$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: ZbNOxT5NW7Nknvvzy34heO4TO2btp7Ntbu3S4/o8Y6M= Subject key identifier: CB:F6:35:C1:87:A7:A1:69:57:86:95:93:5C:83:2E:52:E6:B3:32:BA Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 09AB Signing time: Fri 08 Aug 2025 20:56:29 +0000 Manifest this update: Fri 08 Aug 2025 20:56:28 +0000 Manifest next update: Fri 15 Aug 2025 20:56:28 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: 5GU1JpuFPPuMhRkV96Lm8RTRESWaE0HfVtK23Ee03cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Aug 8 20:56:28 2025 GMT Not After : Aug 15 20:56:28 2025 GMT Subject: CN=6896647d-a3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:17:49:19:8c:cd:4f:68:f6:b5:4a:c0:c8: 3e:dd:1a:64:86:c3:86:27:0a:43:71:44:47:7f:df: 56:c6:4b:10:f5:2e:f2:b6:00:4d:81:ea:c7:5d:b6: 71:1b:a4:c0:ab:0c:dc:6c:20:cc:f9:b5:8c:3b:17: ce:2c:52:b2:d2:07:d3:5c:1f:9d:5e:1c:e2:8a:4b: 53:5e:4a:3b:00:8c:b7:d5:84:9b:df:46:69:b2:c8: db:50:dc:f3:e9:8d:f7:08:45:01:28:b4:09:7a:9f: 78:ce:62:dc:d7:15:bf:4c:b1:50:d8:d4:e1:ab:8f: 39:93:5c:d5:3d:d1:0d:78:81:87:2d:c3:9c:37:8d: 1a:af:87:11:69:57:b1:d6:de:67:39:ca:9a:43:7c: e1:1a:6b:00:21:dd:44:ce:77:13:40:e2:8e:b6:da: 2a:c5:b7:87:6b:22:b1:c0:7d:5f:b9:ea:80:17:3c: ba:4c:48:a6:76:cc:a3:07:e7:17:e5:9c:67:86:6d: 45:08:5d:a7:ef:f6:6c:64:84:61:d8:b8:9e:79:dc: 51:19:3a:fa:ec:28:be:03:50:95:d6:96:cf:17:ae: ab:e2:78:29:69:52:32:38:dd:18:ba:9f:71:b6:7f: bc:4d:7e:2c:31:a2:e8:95:a4:35:9e:ac:3b:37:85: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:35:C1:87:A7:A1:69:57:86:95:93:5C:83:2E:52:E6:B3:32:BA X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:3e:78:74:81:09:9a:45:08:45:7e:29:98:52:9f:26:65:e3: d9:d9:aa:2d:6e:8d:78:5c:b6:1b:86:7b:18:85:06:52:d3:4f: 5d:ee:a5:2a:4a:27:a6:b4:65:e6:ee:8d:23:23:78:54:01:8c: 23:c8:c8:75:ad:8b:9b:dd:0c:e7:4b:48:12:eb:c1:ec:0a:42: c2:6f:dd:6c:a8:77:5f:8e:95:b6:eb:a4:a7:dc:f8:2d:56:c0: 36:30:b5:ee:c8:d9:b2:f2:da:b4:29:9b:9c:63:0d:66:ab:14: 6f:e8:dd:02:61:8b:b2:14:4c:9d:b4:15:a9:f5:09:8a:fe:82: 42:78:03:e5:5d:a8:23:58:dc:b9:e4:f7:3f:2a:82:f8:17:4f: aa:c6:15:ae:8f:99:16:ee:1a:aa:24:50:8a:e7:8b:b0:ab:5b: 63:07:88:7d:63:fb:6d:36:75:17:94:54:f4:a1:c1:c2:ea:04: cd:34:7c:25:78:c1:d7:ac:d8:00:cf:95:65:00:81:ff:cf:86: d1:75:7b:d2:2c:d8:b0:dd:06:f0:78:e5:a6:d3:43:32:0e:29: ff:43:72:b3:cf:e0:e0:5a:e3:11:77:a9:84:1d:c5:13:29:f4: 51:0f:f2:36:e7:ab:18:f2:10:56:07:75:83:9f:4f:be:cf:fc: 51:5e:61:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwODA4MjA1NjI4WhcNMjUwODE1MjA1NjI4WjAYMRYwFAYD VQQDEw02ODk2NjQ3ZC1hM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6QXSRmMzU9o9rVKwMg+3RpkhsOGJwpDcURHf99WxksQ9S7ytgBNgerHXbZx G6TAqwzcbCDM+bWMOxfOLFKy0gfTXB+dXhziiktTXko7AIy31YSb30ZpssjbUNzz 6Y33CEUBKLQJep94zmLc1xW/TLFQ2NThq485k1zVPdENeIGHLcOcN40ar4cRaVex 1t5nOcqaQ3zhGmsAId1EzncTQOKOttoqxbeHayKxwH1fueqAFzy6TEimdsyjB+cX 5Zxnhm1FCF2n7/ZsZIRh2LieedxRGTr67Ci+A1CV1pbPF66r4ngpaVIyON0Yup9x tn+8TX4sMaLolaQ1nqw7N4WBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv2NcGH p6FpV4aVk1yDLlLmszK6MB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFPnh0gQmaRQhFfimYUp8mZePZ2aotbo14XLYbhnsYhQZS009d7qUq SiemtGXm7o0jI3hUAYwjyMh1rYub3QznS0gS68HsCkLCb91sqHdfjpW266Sn3Pgt VsA2MLXuyNmy8tq0KZucYw1mqxRv6N0CYYuyFEydtBWp9QmK/oJCeAPlXagjWNy5 5Pc/KoL4F0+qxhWuj5kW7hqqJFCK54uwq1tjB4h9Y/ttNnUXlFT0ocHC6gTNNHwl eMHXrNgAz5VlAIH/z4bRdXvSLNiw3QbweOWm00MyDin/Q3Kzz+DgWuMRd6mEHcUT KfRRD/I256sY8hBWB3WDn0++z/xRXmGG -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:29 2025 by rpki-client