$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: pFuEqIlQUgpMD7XORoy/fOWrotNU1ET33wyVmWK7GwI= Subject key identifier: 79:DB:4A:A8:D6:62:95:EC:D1:E3:C4:0B:0C:BE:D3:77:51:DC:68:B3 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 2E Signing time: Mon 11 Aug 2025 07:57:27 +0000 Manifest this update: Mon 11 Aug 2025 07:57:27 +0000 Manifest next update: Mon 18 Aug 2025 07:57:27 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: VG9dlFNCd+AFVdut3TDBeBaM4whbZj+sjEOIpvE9Rq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Aug 11 07:57:27 2025 GMT Not After : Aug 18 07:57:27 2025 GMT Subject: CN=6899a267-a299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:3b:a7:50:cb:3d:c3:3c:f5:e5:32:3a:c5: 04:11:21:e2:59:3f:56:35:3f:6e:f7:c9:c9:2f:8e: b3:6a:a9:81:8f:dd:78:3a:4a:53:bb:30:46:12:ca: e0:58:99:b2:1a:49:ee:88:75:88:58:18:2d:b9:90: 22:81:9b:2d:11:1e:a4:5a:04:52:25:2e:a2:83:42: ed:ca:e2:f3:2f:7f:13:18:5e:a9:91:be:15:dc:11: 75:7d:13:41:5d:38:76:95:f3:49:a1:42:47:81:d0: 59:bc:76:ee:86:85:84:d0:ce:f9:05:b7:2d:67:ae: 7e:50:05:d9:ed:2a:5b:86:5a:d6:b9:44:df:81:46: e6:37:45:8d:56:54:a7:70:2f:1e:9a:60:51:7b:a7: 1a:30:d4:2a:8d:de:05:54:f4:e7:e4:3f:cd:4e:71: e8:98:ff:f5:22:1c:65:e8:43:dc:c3:76:b3:2f:2f: cd:97:68:2f:4e:4b:18:b5:98:7f:ce:b1:62:b9:c9: f3:89:4b:dc:a5:53:8a:01:de:44:68:26:ca:55:92: a1:25:f8:f4:9e:7f:72:18:c9:6d:3b:fd:63:b4:c0: 68:a6:39:20:8a:38:61:67:68:65:50:5d:68:a7:69: 21:b5:72:55:71:ac:bb:02:f3:3e:b0:5a:dd:73:e0: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DB:4A:A8:D6:62:95:EC:D1:E3:C4:0B:0C:BE:D3:77:51:DC:68:B3 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1e:5f:69:a8:19:ae:94:b1:93:3c:b9:6c:13:58:5e:86:53: 40:2e:b9:82:44:fe:ca:fb:02:1d:ed:e5:57:78:ff:82:71:35: 2e:0f:d5:14:1f:cf:8e:c4:86:c3:68:05:b3:94:c5:3d:c1:a8: f0:f8:52:ae:92:e4:6a:9a:20:f1:b6:89:8b:1b:32:20:52:fd: 2f:0a:4a:b2:f6:66:a8:a5:ac:c9:84:85:eb:81:14:47:6d:95: 77:93:0c:ed:5d:66:84:cc:f5:f1:16:8b:33:fc:97:41:4a:db: 62:66:dd:3f:d9:df:67:37:c9:ed:a7:b0:01:36:c3:d3:04:36: 9c:d0:a9:c3:f1:ea:9f:a1:0d:e0:51:b5:83:3f:9d:8d:c0:05: 95:e3:1f:da:4b:df:91:57:e9:66:77:8a:ed:ce:b2:7a:a4:dd: e6:60:ab:aa:0c:b6:d3:42:26:13:84:c8:34:24:7b:33:88:7c: e4:df:ce:31:bc:2d:32:51:4e:22:67:9e:22:70:9b:ae:7c:ae: af:1b:63:12:70:20:f0:d7:25:f4:2e:e5:a0:ca:b0:7c:d6:b2: b8:04:16:12:f9:ca:27:46:d1:09:9d:c4:7f:42:85:85:81:4f: 71:6e:94:42:d0:37:99:f7:25:9b:59:a2:13:92:1c:61:81:89: 2c:2d:c2:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA4MTEwNzU3MjdaFw0yNTA4MTgwNzU3MjdaMBgxFjAUBgNV BAMTDTY4OTlhMjY3LWEyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl7junUMs9wzz15TI6xQQRIeJZP1Y1P273yckvjrNqqYGP3Xg6SlO7MEYSyuBY mbIaSe6IdYhYGC25kCKBmy0RHqRaBFIlLqKDQu3K4vMvfxMYXqmRvhXcEXV9E0Fd OHaV80mhQkeB0Fm8du6GhYTQzvkFty1nrn5QBdntKluGWta5RN+BRuY3RY1WVKdw Lx6aYFF7pxow1CqN3gVU9OfkP81OceiY//UiHGXoQ9zDdrMvL82XaC9OSxi1mH/O sWK5yfOJS9ylU4oB3kRoJspVkqEl+PSef3IYyW07/WO0wGimOSCKOGFnaGVQXWin aSG1clVxrLsC8z6wWt1z4ETdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUedtKqNZi lezR48QLDL7Td1HcaLMwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEIeX2moGa6UsZM8uWwTWF6GU0AuuYJE/sr7Ah3t5Vd4/4JxNS4P1RQf z47EhsNoBbOUxT3BqPD4Uq6S5GqaIPG2iYsbMiBS/S8KSrL2ZqilrMmEheuBFEdt lXeTDO1dZoTM9fEWizP8l0FK22Jm3T/Z32c3ye2nsAE2w9MENpzQqcPx6p+hDeBR tYM/nY3ABZXjH9pL35FX6WZ3iu3Osnqk3eZgq6oMttNCJhOEyDQkezOIfOTfzjG8 LTJRTiJnniJwm658rq8bYxJwIPDXJfQu5aDKsHzWsrgEFhL5yidG0QmdxH9ChYWB T3FulELQN5n3JZtZohOSHGGBiSwtwvY= -----END CERTIFICATE-----Generated at Tue Aug 12 13:52:33 2025 by rpki-client