$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: Rw/mZatkRJ55Zi/CvaISx4iDXe2Uge7er4uRm1gCkB4= Subject key identifier: 33:6A:AC:73:6B:6A:DC:AD:CA:AF:B6:EF:E3:A7:09:4E:20:79:B3:76 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 6D Signing time: Tue 05 Aug 2025 07:28:47 +0000 Manifest this update: Tue 05 Aug 2025 07:28:47 +0000 Manifest next update: Tue 12 Aug 2025 07:28:47 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: 9Ib2RSLEO32+WsNiwWvrC7i1J1sXPwgck+GV1++z4lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Aug 5 07:28:47 2025 GMT Not After : Aug 12 07:28:47 2025 GMT Subject: CN=6891b2af-7312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:55:23:c5:16:6b:11:81:e5:a9:9b:84:a6: ae:dc:3f:2a:6a:13:91:f8:ec:83:17:24:a6:02:f6: d7:43:cc:02:40:76:0c:86:68:84:9b:a6:34:c8:b3: 07:df:42:9f:70:e9:67:10:c3:ad:70:a8:84:e1:1f: 49:76:c8:40:c2:4e:32:f3:85:67:f4:16:32:a3:da: 9a:df:99:1f:ed:73:08:ca:20:f6:35:9b:0c:4d:8a: 54:77:74:89:fa:df:a3:8c:11:c2:12:86:db:07:6b: 2e:bf:3c:06:df:27:36:28:bc:c1:61:97:89:79:9b: 05:3a:d8:91:80:98:bc:ed:c9:10:e5:c1:3e:64:20: be:5f:7c:86:11:a0:ad:8e:17:62:73:01:d1:3e:5a: 9a:28:ac:03:02:9a:bc:a1:61:cb:db:7b:0f:8b:ae: 1b:53:14:38:53:6f:71:66:b4:ee:77:26:06:bc:6a: e1:a5:83:70:ab:a9:f7:52:c5:60:82:b5:41:2d:bf: 96:35:28:bd:13:5d:67:25:aa:5c:e5:4c:ec:27:53: 61:90:43:df:36:29:e6:05:f2:79:37:71:38:c0:21: 37:7e:3e:6a:20:4e:b1:b2:3e:b3:3e:dd:4a:dd:7f: 29:9a:3a:d6:2a:0d:a5:93:c1:cd:41:b3:8d:7d:7e: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6A:AC:73:6B:6A:DC:AD:CA:AF:B6:EF:E3:A7:09:4E:20:79:B3:76 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:27:14:47:72:98:40:3f:f5:eb:f9:be:d1:6d:33:a5:ea:fc: 11:a7:10:ed:b1:e7:4b:c4:ac:51:a3:43:c7:4e:19:fb:78:7b: f7:35:c9:75:bb:7b:97:81:df:83:1e:30:30:56:9e:72:23:a8: 2c:b2:4d:48:c7:77:f4:3f:eb:f4:23:bb:18:9b:37:1d:eb:b0: e6:d9:70:96:74:3c:6b:44:76:4d:5f:e4:36:85:42:72:8e:0f: 22:38:4f:36:0a:d1:99:58:5e:46:bd:02:6b:f7:fe:2e:4f:3f: a6:c0:6f:67:ac:62:ac:bb:79:7f:1d:dd:64:29:83:24:3a:6a: 81:6f:6b:fc:fa:cd:f7:7a:e7:85:f0:82:5e:2b:bf:09:7e:b0: d7:71:39:28:0c:15:5e:a8:25:33:68:b5:27:66:c4:54:ac:93: be:cf:57:2c:8f:cf:d1:30:18:ad:38:80:1b:7e:ef:6d:d0:5d: 1a:40:e8:22:d4:79:3e:1f:54:d7:78:9a:f3:d3:19:eb:22:9d: 6b:a1:12:e8:c3:b8:dc:23:d2:64:4f:19:19:45:22:90:aa:e8: 34:57:98:84:a1:35:99:f7:2c:47:3d:7c:f0:86:49:cf:f7:c3: 01:6a:0f:c7:14:2b:36:25:f3:e8:79:da:37:c8:15:12:42:03: e6:b7:73:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTA4MDUwNzI4NDdaFw0yNTA4MTIwNzI4NDdaMBgxFjAUBgNV BAMTDTY4OTFiMmFmLTczMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDspVUjxRZrEYHlqZuEpq7cPypqE5H47IMXJKYC9tdDzAJAdgyGaISbpjTIswff Qp9w6WcQw61wqIThH0l2yEDCTjLzhWf0FjKj2prfmR/tcwjKIPY1mwxNilR3dIn6 36OMEcIShtsHay6/PAbfJzYovMFhl4l5mwU62JGAmLztyRDlwT5kIL5ffIYRoK2O F2JzAdE+WpoorAMCmryhYcvbew+LrhtTFDhTb3FmtO53Jga8auGlg3CrqfdSxWCC tUEtv5Y1KL0TXWclqlzlTOwnU2GQQ982KeYF8nk3cTjAITd+PmogTrGyPrM+3Urd fymaOtYqDaWTwc1Bs419fmaHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM2qsc2tq 3K3Kr7bv46cJTiB5s3YwHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQnFEdymEA/9ev5vtFtM6Xq/BGnEO2x50vErFGjQ8dOGft4e/c1yXW7 e5eB34MeMDBWnnIjqCyyTUjHd/Q/6/QjuxibNx3rsObZcJZ0PGtEdk1f5DaFQnKO DyI4TzYK0ZlYXka9Amv3/i5PP6bAb2esYqy7eX8d3WQpgyQ6aoFva/z6zfd654Xw gl4rvwl+sNdxOSgMFV6oJTNotSdmxFSsk77PVyyPz9EwGK04gBt+723QXRpA6CLU eT4fVNd4mvPTGesinWuhEujDuNwj0mRPGRlFIpCq6DRXmIShNZn3LEc9fPCGSc/3 wwFqD8cUKzYl8+h52jfIFRJCA+a3cyA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:23 2025 by rpki-client