$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: m/1XLN44uZt97tlMsyJeC3MvhHV7u3But1R3Ty1+J2k= Subject key identifier: 8C:B5:07:62:AA:14:63:E7:21:40:D3:53:68:0A:81:B7:4B:06:48:79 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 0B Signing time: Sat 09 Aug 2025 08:40:28 +0000 Manifest this update: Sat 09 Aug 2025 08:40:28 +0000 Manifest next update: Sat 16 Aug 2025 08:40:28 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: W3k0n4ttHMK4JuC240lBLFuneF6LCJrnyVPhGGUKRfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Aug 9 08:40:28 2025 GMT Not After : Aug 16 08:40:28 2025 GMT Subject: CN=6897097c-8ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:34:5f:4f:07:33:73:79:b4:4c:be:0f:03: 29:be:90:81:62:75:86:98:ec:6e:f5:f6:5b:cc:85: 37:6e:84:c2:e3:0f:9d:a4:b2:64:22:a3:31:7f:18: 52:77:29:07:11:62:a6:a2:1b:b5:64:d0:1e:6d:25: f3:e0:2e:7f:c9:28:71:ff:90:d3:54:f6:6c:a8:bd: bb:9d:23:be:2a:a6:2f:c2:e9:43:88:12:9a:d7:2d: 8f:95:c8:99:2a:ae:d7:cd:d3:bd:fb:bb:3e:fc:64: 1d:b1:3b:6d:33:f0:ed:e4:e1:69:63:d6:8e:a7:27: ef:45:8d:16:11:3f:ff:22:b3:34:d9:9d:43:05:11: 5f:f4:22:de:f5:5d:45:b9:dd:c2:a6:7d:b6:b3:f1: 56:22:33:a2:97:c4:ca:4e:c7:53:2c:1e:6e:5f:6e: ff:ce:a8:dd:80:9b:51:73:5c:47:1c:2b:ed:fd:af: 05:ab:ac:f2:42:be:ce:63:19:c3:ac:0d:29:f8:67: 2c:02:1f:47:4b:5c:84:19:3d:06:f8:09:d8:41:13: 77:4b:06:f1:0c:b4:11:fe:df:0c:5d:e0:47:5b:37: 0a:bb:cf:9f:eb:ca:ba:85:51:ba:95:71:12:4a:4c: 08:4e:6b:d5:10:3b:85:e2:29:aa:b0:ab:f4:74:6c: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B5:07:62:AA:14:63:E7:21:40:D3:53:68:0A:81:B7:4B:06:48:79 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e2:0b:8e:e1:55:98:ab:6b:12:01:c5:bd:0a:07:19:d6:d3: 62:99:f2:8b:94:e1:4d:0b:19:7b:7a:c2:1a:fd:0a:ef:4e:51: 0a:81:b7:2b:e6:91:16:2e:6a:03:b5:88:a5:b6:2a:37:75:b2: f4:03:f2:ef:13:a7:95:d6:99:c1:d7:bb:c7:04:7a:e3:c6:75: b4:0d:f5:c0:29:cd:1b:22:40:56:63:ef:e9:02:d7:d1:63:91: 9b:d8:c7:f7:d8:89:fc:76:bf:34:9d:a0:9f:7b:a6:f2:33:9e: 24:3a:0f:af:31:9c:4d:68:98:89:cf:6b:cc:9c:c3:b1:7e:8f: d8:e3:ca:df:03:eb:36:d2:39:35:eb:a4:b5:0b:a2:e2:79:cc: 80:5f:45:e7:03:cf:97:5b:48:f0:20:45:07:5c:aa:d5:94:96: cd:3b:83:4d:c4:08:92:99:42:d5:6d:6f:5b:dd:21:dc:a3:6c: 0c:08:53:14:51:25:58:21:65:ed:ae:18:8d:f7:fd:45:8a:c6: ea:27:43:16:15:28:0e:25:c9:86:be:59:da:57:41:f0:4a:7c: 07:03:66:da:89:b1:a5:a7:2a:6f:5f:4e:b1:3a:46:63:52:4f: a0:c6:dc:7c:ae:93:13:19:44:04:f0:ff:01:d6:0f:14:49:ab: f9:2f:f6:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoOTQzMzQ5RkRCNkRDMEFGMTVDRDU3NERBNDJGOEVDN0I0 OURDMERCNzAeFw0yNTA4MDkwODQwMjhaFw0yNTA4MTYwODQwMjhaMBgxFjAUBgNV BAMTDTY4OTcwOTdjLThlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFnzRfTwczc3m0TL4PAym+kIFidYaY7G719lvMhTduhMLjD52ksmQiozF/GFJ3 KQcRYqaiG7Vk0B5tJfPgLn/JKHH/kNNU9myovbudI74qpi/C6UOIEprXLY+VyJkq rtfN0737uz78ZB2xO20z8O3k4Wlj1o6nJ+9FjRYRP/8iszTZnUMFEV/0It71XUW5 3cKmfbaz8VYiM6KXxMpOx1MsHm5fbv/OqN2Am1FzXEccK+39rwWrrPJCvs5jGcOs DSn4ZywCH0dLXIQZPQb4CdhBE3dLBvEMtBH+3wxd4EdbNwq7z5/ryrqFUbqVcRJK TAhOa9UQO4XiKaqwq/R0bP/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjLUHYqoU Y+chQNNTaAqBt0sGSHkwHwYDVR0jBBgwFoAUlDNJ/bbcCvFc1XTaQvjse0ncDbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxL0Y2QTY0NUQ2NjdB MTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0Ri Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEROSl9iYmNDdkZjMVhUYVF2anNlMG5jRGJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxL0Y2QTY0NUQ2NjdBMTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZG YzFYVGFRdmpzZTBuY0RiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKziC47hVZiraxIBxb0KBxnW02KZ8ouU4U0LGXt6whr9Cu9OUQqBtyvm kRYuagO1iKW2Kjd1svQD8u8Tp5XWmcHXu8cEeuPGdbQN9cApzRsiQFZj7+kC19Fj kZvYx/fYifx2vzSdoJ97pvIzniQ6D68xnE1omInPa8ycw7F+j9jjyt8D6zbSOTXr pLULouJ5zIBfRecDz5dbSPAgRQdcqtWUls07g03ECJKZQtVtb1vdIdyjbAwIUxRR JVghZe2uGI33/UWKxuonQxYVKA4lyYa+WdpXQfBKfAcDZtqJsaWnKm9fTrE6RmNS T6DG3HyukxMZRATw/wHWDxRJq/kv9tc= -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:12 2025 by rpki-client