$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: SnmHGx8zMV0WDZPyO/6vJl+RYYvW0TDYD9ylvKI89Ow= Subject key identifier: E5:65:25:78:6D:FB:8C:87:D1:F4:8E:B7:E7:3B:FB:F3:09:D3:90:4C Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 34AF Signing time: Mon 04 Aug 2025 14:19:58 +0000 Manifest this update: Mon 04 Aug 2025 14:19:58 +0000 Manifest next update: Mon 11 Aug 2025 14:19:58 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: Mq1LKkiEVD7QcGn/Daof3cT0ivG/lG09dxIauwZcYbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Aug 4 14:19:58 2025 GMT Not After : Aug 11 14:19:58 2025 GMT Subject: CN=6890c18e-dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:0c:c3:dc:4c:af:5b:6f:75:25:e1:b3:87: c6:8b:bb:fc:11:d5:a1:79:7b:18:17:c2:d6:72:b5: e0:98:1d:cc:2f:70:6a:e8:f9:8e:0d:bc:83:cd:a2: f0:bf:52:94:0c:2e:a1:9d:97:c3:19:18:af:ff:93: 86:e1:53:01:ce:d9:9a:83:b7:94:ca:e6:08:39:d2: 00:98:82:4d:74:61:67:6b:97:ef:69:34:6a:1f:cf: 7b:e6:22:de:d5:b6:d6:ad:da:b4:34:d3:63:91:6c: dc:9c:25:7a:35:da:7c:4c:46:1b:17:67:c7:65:dc: a5:f5:63:98:09:72:c5:d8:83:15:1b:23:a1:50:51: d0:c8:4c:d2:4c:49:17:36:a2:0a:ab:a4:80:31:62: 89:5d:fb:6e:6b:50:21:99:cc:4f:9a:ce:1d:bd:0b: f1:b9:7b:f3:1f:5c:44:be:b9:13:99:95:aa:6b:10: 68:e6:7f:37:a6:4c:54:aa:a4:8d:bb:0a:f4:eb:f4: 90:0d:77:1f:71:8c:85:03:8b:7d:a8:2a:f7:3f:27: e5:66:d9:a3:5b:c2:fe:17:c2:ea:2d:e7:eb:f7:91: 7f:7e:18:51:b0:69:ef:28:67:18:d7:05:0f:8b:30: 3f:01:5d:08:b5:04:8f:ba:ee:3f:82:0a:cf:8e:5b: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:65:25:78:6D:FB:8C:87:D1:F4:8E:B7:E7:3B:FB:F3:09:D3:90:4C X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cb:0b:fa:d6:b9:f3:b9:6e:e5:e3:4c:17:63:c6:ee:8c:2b: 14:39:31:a1:d8:b5:53:93:91:cc:fc:58:60:7c:24:f5:b8:d0: d6:0b:89:c2:3b:79:4f:ee:9f:57:64:f5:b8:2d:79:3a:de:e4: cd:02:20:36:97:17:3a:31:b4:07:b6:d1:35:56:57:12:91:78: 42:46:43:a4:e7:9d:1b:94:5a:03:7f:ba:9b:4e:3a:95:bc:d5: 8a:63:fd:45:c9:1f:c3:92:1e:32:40:de:c9:e9:32:c1:e9:e7: 6c:9b:88:22:83:fe:52:66:bd:95:74:57:d1:7a:73:71:4c:e2: 3d:cf:f4:14:2e:29:88:9f:4e:48:c5:d2:f6:68:38:bd:32:97: 6a:ee:a3:b5:98:be:93:14:33:da:47:ce:e1:2c:c3:bb:56:b0: 05:85:3f:e9:3c:9d:cf:ea:dd:7f:82:6b:b7:fa:81:7f:e7:a9: 87:09:fe:0e:17:18:02:72:e5:61:24:65:80:03:77:0d:7b:f5: 8a:dc:2f:9c:b1:18:50:20:b0:1d:18:73:d6:ba:7e:ac:82:7f: 7d:f0:2c:99:99:e5:bc:0e:b6:ac:be:78:11:cb:c9:e5:85:a6: e6:31:35:bf:01:21:b2:0f:f7:78:cb:5b:f9:51:c8:79:0c:fd: 90:5b:6c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUwODA0MTQxOTU4WhcNMjUwODExMTQxOTU4WjAYMRYwFAYD VQQDEw02ODkwYzE4ZS1kYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+8Mw9xMr1tvdSXhs4fGi7v8EdWheXsYF8LWcrXgmB3ML3Bq6PmODbyDzaLw v1KUDC6hnZfDGRiv/5OG4VMBztmag7eUyuYIOdIAmIJNdGFna5fvaTRqH8975iLe 1bbWrdq0NNNjkWzcnCV6Ndp8TEYbF2fHZdyl9WOYCXLF2IMVGyOhUFHQyEzSTEkX NqIKq6SAMWKJXftua1AhmcxPms4dvQvxuXvzH1xEvrkTmZWqaxBo5n83pkxUqqSN uwr06/SQDXcfcYyFA4t9qCr3PyflZtmjW8L+F8LqLefr95F/fhhRsGnvKGcY1wUP izA/AV0ItQSPuu4/ggrPjlu1mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVlJXht +4yH0fSOt+c7+/MJ05BMMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdywv61rnzuW7l40wXY8bujCsUOTGh2LVTk5HM/FhgfCT1uNDWC4nC O3lP7p9XZPW4LXk63uTNAiA2lxc6MbQHttE1VlcSkXhCRkOk550blFoDf7qbTjqV vNWKY/1FyR/Dkh4yQN7J6TLB6edsm4gig/5SZr2VdFfRenNxTOI9z/QULimIn05I xdL2aDi9Mpdq7qO1mL6TFDPaR87hLMO7VrAFhT/pPJ3P6t1/gmu3+oF/56mHCf4O FxgCcuVhJGWAA3cNe/WK3C+csRhQILAdGHPWun6sgn998CyZmeW8DrasvngRy8nl habmMTW/ASGyD/d4y1v5Uch5DP2QW2yO -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:42 2025 by rpki-client