$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json) Hash identifier: pg18Q1N2i49Mu0Eh14nNam+cEBUghbbfYSzCjgXupu4= Subject key identifier: E7:B7:F3:61:12:7B:28:F7:6C:46:0C:93:55:53:75:64:9B:0E:4F:68 Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft Manifest number: 79 Signing time: Tue 05 Aug 2025 07:23:13 +0000 Manifest this update: Tue 05 Aug 2025 07:23:13 +0000 Manifest next update: Tue 12 Aug 2025 07:23:13 +0000 Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: xzI+KYh21q3CuHFeqnKN3Mu6ZmN21YheYaY9VgPfyYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33 Validity Not Before: Aug 5 07:23:13 2025 GMT Not After : Aug 12 07:23:13 2025 GMT Subject: CN=6891b161-0537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:91:23:31:eb:06:ab:18:e9:0a:10:8b:0a: 21:cc:cf:2e:7b:e3:06:af:03:2e:17:14:de:c7:ad: bb:ed:d5:9f:28:ae:63:e6:60:18:7d:50:fb:a4:30: 6e:72:8f:20:13:03:5b:e4:ea:2c:b3:f0:4e:fc:df: 05:95:f2:84:8d:78:14:28:d7:bd:e8:05:06:d8:65: 98:2b:ab:db:cb:87:fb:ce:31:32:aa:7f:f1:30:53: 4b:26:a6:99:19:4d:6c:a3:1f:37:06:d8:84:0c:b2: 86:2a:dd:58:a7:16:5e:34:47:1a:a5:7c:e6:13:fa: 4f:d3:28:c0:2d:79:dd:06:67:43:1d:c7:3d:57:ea: 34:f7:07:6e:a6:b8:0a:70:f3:12:a6:c7:df:d7:28: 8f:df:dc:73:b4:94:39:10:3e:d8:f8:e5:61:d7:5b: ac:37:68:47:99:48:38:65:03:4c:3f:34:9e:4f:25: 2a:f3:b9:ec:25:12:57:58:61:09:c7:77:a0:e1:96: 9b:81:c7:79:93:7c:fb:19:d3:6c:d9:5f:7b:9b:4f: 7f:55:26:a0:2c:d1:3f:84:8a:78:4f:47:86:99:e9: 35:ef:39:2c:30:af:10:53:45:c1:80:44:79:e1:97: 9f:5a:d7:31:a2:47:87:a0:7c:a4:99:b2:a5:21:4e: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:F3:61:12:7B:28:F7:6C:46:0C:93:55:53:75:64:9B:0E:4F:68 X509v3 Authority Key Identifier: keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:70:39:8f:4a:91:cf:96:ae:31:f7:50:f8:b9:78:81:2c:da: c5:23:cb:26:2e:b6:2e:c7:b9:34:84:1a:a1:88:13:20:ec:e9: 7c:c4:bf:da:65:bd:77:3b:ac:8b:a3:44:6a:9f:ae:69:ff:3e: e6:85:22:e0:2e:0f:c0:9d:be:62:de:75:1d:59:78:93:cc:ed: 91:d8:e4:75:5a:f5:7b:e5:bf:36:1f:f9:55:34:41:79:c3:9b: 76:5b:1c:78:c6:42:73:80:9f:c9:c2:23:cb:31:a5:7d:2c:2c: 67:99:0b:56:1b:eb:01:c8:3c:8e:a3:cd:c3:1a:4a:04:32:bc: 22:c7:94:91:6d:d0:17:35:2d:6b:b8:5b:bb:61:17:d0:f5:27: d1:dc:b6:9d:66:7a:b6:e1:05:cb:c3:b5:21:4e:e2:13:94:95: d8:68:20:dc:ef:b4:08:21:15:41:0c:87:d4:ae:52:82:e7:3b: 73:0b:be:18:ec:65:ee:74:38:cc:68:3b:dc:6e:ce:f6:a9:48: f0:a6:68:06:da:c5:ec:41:a1:5d:e7:d1:e4:38:9e:b3:35:fa: 17:4d:ef:6e:31:aa:89:cf:97:31:17:cb:1b:cb:65:53:32:17: 5c:27:4c:78:eb:55:94:54:02:f1:87:68:e4:72:c7:11:2f:6e: 15:c0:56:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoQUQwMTlGMDM1QkZGM0YzQjE3MzIzQ0RCQkIxNEEwN0Q1 REU4RUMzMzAeFw0yNTA4MDUwNzIzMTNaFw0yNTA4MTIwNzIzMTNaMBgxFjAUBgNV BAMTDTY4OTFiMTYxLTA1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFCpEjMesGqxjpChCLCiHMzy574wavAy4XFN7Hrbvt1Z8ormPmYBh9UPukMG5y jyATA1vk6iyz8E783wWV8oSNeBQo173oBQbYZZgrq9vLh/vOMTKqf/EwU0smppkZ TWyjHzcG2IQMsoYq3VinFl40RxqlfOYT+k/TKMAted0GZ0Mdxz1X6jT3B26muApw 8xKmx9/XKI/f3HO0lDkQPtj45WHXW6w3aEeZSDhlA0w/NJ5PJSrzuewlEldYYQnH d6DhlpuBx3mTfPsZ02zZX3ubT39VJqAs0T+EinhPR4aZ6TXvOSwwrxBTRcGARHnh l59a1zGiR4egfKSZsqUhTtn3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU57fzYRJ7 KPdsRgyTVVN1ZJsOT2gwHwYDVR0jBBgwFoAUrQGfA1v/PzsXMjzbuxSgfV3o7DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzFEN0I2M0JDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclFHZkExdl9QenNYTWp6YnV4U2dmVjNvN0RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzFEN0I2M0JDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyL3JRR2ZBMXZfUHpz WE1qemJ1eFNnZlYzbzdETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAApwOY9Kkc+WrjH3UPi5eIEs2sUjyyYuti7HuTSEGqGIEyDs6XzEv9pl vXc7rIujRGqfrmn/PuaFIuAuD8CdvmLedR1ZeJPM7ZHY5HVa9XvlvzYf+VU0QXnD m3ZbHHjGQnOAn8nCI8sxpX0sLGeZC1Yb6wHIPI6jzcMaSgQyvCLHlJFt0Bc1LWu4 W7thF9D1J9Hctp1merbhBcvDtSFO4hOUldhoINzvtAghFUEMh9SuUoLnO3MLvhjs Ze50OMxoO9xuzvapSPCmaAbaxexBoV3n0eQ4nrM1+hdN724xqonPlzEXyxvLZVMy F1wnTHjrVZRUAvGHaORyxxEvbhXAVoA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:17:30 2025 by rpki-client