$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: n9skCWRAS4gyfodIrIyEMl1a5R2jvJpZRneAKMggF2w= Subject key identifier: 7A:5B:A1:61:CB:4A:28:5D:C4:28:92:C3:6D:20:22:5D:8F:0B:CE:F1 Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: 0118 Signing time: Mon 11 Aug 2025 04:58:01 +0000 Manifest this update: Mon 11 Aug 2025 04:58:01 +0000 Manifest next update: Mon 18 Aug 2025 04:58:01 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: gZDlpmCQlhPP4OcHjK3V1ZXV6NaODERhzwdkYUrg0Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Aug 11 04:58:01 2025 GMT Not After : Aug 18 04:58:01 2025 GMT Subject: CN=68997859-2871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:82:a5:08:47:4a:32:af:75:06:78:ab:85: a5:5a:c4:00:a5:c6:a8:e5:52:2c:c5:70:22:f3:7e: 0a:74:af:f5:23:13:c5:9b:b1:c6:82:85:ad:49:ad: ba:7b:40:9f:e5:cf:4f:80:3a:73:1f:32:48:cc:11: bd:c5:f3:4e:af:7d:a7:98:46:cf:98:0b:4d:c9:dd: 0f:6a:2d:ff:a4:cd:14:1f:2c:96:1d:00:19:4c:2f: 6e:45:4b:90:3b:42:c0:73:7d:fc:1c:d2:6a:d2:34: ad:c3:62:06:c9:e1:bc:6c:8a:b0:22:a9:97:b8:46: ce:e4:ba:6a:a0:92:4f:07:4c:60:dd:88:f0:b9:3c: c1:52:f6:6f:26:0a:1c:47:e6:1c:7d:e0:11:42:14: 60:5c:c3:9a:03:85:88:e7:0b:2f:36:11:d1:1d:14: b7:46:e6:e8:2b:ef:fa:e4:48:fc:49:0e:59:14:3d: 24:98:74:f3:2c:be:9b:45:b2:26:15:06:b4:5d:85: ea:75:f2:7e:58:c3:3d:39:d5:ed:c6:5a:f7:db:db: c3:42:76:bb:55:e6:ed:0a:8f:cc:f5:dd:c5:46:da: 7b:27:06:12:5a:a1:6f:d4:95:66:c7:81:f0:5f:72: b5:a0:e4:75:9f:60:42:d2:a3:43:7b:49:33:b6:33: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5B:A1:61:CB:4A:28:5D:C4:28:92:C3:6D:20:22:5D:8F:0B:CE:F1 X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:1c:84:a6:a6:cd:68:72:bf:53:2d:43:c0:b4:c5:63:d1: 13:eb:f4:9b:42:16:87:43:75:7e:08:6b:25:e2:a7:54:7c:05: 16:9a:e6:92:32:3b:3e:aa:b7:05:8d:3d:45:8d:45:0e:be:37: 5a:78:9d:fb:96:40:53:aa:f7:5f:8c:12:ee:f8:e1:cc:c6:75: 68:e8:74:00:ac:b4:13:27:51:10:63:1b:88:1d:5e:d3:68:f1: 00:55:de:db:83:cb:98:be:62:2d:24:2e:d2:9f:25:73:85:68: 30:42:5a:8a:c5:d1:d6:df:69:9d:5a:d2:ab:5e:29:d9:ae:8a: e1:6a:ae:54:68:a4:43:8b:c6:79:7f:1d:4c:51:37:fb:d5:2b: 7b:b8:c6:93:b6:f9:25:7a:38:a7:c2:ae:1a:75:93:c3:cc:d5: ee:f4:3e:d9:f9:fb:fa:9c:27:d7:7b:ff:65:8a:17:77:0f:20: f0:dd:28:ff:5c:ca:8a:25:b1:64:51:2b:2b:53:87:4b:d2:78: 3a:3a:eb:1d:f3:6f:d5:d3:e4:59:46:d9:fd:88:e1:18:fb:f7: ba:06:84:83:6f:ce:82:77:ab:2c:da:4b:11:20:f4:48:0f:ec: 32:24:c3:ca:e7:0b:cb:ea:96:a7:ca:0b:dc:03:5b:98:01:73: 0f:31:46:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwODExMDQ1ODAxWhcNMjUwODE4MDQ1ODAxWjAYMRYwFAYD VQQDEw02ODk5Nzg1OS0yODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DOCpQhHSjKvdQZ4q4WlWsQApcao5VIsxXAi834KdK/1IxPFm7HGgoWtSa26 e0Cf5c9PgDpzHzJIzBG9xfNOr32nmEbPmAtNyd0Pai3/pM0UHyyWHQAZTC9uRUuQ O0LAc338HNJq0jStw2IGyeG8bIqwIqmXuEbO5LpqoJJPB0xg3YjwuTzBUvZvJgoc R+YcfeARQhRgXMOaA4WI5wsvNhHRHRS3RuboK+/65Ej8SQ5ZFD0kmHTzLL6bRbIm FQa0XYXqdfJ+WMM9OdXtxlr329vDQna7VebtCo/M9d3FRtp7JwYSWqFv1JVmx4Hw X3K1oOR1n2BC0qNDe0kztjPXewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpboWHL SihdxCiSw20gIl2PC87xMB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAInhyEpqbNaHK/Uy1DwLTFY9ET6/SbQhaHQ3V+CGsl4qdUfAUWmuaS Mjs+qrcFjT1FjUUOvjdaeJ37lkBTqvdfjBLu+OHMxnVo6HQArLQTJ1EQYxuIHV7T aPEAVd7bg8uYvmItJC7SnyVzhWgwQlqKxdHW32mdWtKrXinZrorhaq5UaKRDi8Z5 fx1MUTf71St7uMaTtvklejinwq4adZPDzNXu9D7Z+fv6nCfXe/9lihd3DyDw3Sj/ XMqKJbFkUSsrU4dL0ng6Ousd82/V0+RZRtn9iOEY+/e6BoSDb86Cd6ss2ksRIPRI D+wyJMPK5wvL6panygvcA1uYAXMPMUaP -----END CERTIFICATE-----Generated at Mon Aug 11 07:49:39 2025 by rpki-client