$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: f8YdP34liAfZE6puDUrrzKa9FP8TspZMJCWKeg6eCCs= Subject key identifier: F9:ED:8C:02:A0:B7:CD:2A:95:45:43:95:8C:B2:14:80:6A:F1:8B:DB Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 5E Signing time: Thu 07 Aug 2025 07:42:23 +0000 Manifest this update: Thu 07 Aug 2025 07:42:22 +0000 Manifest next update: Thu 14 Aug 2025 07:42:22 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: 4irX09AB9EfU7HcJnK4DK8FJkgEr87fivP3+DCX2poE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Aug 7 07:42:22 2025 GMT Not After : Aug 14 07:42:22 2025 GMT Subject: CN=689458de-3b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:0c:81:e7:ee:b6:3f:d1:26:f5:fe:34:f1: 9d:64:9d:05:ae:35:7e:31:3c:7b:cf:81:ce:9c:ab: e1:27:48:d2:44:92:df:82:98:eb:f3:71:e1:c1:d2: 0c:e3:98:93:b4:72:6a:f1:40:ee:78:3b:ca:22:2a: fe:3c:80:b6:e7:54:7a:72:97:9e:61:0f:7a:ad:f2: 77:df:cc:7a:07:8f:13:b4:a0:e9:94:1e:5f:83:1b: b5:38:20:44:df:64:78:c7:71:93:37:4a:98:d1:2f: ed:c4:c5:05:0c:db:32:58:60:5b:f1:e2:c9:c0:54: 20:bb:1e:e0:97:4f:35:30:93:ae:67:88:c2:38:2f: 44:c2:c8:4b:bb:7a:6d:7c:b8:25:90:00:87:2c:30: 27:f5:4f:5a:04:3b:7d:cf:16:81:ec:7f:a3:77:cf: c4:fe:ad:70:cc:14:41:e8:dc:69:17:b1:c9:d1:27: 72:77:d6:c0:4a:22:17:94:05:11:ea:21:12:55:0c: 8c:52:25:85:d0:a5:8d:74:90:8d:af:ad:d8:c8:ed: 20:84:49:6f:45:46:30:26:b9:98:ea:25:a3:f5:a3: ef:26:e0:1d:32:84:09:9d:60:b1:d0:3d:35:3d:19: 7f:37:7f:f4:ac:fa:70:ab:8d:cf:21:41:87:d8:28: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:ED:8C:02:A0:B7:CD:2A:95:45:43:95:8C:B2:14:80:6A:F1:8B:DB X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0e:f9:5f:4d:27:f2:e0:a7:ff:5b:16:44:ec:37:df:0d:93: e7:fd:97:85:1c:f3:f4:cf:2c:3e:c6:14:a9:8e:d8:87:b1:fa: 8b:82:e8:74:b5:90:b1:52:a1:60:69:fd:4b:d6:9c:26:11:7b: d6:2d:a9:fd:61:81:81:59:05:cb:00:e6:a3:1c:f3:39:5d:4b: ab:40:c1:3b:5e:e8:15:5d:11:94:5b:65:52:8f:f8:a7:1d:b1: a7:82:59:9b:e7:24:94:ec:67:e9:20:e7:4e:21:26:9e:1c:20: 1c:a7:2f:c3:ec:47:26:93:2d:3c:a4:22:53:33:ae:de:7a:9f: 7a:88:1a:f7:bf:b7:2d:b8:94:a8:9f:d4:a6:e5:00:d6:83:ae: 42:ab:d8:9e:89:9c:79:40:43:9d:ec:8a:17:ab:7b:65:fd:7c: 55:e9:4c:40:7d:aa:bf:08:7c:f6:05:69:a8:3e:b8:b5:06:0d: 7d:b2:b0:5a:5f:41:a8:12:a0:97:f1:68:26:4f:1e:85:b2:89: 6a:61:6e:c2:7e:4b:11:4a:03:45:5e:3a:c9:0c:9b:d6:fe:ee: d0:f6:3d:f6:80:12:03:fa:af:35:ca:ae:66:3e:25:b3:5e:e5: ab:44:f8:10:28:39:bb:8f:d9:0f:0c:57:20:89:60:a9:c1:d1: 43:b5:ab:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA4MDcwNzQyMjJaFw0yNTA4MTQwNzQyMjJaMBgxFjAUBgNV BAMTDTY4OTQ1OGRlLTNiNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgDQyB5+62P9Em9f408Z1knQWuNX4xPHvPgc6cq+EnSNJEkt+CmOvzceHB0gzj mJO0cmrxQO54O8oiKv48gLbnVHpyl55hD3qt8nffzHoHjxO0oOmUHl+DG7U4IETf ZHjHcZM3SpjRL+3ExQUM2zJYYFvx4snAVCC7HuCXTzUwk65niMI4L0TCyEu7em18 uCWQAIcsMCf1T1oEO33PFoHsf6N3z8T+rXDMFEHo3GkXscnRJ3J31sBKIheUBRHq IRJVDIxSJYXQpY10kI2vrdjI7SCESW9FRjAmuZjqJaP1o+8m4B0yhAmdYLHQPTU9 GX83f/Ss+nCrjc8hQYfYKO4ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+e2MAqC3 zSqVRUOVjLIUgGrxi9swHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABEO+V9NJ/Lgp/9bFkTsN98Nk+f9l4Uc8/TPLD7GFKmO2Iex+ouC6HS1 kLFSoWBp/UvWnCYRe9Ytqf1hgYFZBcsA5qMc8zldS6tAwTte6BVdEZRbZVKP+Kcd saeCWZvnJJTsZ+kg504hJp4cIBynL8PsRyaTLTykIlMzrt56n3qIGve/ty24lKif 1KblANaDrkKr2J6JnHlAQ53sihere2X9fFXpTEB9qr8IfPYFaag+uLUGDX2ysFpf QagSoJfxaCZPHoWyiWphbsJ+SxFKA0VeOskMm9b+7tD2PfaAEgP6rzXKrmY+JbNe 5atE+BAoObuP2Q8MVyCJYKnB0UO1q3c= -----END CERTIFICATE-----Generated at Fri Aug 8 13:09:57 2025 by rpki-client