$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: haAT44ZYAk01eiROIVgieFdLWAmmIRc3CZhXvHPVoek= Subject key identifier: 01:E2:C4:1E:A3:6B:C0:78:7A:8D:F5:DD:8B:74:44:62:9D:A0:F7:6D Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 091C Signing time: Fri 08 Aug 2025 20:37:14 +0000 Manifest this update: Fri 08 Aug 2025 20:37:14 +0000 Manifest next update: Fri 15 Aug 2025 20:37:14 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: lVzrRpErtBFX8tdyOECG7Q810cDOR9G8cQotVeqK38Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721, serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: Aug 8 20:37:14 2025 GMT Not After : Aug 15 20:37:14 2025 GMT Subject: CN=68965ffa-0621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:49:ab:ce:51:83:5f:c1:63:08:b2:2e:54: 80:50:b5:a1:92:87:30:d8:03:62:00:ef:3b:5f:70: 00:b0:85:9d:33:71:e7:8d:fa:65:2c:da:4d:88:41: ae:aa:08:f9:e7:58:a8:58:91:92:75:d9:36:ac:d0: 40:a7:b9:e7:81:74:7a:fa:08:c9:35:73:68:c5:88: 8a:47:b3:bf:c1:26:5f:0b:c1:e5:cf:43:c7:c1:39: fc:51:42:6e:4c:be:66:0a:57:7d:ee:0e:bc:04:d3: f5:c1:47:d7:e8:88:91:a7:9a:cb:e2:a1:01:ea:5d: ce:3e:69:03:ac:59:f9:e5:d7:cf:30:5c:36:1b:9e: 5d:ab:c8:81:1e:a6:f8:44:0c:e8:54:83:8d:4e:4f: 1d:8d:50:13:22:70:16:f4:a8:18:2c:7a:40:8d:f5: 76:23:dd:51:46:a4:58:cc:54:ed:85:1d:43:13:43: 14:0a:1a:bc:a2:da:aa:bb:06:5f:91:6c:85:ca:b4: 12:98:ae:44:b6:5d:72:b3:e0:ba:d8:c0:07:2c:08: 69:9f:5b:73:e5:54:a4:36:41:82:94:55:56:ae:61: 4e:30:08:08:fb:2b:f3:4a:77:15:bd:60:ce:6a:b0: ea:22:9d:c1:a1:3e:5e:40:d0:10:c5:46:4a:5a:97: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:C4:1E:A3:6B:C0:78:7A:8D:F5:DD:8B:74:44:62:9D:A0:F7:6D X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:bc:40:aa:38:81:5c:97:f2:33:e3:32:bb:39:fe:d8:ce:74: 5a:c6:e4:50:3f:04:c3:c7:8a:6d:d4:8a:58:c1:b5:35:22:ef: cb:fd:6c:85:4a:83:2e:3c:49:bd:7f:93:d9:be:d9:22:4f:55: 2b:32:aa:da:be:93:c4:da:62:6f:78:0a:c9:50:92:ae:e6:84: 4f:8a:f2:bc:b7:b9:81:18:6c:aa:92:b6:6a:de:c3:3b:7c:4e: b4:dd:5f:b0:dc:8a:47:f9:ea:4e:99:9f:6e:d7:3d:dc:d5:80: 04:f4:d9:62:10:02:7a:02:09:f5:e6:1f:5d:49:47:20:5f:63: ba:78:44:d2:11:b9:1d:6b:49:02:2b:2a:74:be:d1:87:14:5e: 36:3a:0b:c7:e4:f0:af:11:e8:c0:35:67:cf:d2:69:7f:c2:8e: f1:40:01:73:50:8b:0d:0a:91:b6:c6:bf:21:f6:eb:97:ed:1f: 54:51:82:e1:b2:00:93:66:df:6a:27:f7:a3:67:ae:aa:5d:32: ec:8b:5a:10:b8:44:be:ff:98:21:35:19:16:43:17:34:ba:83: 79:60:96:07:22:e1:59:f9:13:81:58:af:10:fa:1c:a0:9e:df: 26:6e:0c:44:1b:b6:54:9c:d4:c7:d1:cb:46:b9:20:f7:58:03: 6a:a2:48:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjUwODA4MjAzNzE0WhcNMjUwODE1MjAzNzE0WjAYMRYwFAYD VQQDEw02ODk2NWZmYS0wNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvllJq85Rg1/BYwiyLlSAULWhkocw2ANiAO87X3AAsIWdM3HnjfplLNpNiEGu qgj551ioWJGSddk2rNBAp7nngXR6+gjJNXNoxYiKR7O/wSZfC8Hlz0PHwTn8UUJu TL5mCld97g68BNP1wUfX6IiRp5rL4qEB6l3OPmkDrFn55dfPMFw2G55dq8iBHqb4 RAzoVIONTk8djVATInAW9KgYLHpAjfV2I91RRqRYzFTthR1DE0MUChq8otqquwZf kWyFyrQSmK5Etl1ys+C62MAHLAhpn1tz5VSkNkGClFVWrmFOMAgI+yvzSncVvWDO arDqIp3BoT5eQNAQxUZKWpd68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHixB6j a8B4eo313Yt0RGKdoPdtMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlvECqOIFcl/Iz4zK7Of7YznRaxuRQPwTDx4pt1IpYwbU1Iu/L/WyF SoMuPEm9f5PZvtkiT1UrMqravpPE2mJveArJUJKu5oRPivK8t7mBGGyqkrZq3sM7 fE603V+w3IpH+epOmZ9u1z3c1YAE9NliEAJ6Agn15h9dSUcgX2O6eETSEbkda0kC Kyp0vtGHFF42OgvH5PCvEejANWfP0ml/wo7xQAFzUIsNCpG2xr8h9uuX7R9UUYLh sgCTZt9qJ/ejZ66qXTLsi1oQuES+/5ghNRkWQxc0uoN5YJYHIuFZ+ROBWK8Q+hyg nt8mbgxEG7ZUnNTH0ctGuSD3WANqokiE -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:33 2025 by rpki-client