+w4BtQjeFN/JJc2RF0GB6sGoactyN/MITR+dRu3H4bpLBRFsOecTfcWyi 5g7oPhIVWu53P9x5VNWk4mrC3sx2B4xc5GuUQT/Phw4E58Jy2gKbPLO5a6idPa+U noEpmxwqr94Y5N+hhOS2OshEMq+sR7Qi8QG3n/2IY8MXVD7FynWJ4cA3VD1pa3bc D5GV+C/sJLuque1t5wPPT1+tmFWYubqp -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:19 2025 by rpki-client