$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: L2Ihh5oPiLeKlzBkH4r3FlGpcWP1Gf3iZNiRK6rMRlQ= Subject key identifier: 14:D6:AD:D9:04:0B:FC:20:CE:61:D8:3D:66:8E:54:6E:13:77:21:55 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F32 Signing time: Fri 08 Aug 2025 16:07:05 +0000 Manifest this update: Fri 08 Aug 2025 16:07:05 +0000 Manifest next update: Fri 15 Aug 2025 16:07:05 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: kvHgcD0o/RO9qd/yKarj1KAwVG2EFfnHGpJvurYNJ0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7986 (0x1f32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Aug 8 16:07:05 2025 GMT Not After : Aug 15 16:07:05 2025 GMT Subject: CN=689620a9-f887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:50:b3:70:10:d9:15:00:86:3b:0d:46:43: b7:0d:28:79:10:8d:45:cb:5f:d5:88:c6:66:58:32: 0f:5e:ff:ff:4f:6d:de:e7:ab:83:ff:78:f1:5f:fd: 15:f2:eb:67:a5:7b:02:fe:73:46:0b:8a:bd:49:10: c3:6c:c7:21:04:0a:77:6c:53:13:fe:f3:38:e8:93: 8e:97:1e:55:ff:89:a2:14:f5:61:ea:02:33:28:7c: d2:3a:d2:88:6d:e7:58:68:78:de:d4:08:94:64:e7: 29:3a:24:27:c0:33:a5:f7:28:ba:58:26:a5:d7:91: e2:e2:21:89:aa:7b:0d:2f:ef:a7:ae:43:11:03:cc: e3:12:b5:13:2d:ad:7a:d8:ef:cc:be:f6:87:1a:09: 74:b1:68:97:8a:ea:c5:b1:1d:34:63:76:62:d8:43: 8c:0e:70:35:51:27:26:fd:2d:e0:bc:d6:c7:af:4d: 3b:76:81:29:ca:23:ec:18:2d:85:c2:ee:fa:78:60: 8c:e5:2d:c9:17:df:7f:77:43:72:00:86:4b:e1:f9: a4:9a:d4:1f:2f:88:cd:85:45:90:5e:99:b9:72:69: 53:5f:65:d9:7d:ba:6e:ea:8c:6c:81:e9:be:18:b1: e2:06:28:83:72:ef:84:87:9a:c2:22:37:62:a9:4a: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D6:AD:D9:04:0B:FC:20:CE:61:D8:3D:66:8E:54:6E:13:77:21:55 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:70:3f:9a:d0:f6:02:9e:27:37:e4:07:b5:c3:2a:5f:c3:cb: b3:4a:1e:52:9b:cd:66:2c:4b:4b:7b:d4:f6:57:4b:36:72:b3: df:4b:61:17:53:94:9d:c9:71:f7:c4:c4:36:2f:28:6f:30:eb: a6:34:6c:29:9e:2a:2c:f4:c4:59:7a:8d:8d:e2:28:e2:9b:63: 2d:70:30:93:16:76:e7:2a:ef:61:6d:24:42:b2:a4:67:cf:de: 5b:9f:e3:d8:08:b3:4c:cb:5e:11:66:b4:df:e7:27:92:20:13: c6:e7:e4:ca:74:6c:d1:5a:40:f6:6e:30:f9:af:6c:92:72:11: 97:6f:c9:28:d0:42:f5:db:47:c4:f9:b3:05:66:be:c0:26:a4: 5d:01:60:8d:37:22:5b:83:01:3a:12:a1:45:a9:27:54:28:b1: 7a:77:4f:c2:4f:97:92:58:66:b0:70:d3:77:9b:66:6c:3f:87: c4:a3:57:27:7b:5d:9a:14:d9:db:75:7a:22:21:43:d7:b6:4a: af:e0:2f:1f:7e:ec:3d:b2:7c:b7:b9:09:11:b1:40:2e:97:85: ab:d6:91:16:5b:14:cb:1d:40:77:85:37:21:d6:cf:b8:a8:ba: eb:16:2c:42:cd:de:25:59:39:13:8c:be:6f:f9:09:56:6c:ec: 4f:7a:61:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUwODA4MTYwNzA1WhcNMjUwODE1MTYwNzA1WjAYMRYwFAYD VQQDEw02ODk2MjBhOS1mODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9NQs3AQ2RUAhjsNRkO3DSh5EI1Fy1/ViMZmWDIPXv//T23e56uD/3jxX/0V 8utnpXsC/nNGC4q9SRDDbMchBAp3bFMT/vM46JOOlx5V/4miFPVh6gIzKHzSOtKI bedYaHje1AiUZOcpOiQnwDOl9yi6WCal15Hi4iGJqnsNL++nrkMRA8zjErUTLa16 2O/MvvaHGgl0sWiXiurFsR00Y3Zi2EOMDnA1UScm/S3gvNbHr007doEpyiPsGC2F wu76eGCM5S3JF99/d0NyAIZL4fmkmtQfL4jNhUWQXpm5cmlTX2XZfbpu6oxsgem+ GLHiBiiDcu+Eh5rCIjdiqUqr7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTWrdkE C/wgzmHYPWaOVG4TdyFVMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZcD+a0PYCnic35Ae1wypfw8uzSh5Sm81mLEtLe9T2V0s2crPfS2EX U5SdyXH3xMQ2LyhvMOumNGwpnios9MRZeo2N4ijim2MtcDCTFnbnKu9hbSRCsqRn z95bn+PYCLNMy14RZrTf5yeSIBPG5+TKdGzRWkD2bjD5r2ySchGXb8ko0EL120fE +bMFZr7AJqRdAWCNNyJbgwE6EqFFqSdUKLF6d0/CT5eSWGawcNN3m2ZsP4fEo1cn e12aFNnbdXoiIUPXtkqv4C8ffuw9sny3uQkRsUAul4Wr1pEWWxTLHUB3hTch1s+4 qLrrFixCzd4lWTkTjL5v+QlWbOxPemHT -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:24 2025 by rpki-client