$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: SdkVbJQDaq6dP5C6t0uSijU4BxJx7DXqv9CesdzfBBc= Subject key identifier: C4:0B:85:18:28:8E:C1:3E:B4:4F:CE:33:08:2B:1A:0C:0C:A2:76:EA Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: C7 Signing time: Sat 09 Aug 2025 06:10:09 +0000 Manifest this update: Sat 09 Aug 2025 06:10:08 +0000 Manifest next update: Sat 16 Aug 2025 06:10:08 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: Rk9Lp02QIAZxr+y7StV5PTEeehLRTwGilaHtqgbf5Fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Aug 9 06:10:08 2025 GMT Not After : Aug 16 06:10:08 2025 GMT Subject: CN=6896e640-9f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:00:20:52:4e:00:d3:ce:93:f2:55:55:b2: cd:6d:d4:a8:2a:5f:2d:51:ee:c6:29:dd:9c:e2:29: 04:0a:cb:bf:a9:2a:a1:10:7f:07:5b:24:c2:88:4f: 0e:8a:e0:75:c6:f3:a6:db:0a:95:28:b3:19:8e:85: cb:62:9f:23:28:a4:1a:83:a9:cd:b4:06:01:d9:b1: d9:98:34:99:74:49:18:99:77:ca:f0:37:42:df:22: d5:2f:01:95:04:b0:0e:20:1a:3b:8b:b1:7f:e8:ba: 4f:43:25:64:59:bc:3d:47:06:71:bb:0d:2f:80:10: 3f:c5:e5:a4:3b:51:cc:9b:9d:18:81:26:fb:91:cb: bc:8c:ba:34:02:16:0b:bb:8d:93:55:fd:44:6d:42: 52:45:6b:0c:a6:0f:c3:71:47:73:b6:34:9e:d0:bd: 3e:95:07:d2:90:b0:64:e2:91:6e:a0:70:d0:59:a3: 8a:03:7e:d4:f4:99:a2:13:fb:f6:4c:12:ac:d3:fe: 4e:34:7e:37:21:f3:7e:28:a3:46:af:08:b6:a9:05: b1:97:0f:60:64:a1:cf:04:34:ea:3b:5d:c8:79:14: 7b:3c:48:b0:a3:18:87:9e:97:5a:49:19:2b:51:28: fd:c3:ed:d6:d5:c5:cc:71:05:19:c9:82:c2:d1:b4: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0B:85:18:28:8E:C1:3E:B4:4F:CE:33:08:2B:1A:0C:0C:A2:76:EA X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8f:9e:43:03:9c:dc:13:e1:1c:96:b4:19:cb:89:6a:e3:2c: fe:c1:91:09:52:4e:68:04:85:f3:f4:97:7e:4b:df:e4:f4:70: 32:50:c6:f6:57:11:df:33:f7:ce:3c:cd:67:7f:1c:3e:aa:9e: f6:2b:2c:cf:d2:14:dd:03:84:c0:a4:c1:4d:e0:f6:fb:67:2f: a9:a2:75:50:57:f1:18:62:fd:5c:01:0b:d2:96:98:02:5e:b3: 2f:69:e1:5a:59:39:95:5a:ad:51:25:73:1f:10:1d:22:4d:03: 58:62:95:12:fa:f1:a3:1d:d3:d6:e9:5e:f0:8f:13:86:9d:31: f2:65:65:4f:74:d5:d4:71:33:00:6b:2d:08:0a:e8:1e:f2:11: c2:74:a4:14:c5:1f:7d:03:33:d9:58:85:5d:a2:00:c2:08:d7: 94:c8:70:26:f8:0f:2a:6b:19:1f:56:ba:1f:3b:c8:83:31:b4: 3f:d3:21:25:a5:3e:b7:ec:64:d6:21:3f:a4:c6:81:4a:1a:79: 93:42:4d:bd:a9:3f:61:4a:90:41:e3:0f:94:4c:f0:24:d7:f2: 15:79:f0:1d:bd:6d:3b:bc:72:59:71:64:0e:63:13:52:9a:e0: 50:4d:b6:f5:12:28:28:45:dd:08:15:e9:1a:6b:28:00:52:05: 30:3d:f7:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUwODA5MDYxMDA4WhcNMjUwODE2MDYxMDA4WjAYMRYwFAYD VQQDEw02ODk2ZTY0MC05ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF8AIFJOANPOk/JVVbLNbdSoKl8tUe7GKd2c4ikECsu/qSqhEH8HWyTCiE8O iuB1xvOm2wqVKLMZjoXLYp8jKKQag6nNtAYB2bHZmDSZdEkYmXfK8DdC3yLVLwGV BLAOIBo7i7F/6LpPQyVkWbw9RwZxuw0vgBA/xeWkO1HMm50YgSb7kcu8jLo0AhYL u42TVf1EbUJSRWsMpg/DcUdztjSe0L0+lQfSkLBk4pFuoHDQWaOKA37U9JmiE/v2 TBKs0/5ONH43IfN+KKNGrwi2qQWxlw9gZKHPBDTqO13IeRR7PEiwoxiHnpdaSRkr USj9w+3W1cXMcQUZyYLC0bSbfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQLhRgo jsE+tE/OMwgrGgwMonbqMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChj55DA5zcE+EclrQZy4lq4yz+wZEJUk5oBIXz9Jd+S9/k9HAyUMb2 VxHfM/fOPM1nfxw+qp72KyzP0hTdA4TApMFN4Pb7Zy+ponVQV/EYYv1cAQvSlpgC XrMvaeFaWTmVWq1RJXMfEB0iTQNYYpUS+vGjHdPW6V7wjxOGnTHyZWVPdNXUcTMA ay0ICuge8hHCdKQUxR99AzPZWIVdogDCCNeUyHAm+A8qaxkfVrofO8iDMbQ/0yEl pT637GTWIT+kxoFKGnmTQk29qT9hSpBB4w+UTPAk1/IVefAdvW07vHJZcWQOYxNS muBQTbb1EigoRd0IFekaaygAUgUwPfda -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:15 2025 by rpki-client