$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: JWfOn1VJrJZ9Lydi1NUDt+tssFnnm8fgj//fmd1x2/c= Subject key identifier: 98:6D:FE:3E:AF:04:F3:FF:92:BD:C5:7A:72:55:AA:22:21:DA:70:63 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0B3E Signing time: Sun 10 Aug 2025 20:45:34 +0000 Manifest this update: Sun 10 Aug 2025 20:45:33 +0000 Manifest next update: Sun 17 Aug 2025 20:45:33 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: xWJJwOOLSmWadLhKvMtOHdQNMB9kueanfi7ToVRwHDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Aug 10 20:45:33 2025 GMT Not After : Aug 17 20:45:33 2025 GMT Subject: CN=689904ee-8e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:bb:3c:9d:a1:37:99:05:83:3b:89:2a:75: 73:ee:6b:5e:0f:ed:b4:ce:70:1e:84:25:9c:cb:8f: d5:7c:46:2f:08:c9:44:a4:b4:c6:60:83:79:af:84: e9:26:29:70:2b:62:06:12:61:af:39:db:7e:18:f1: 8c:4c:21:e4:c0:db:dc:8f:c5:6e:a5:ba:f6:a1:b4: 8b:d8:64:45:2f:29:dc:76:d1:8a:33:bc:75:7f:86: aa:33:65:9f:c9:4d:ef:95:7b:b4:93:e2:34:c9:e8: b3:e2:6a:00:1b:29:bd:4f:68:04:40:99:ac:98:9d: 62:d8:bf:60:cd:a1:88:90:df:03:61:8f:93:54:95: 69:a7:96:dc:e1:21:f3:cf:67:18:3e:1e:09:1b:6a: dd:4e:36:14:67:7f:a3:80:ad:49:63:05:c0:42:a3: 9d:c9:ba:19:eb:2c:a2:cd:bb:ee:ed:55:23:5f:34: 77:c3:2e:75:3b:d9:a3:ff:4d:ba:88:da:9e:23:91: 0d:9c:dc:dd:5e:b8:b7:cb:b0:42:0e:ba:4c:ee:df: b0:2b:ad:30:61:78:a7:f9:39:92:33:61:13:d3:24: 6b:ca:20:ad:49:e2:03:17:36:7d:e0:57:77:9d:37: 8b:96:fc:2a:5c:23:25:3a:24:dc:df:95:6d:38:65: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6D:FE:3E:AF:04:F3:FF:92:BD:C5:7A:72:55:AA:22:21:DA:70:63 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:69:6d:5f:34:de:ef:74:df:2e:37:c8:7c:2e:11:d7:2c:23: ab:5e:c7:f7:32:4d:a1:d7:da:91:be:58:f7:5f:7c:cc:7b:93: d6:f9:c6:d4:bf:9e:49:c7:23:44:b2:c1:4e:4a:31:46:a6:aa: 26:43:3b:50:41:28:81:49:d6:05:9c:be:36:ea:64:39:30:91: a2:a9:a2:0c:26:d7:5a:90:ff:2b:8d:d5:53:14:9c:a5:6c:91: 90:a0:cb:ef:a7:97:04:c9:b7:cd:d4:a4:76:67:8b:50:cd:d7: 88:9d:5c:f8:6d:6e:0b:1e:95:94:22:88:28:ef:93:55:7f:af: 3f:72:22:19:76:99:74:93:dd:e5:77:2a:f7:da:23:81:e8:48: 45:27:72:af:fa:97:10:5d:c8:f1:f2:cd:b2:eb:72:87:36:d5: 79:9b:51:68:af:12:74:ae:50:41:a5:be:42:40:d4:b9:0d:42: 5c:8d:f2:b0:a7:a9:54:15:07:d5:40:17:14:2a:56:fe:61:af: 36:7e:21:d3:7f:1d:2e:f1:f9:ce:9a:cd:05:cb:96:44:78:4b: 85:19:b4:6b:66:5e:33:ad:1c:1b:4b:f2:9b:c7:85:b4:15:f5: 72:2d:ec:de:d2:6b:64:1e:8d:64:a7:8e:1b:94:62:1a:f0:40: 9d:3f:58:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUwODEwMjA0NTMzWhcNMjUwODE3MjA0NTMzWjAYMRYwFAYD VQQDEw02ODk5MDRlZS04ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSy7PJ2hN5kFgzuJKnVz7mteD+20znAehCWcy4/VfEYvCMlEpLTGYIN5r4Tp JilwK2IGEmGvOdt+GPGMTCHkwNvcj8Vupbr2obSL2GRFLyncdtGKM7x1f4aqM2Wf yU3vlXu0k+I0yeiz4moAGym9T2gEQJmsmJ1i2L9gzaGIkN8DYY+TVJVpp5bc4SHz z2cYPh4JG2rdTjYUZ3+jgK1JYwXAQqOdyboZ6yyizbvu7VUjXzR3wy51O9mj/026 iNqeI5ENnNzdXri3y7BCDrpM7t+wK60wYXin+TmSM2ET0yRryiCtSeIDFzZ94Fd3 nTeLlvwqXCMlOiTc35VtOGXG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJht/j6v BPP/kr3FenJVqiIh2nBjMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvaW1fNN7vdN8uN8h8LhHXLCOrXsf3Mk2h19qRvlj3X3zMe5PW+cbU v55JxyNEssFOSjFGpqomQztQQSiBSdYFnL426mQ5MJGiqaIMJtdakP8rjdVTFJyl bJGQoMvvp5cEybfN1KR2Z4tQzdeInVz4bW4LHpWUIogo75NVf68/ciIZdpl0k93l dyr32iOB6EhFJ3Kv+pcQXcjx8s2y63KHNtV5m1ForxJ0rlBBpb5CQNS5DUJcjfKw p6lUFQfVQBcUKlb+Ya82fiHTfx0u8fnOms0Fy5ZEeEuFGbRrZl4zrRwbS/Kbx4W0 FfVyLeze0mtkHo1kp44blGIa8ECdP1j9 -----END CERTIFICATE-----Generated at Mon Aug 11 09:59:02 2025 by rpki-client