$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: HF2AyRtmlfVFzaaP66Ce8Ckb4K1lkCz3PEA07vi8qyk= Subject key identifier: E3:9A:CF:30:56:A2:B2:F8:45:AD:97:47:84:4D:92:01:4F:83:83:22 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 27 Signing time: Sat 09 Aug 2025 08:19:08 +0000 Manifest this update: Sat 09 Aug 2025 08:19:07 +0000 Manifest next update: Sat 16 Aug 2025 08:19:07 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: OlW3iEMzLxYnp5MvRwie7II5CTGKzDdxwIJetrITCc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Aug 9 08:19:07 2025 GMT Not After : Aug 16 08:19:07 2025 GMT Subject: CN=6897047c-a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:16:ca:da:4c:b6:cf:3f:a9:da:27:fe:46: e0:28:0d:0a:be:de:7a:9a:68:5c:d0:e6:a9:da:37: 97:cf:30:9d:7f:a2:24:0c:07:86:81:63:44:ed:f5: ab:1c:8d:27:d5:78:6b:77:7f:f2:24:1f:2b:6f:5c: e8:7e:bc:b8:5e:81:ee:28:54:ed:57:33:1c:71:db: 4a:a1:47:35:ca:99:1c:04:9d:27:f5:85:6c:8b:68: 97:5c:a6:47:0d:ef:00:1f:ce:73:5e:2f:10:01:9d: 95:03:14:61:27:1f:33:6f:4f:59:ed:79:18:64:ff: 47:b6:cb:67:ca:2b:f9:7a:ce:b4:7c:ca:be:08:68: b3:e3:63:0c:7f:0f:31:ee:ea:68:c2:12:b6:4a:54: 27:be:8c:84:fe:68:17:8b:8e:81:36:da:47:13:73: 95:3f:53:85:88:5a:a3:ae:4c:b4:21:e1:8b:bc:06: af:8b:16:cf:13:0b:35:e1:59:4f:17:21:e5:ea:04: df:b5:72:be:c4:06:ba:aa:56:97:df:aa:8f:f4:91: df:f1:a8:3a:90:7e:58:8f:83:0f:2a:45:15:9a:7d: cd:c8:23:8d:ac:17:8a:c4:a6:0d:50:43:fa:7c:74: 73:86:e7:ee:5d:1c:be:61:a1:31:f9:1f:f6:24:1d: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9A:CF:30:56:A2:B2:F8:45:AD:97:47:84:4D:92:01:4F:83:83:22 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ee:e6:4d:63:f3:96:b7:b5:dd:a0:c6:62:9b:16:e0:f7:58: 3a:62:8b:78:a6:c2:d4:f4:54:ac:64:01:03:40:08:74:ab:ae: c3:1c:fa:b4:88:46:df:96:fe:35:7a:10:c0:b3:04:be:98:4b: b5:66:30:ca:9f:6b:85:b9:75:be:84:68:35:a5:a2:8e:6d:cb: ac:e4:9a:06:da:2d:55:fe:4e:69:a4:7a:57:55:3f:2e:76:2e: 32:41:b0:f6:0c:79:b4:5a:e0:55:d0:86:1d:90:e2:1b:a5:52: 0c:2b:ee:fd:15:a0:ef:7d:ac:7d:d5:e6:66:99:c0:44:b3:ef: f0:94:7b:a5:83:10:d8:42:ae:ab:58:f5:37:2f:df:12:b2:12: 92:a9:da:02:ac:f9:7b:07:78:dc:fc:05:07:b4:c6:f3:02:50: 70:85:ad:5b:d7:70:cb:a2:5a:fe:09:4d:d7:96:17:9b:e5:12: 23:a7:48:ac:5d:f0:f4:af:60:44:a6:63:cd:75:ae:6a:27:52: 07:90:58:d1:98:02:3b:3a:03:6e:ca:42:b6:96:9b:3c:08:b1: ba:79:07:15:47:cb:30:6d:8e:35:bf:ce:b4:3a:7e:cd:41:6e: 74:99:f5:fb:75:c5:ce:a5:e3:58:1d:a3:46:56:c8:01:ec:0d: a3:8c:05:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoQzdGMDI4MzdEMjQ1Q0I4RkFCQ0Q0NzQxQ0ZBMkI0QTVB MkY3M0VBRDAeFw0yNTA4MDkwODE5MDdaFw0yNTA4MTYwODE5MDdaMBgxFjAUBgNV BAMTDTY4OTcwNDdjLWEzYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/iBbK2ky2zz+p2if+RuAoDQq+3nqaaFzQ5qnaN5fPMJ1/oiQMB4aBY0Tt9asc jSfVeGt3f/IkHytvXOh+vLhege4oVO1XMxxx20qhRzXKmRwEnSf1hWyLaJdcpkcN 7wAfznNeLxABnZUDFGEnHzNvT1nteRhk/0e2y2fKK/l6zrR8yr4IaLPjYwx/DzHu 6mjCErZKVCe+jIT+aBeLjoE22kcTc5U/U4WIWqOuTLQh4Yu8Bq+LFs8TCzXhWU8X IeXqBN+1cr7EBrqqVpffqo/0kd/xqDqQfliPgw8qRRWafc3II42sF4rEpg1QQ/p8 dHOG5+5dHL5hoTH5H/YkHQPZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU45rPMFai svhFrZdHhE2SAU+DgyIwHwYDVR0jBBgwFoAUx/AoN9JFy4+rzUdBz6K0paL3Pq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzVBRDc2OUIwM0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1Bx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveF9Bb045SkZ5NC1yelVkQno2SzBwYUwzUHEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzVBRDc2OUIwM0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQt cnpVZEJ6NkswcGFMM1BxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH7u5k1j85a3td2gxmKbFuD3WDpii3imwtT0VKxkAQNACHSrrsMc+rSI Rt+W/jV6EMCzBL6YS7VmMMqfa4W5db6EaDWloo5ty6zkmgbaLVX+TmmkeldVPy52 LjJBsPYMebRa4FXQhh2Q4hulUgwr7v0VoO99rH3V5maZwESz7/CUe6WDENhCrqtY 9Tcv3xKyEpKp2gKs+XsHeNz8BQe0xvMCUHCFrVvXcMuiWv4JTdeWF5vlEiOnSKxd 8PSvYESmY811rmonUgeQWNGYAjs6A27KQraWmzwIsbp5BxVHyzBtjjW/zrQ6fs1B bnSZ9ft1xc6l41gdo0ZWyAHsDaOMBaI= -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:12 2025 by rpki-client