$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: 8NFZWleW717Z7OfXMeCdvJ063Qo6jWZpOj4KKwsqIdo= Subject key identifier: BF:B7:8F:FA:3F:5D:33:0A:99:6F:C8:E5:A2:25:67:2A:DF:06:8B:87 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 34A9 Signing time: Fri 08 Aug 2025 14:40:24 +0000 Manifest this update: Fri 08 Aug 2025 14:40:23 +0000 Manifest next update: Fri 15 Aug 2025 14:40:23 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: 5TvM4m20bqsL7eIcz+2L4nC7Zd14GgymPpTi/+wwdEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Aug 8 14:40:23 2025 GMT Not After : Aug 15 14:40:23 2025 GMT Subject: CN=68960c57-e1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:47:10:4a:f9:51:f8:6a:2f:5b:5e:74:d1: fc:82:e1:8e:0b:10:86:82:a4:5e:83:8d:e7:fe:cc: c2:89:0d:04:5f:c9:29:fe:f5:80:8a:d5:4d:5a:98: 70:a3:e4:d2:ea:d9:8c:6a:7c:f5:12:79:a7:20:6b: 94:4e:6b:40:c4:86:38:88:fa:ab:b3:48:f9:93:01: 83:8d:10:84:9a:f6:01:d8:46:3b:29:b4:a2:79:0e: 64:5b:70:e2:28:8c:c4:b2:2b:70:1f:21:88:bc:78: 03:8b:0e:71:b1:b5:ca:69:0f:fc:08:b9:b1:43:15: 87:af:24:a6:50:d7:c9:47:86:60:c3:a7:91:50:f5: 72:e6:b8:5d:e0:74:5b:f6:5e:db:d4:ba:b2:19:e4: 98:7c:e5:be:f1:30:29:fe:10:2e:0a:c0:e7:dc:3f: ff:af:d6:70:45:4c:de:49:7a:3a:e5:8e:a4:b1:d7: 2b:fd:6b:cb:43:02:b6:bb:68:70:2c:a7:a6:f6:59: a7:90:7d:66:3a:51:56:06:11:e7:fa:72:06:2b:be: 46:bf:cd:e4:5a:5f:6b:b2:e9:80:7f:72:f1:4c:f3: a0:c8:1c:ba:fe:ee:71:b1:bc:07:04:81:f5:ec:53: ac:e6:92:ae:cd:81:ed:08:dd:cd:f9:07:1a:3a:20: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B7:8F:FA:3F:5D:33:0A:99:6F:C8:E5:A2:25:67:2A:DF:06:8B:87 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:2a:6d:05:58:2a:55:7f:eb:dc:ba:ba:e2:ec:8e:7a:8c:66: d9:80:97:ae:fd:d1:6c:85:1e:61:82:3a:de:e6:6c:10:cd:96: 05:ed:bc:1b:4e:45:6c:2b:8a:e9:d5:5e:e5:8f:de:32:9d:8d: fb:64:d5:93:47:de:c0:c5:be:68:4b:4b:29:dc:c6:d7:7d:0d: 2c:19:d5:5c:47:d9:cc:62:f8:32:bf:79:f6:33:1b:b9:1e:8b: c9:9d:03:27:37:1f:67:7a:dd:f3:17:c9:7f:e2:0b:f4:33:64: fb:ae:be:e9:77:3a:b6:49:6e:a4:b6:a5:6b:f7:4d:1b:65:83: 80:29:a5:5c:11:9d:9d:29:ba:e4:55:41:d0:2e:d4:69:ad:d9: 3b:4b:96:7c:28:93:a0:20:85:07:dd:3c:49:75:24:3a:dc:4b: aa:19:0b:77:d0:d3:8d:6b:59:4f:32:ed:a2:6b:9d:5f:f9:fb: 70:d7:80:d8:a3:91:fe:89:b1:c2:f5:56:a0:32:a1:2c:6e:2c: 21:09:14:3a:f0:0b:df:e2:eb:c5:49:dc:f8:66:20:a5:79:81: a7:52:13:56:9e:fd:80:59:bf:53:bf:26:bc:6b:83:e6:0d:50: df:a9:09:7c:b4:65:31:27:5d:be:84:5c:59:97:b5:12:c1:6f: 09:f2:65:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwODA4MTQ0MDIzWhcNMjUwODE1MTQ0MDIzWjAYMRYwFAYD VQQDEw02ODk2MGM1Ny1lMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub1HEEr5UfhqL1tedNH8guGOCxCGgqReg43n/szCiQ0EX8kp/vWAitVNWphw o+TS6tmManz1EnmnIGuUTmtAxIY4iPqrs0j5kwGDjRCEmvYB2EY7KbSieQ5kW3Di KIzEsitwHyGIvHgDiw5xsbXKaQ/8CLmxQxWHrySmUNfJR4Zgw6eRUPVy5rhd4HRb 9l7b1LqyGeSYfOW+8TAp/hAuCsDn3D//r9ZwRUzeSXo65Y6ksdcr/WvLQwK2u2hw LKem9lmnkH1mOlFWBhHn+nIGK75Gv83kWl9rsumAf3LxTPOgyBy6/u5xsbwHBIH1 7FOs5pKuzYHtCN3N+QcaOiD/fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+3j/o/ XTMKmW/I5aIlZyrfBouHMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFKm0FWCpVf+vcurri7I56jGbZgJeu/dFshR5hgjre5mwQzZYF7bwb TkVsK4rp1V7lj94ynY37ZNWTR97Axb5oS0sp3MbXfQ0sGdVcR9nMYvgyv3n2Mxu5 HovJnQMnNx9net3zF8l/4gv0M2T7rr7pdzq2SW6ktqVr900bZYOAKaVcEZ2dKbrk VUHQLtRprdk7S5Z8KJOgIIUH3TxJdSQ63EuqGQt30NONa1lPMu2ia51f+ftw14DY o5H+ibHC9VagMqEsbiwhCRQ68Avf4uvFSdz4ZiCleYGnUhNWnv2AWb9Tvya8a4Pm DVDfqQl8tGUxJ12+hFxZl7USwW8J8mXM -----END CERTIFICATE-----Generated at Sat Aug 9 10:36:06 2025 by rpki-client