$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json) Hash identifier: TX1N5+z2nhAfltrqomUUrOz5LvjsZPq5ba5Kv4gF5Nw= Subject key identifier: BA:41:17:F4:C6:D0:C8:05:BF:2D:07:A0:1D:22:9A:9F:58:7A:4E:DE Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Certificate serial: 072E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft Manifest number: 072E Signing time: Wed 06 Aug 2025 14:50:05 +0000 Manifest this update: Wed 06 Aug 2025 14:50:04 +0000 Manifest next update: Wed 13 Aug 2025 14:50:04 +0000 Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: NLwKJAhwJBYs8zLHwxTQNnsGW+9MJq/WtzyeBf+GdIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Validity Not Before: Aug 6 14:50:04 2025 GMT Not After : Aug 13 14:50:04 2025 GMT Subject: CN=68936b9d-2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:bb:2e:58:c8:a9:64:56:dc:b1:fe:27:14: 4f:d3:4b:c7:a4:3d:09:bf:22:96:c7:99:e6:89:8f: 71:0a:66:4d:3b:9a:78:8c:e2:ff:57:2e:c0:1c:79: c6:01:6e:07:d1:1c:ab:c2:30:aa:c4:ee:30:e1:62: f9:7a:27:d8:0b:56:14:a5:c8:76:ab:8d:0d:85:45: 1e:04:3e:28:33:76:0c:79:04:65:7b:7c:d2:99:41: 2f:40:a7:9c:e6:27:84:95:7a:98:8b:d9:3e:34:8e: 77:dd:07:ae:c2:de:94:80:ed:15:95:e1:35:62:97: 42:86:af:4b:3f:89:a5:99:af:15:68:c1:e4:27:a5: 5f:a2:13:5e:16:02:ee:d8:ce:92:f1:40:30:de:1d: 85:96:9b:f6:34:c5:9f:ab:29:23:3f:6e:fd:99:28: 11:11:89:6c:9f:4d:28:44:0f:03:d0:90:31:49:20: 9c:83:f7:f4:4b:bc:e7:86:b8:40:f2:6d:28:e0:73: 70:47:e7:aa:e2:1d:c0:ed:c1:83:61:30:07:3c:a5: e6:b4:f0:6a:2b:bd:fd:89:c4:9b:32:79:35:cd:d5: ae:df:c5:10:14:3c:b5:e2:d2:ad:25:b3:16:64:35: e2:a2:08:94:57:8c:f5:ef:48:9e:d0:10:16:0d:74: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:17:F4:C6:D0:C8:05:BF:2D:07:A0:1D:22:9A:9F:58:7A:4E:DE X509v3 Authority Key Identifier: keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:13:b5:f8:67:e4:26:81:d3:03:71:0f:0a:45:7e:85:5e:e4: 52:83:36:47:da:c6:06:ef:8a:42:86:97:fb:f8:2c:1d:64:05: 9b:24:53:d4:23:05:92:54:8b:7c:97:ee:8e:21:e3:f2:b6:45: bb:72:1e:57:19:06:5b:9e:bd:00:c7:8a:17:72:23:cc:a3:1c: 28:72:f2:f4:31:5d:99:91:58:6b:57:85:86:0b:44:9d:1a:68: 51:38:22:a1:78:35:ad:3f:f8:f8:88:25:97:18:a7:38:51:2c: 03:b5:29:01:de:49:2b:c1:30:7e:7f:22:a3:ae:34:47:a3:55: 71:68:e6:b6:8d:92:b2:17:35:b5:f8:ea:28:63:14:35:5b:26: c8:3c:7e:e7:fc:84:1c:d4:28:31:f6:1d:cd:57:d5:c0:e7:44: 45:ca:67:97:fe:85:8a:49:58:b3:60:16:b8:01:98:4e:bc:31: 6d:84:97:67:64:7d:b7:97:d8:70:55:26:9e:3f:e2:8d:21:9e: a6:48:79:4c:ec:32:94:ec:6e:4a:a2:86:4b:a1:d8:d2:47:9c: 39:b6:c2:aa:b4:2b:37:27:fc:b4:5f:1f:52:3e:cd:e5:b8:e4: a6:e8:1a:af:0d:a7:a0:16:07:33:0e:38:85:a9:b3:57:6b:a8: bc:6a:c0:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKDk4NkIwRDUzNzY0QkM4M0RDMEUwNzJFQ0FGMzY5Qzc5 RjIyQTM5RDcwHhcNMjUwODA2MTQ1MDA0WhcNMjUwODEzMTQ1MDA0WjAYMRYwFAYD VQQDEw02ODkzNmI5ZC0yYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/e7LljIqWRW3LH+JxRP00vHpD0JvyKWx5nmiY9xCmZNO5p4jOL/Vy7AHHnG AW4H0RyrwjCqxO4w4WL5eifYC1YUpch2q40NhUUeBD4oM3YMeQRle3zSmUEvQKec 5ieElXqYi9k+NI533Qeuwt6UgO0VleE1YpdChq9LP4mlma8VaMHkJ6VfohNeFgLu 2M6S8UAw3h2Flpv2NMWfqykjP279mSgREYlsn00oRA8D0JAxSSCcg/f0S7znhrhA 8m0o4HNwR+eq4h3A7cGDYTAHPKXmtPBqK739icSbMnk1zdWu38UQFDy14tKtJbMW ZDXiogiUV4z170ie0BAWDXQ28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpBF/TG 0MgFvy0HoB0imp9Yek7eMB8GA1UdIwQYMBaAFJhrDVN2S8g9wOBy7K82nHnyKjnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xM0NBODJGQTQz RkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlEM0E0SExzcnphY2VmSXFP ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Hc05VM1pMeUQzQTRITHNyemFjZWZJcU9kYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xM0NBODJGQTQzRkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlE M0E0SExzcnphY2VmSXFPZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8E7X4Z+QmgdMDcQ8KRX6FXuRSgzZH2sYG74pChpf7+CwdZAWbJFPU IwWSVIt8l+6OIePytkW7ch5XGQZbnr0Ax4oXciPMoxwocvL0MV2ZkVhrV4WGC0Sd GmhROCKheDWtP/j4iCWXGKc4USwDtSkB3kkrwTB+fyKjrjRHo1VxaOa2jZKyFzW1 +OooYxQ1WybIPH7n/IQc1Cgx9h3NV9XA50RFymeX/oWKSVizYBa4AZhOvDFthJdn ZH23l9hwVSaeP+KNIZ6mSHlM7DKU7G5KooZLodjSR5w5tsKqtCs3J/y0Xx9SPs3l uOSm6BqvDaegFgczDjiFqbNXa6i8asDr -----END CERTIFICATE-----Generated at Thu Aug 7 01:22:12 2025 by rpki-client