$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: dIzaQqFY386pU8degUZwa9OYLszGZJwwVCR8gu9nEX4= Subject key identifier: BE:76:A5:BD:4E:0B:15:C2:78:BF:6F:4A:00:2E:E9:EE:79:1B:EE:87 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 12B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 4779 Signing time: Fri 08 Aug 2025 14:21:17 +0000 Manifest this update: Fri 08 Aug 2025 14:21:17 +0000 Manifest next update: Fri 15 Aug 2025 14:21:17 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: 3h1GLHAXYBltcAGTF41W9QU/dF5eUDPbygw8hUxx7IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4787 (0x12b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Aug 8 14:21:17 2025 GMT Not After : Aug 15 14:21:17 2025 GMT Subject: CN=689607dd-7989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:01:35:51:c9:95:09:99:68:87:93:5e:80: 32:7d:84:ec:63:49:5a:0e:29:be:d7:69:ef:77:70: cd:07:c6:b3:3d:0e:fa:e7:4b:12:6a:6f:58:4f:15: f4:3e:ff:5e:6f:99:1b:7d:0b:11:4a:99:45:19:cf: fc:3b:bf:c7:e3:23:98:a9:ce:31:3c:03:72:30:b8: 18:00:88:1f:db:1a:92:00:13:86:be:32:21:1d:8e: a5:9e:22:d2:11:cf:70:48:2f:2b:48:fd:4e:39:1f: ab:a9:87:81:08:88:ce:d9:a6:8a:13:08:4c:35:17: 60:7e:63:2b:28:c9:31:17:1d:88:4d:9c:5a:12:98: a2:50:f4:cd:f2:cd:f6:1d:0d:7f:1c:03:94:b1:4a: a3:9d:a1:5d:cc:92:c0:75:4f:11:86:5b:bd:91:fe: 9f:e6:9b:eb:d2:71:87:79:e3:55:e4:f0:7f:4a:24: 82:df:63:72:f0:4a:fa:ec:af:57:51:1d:6f:d7:19: 31:58:8f:f0:b1:ea:8a:10:78:05:bc:a3:c1:c2:be: 5a:86:51:42:9c:8f:38:9e:c7:3d:83:1a:2c:c6:12: 0e:27:ad:21:1d:85:ca:38:54:d1:1d:a3:7a:78:06: f4:e3:49:07:4b:fd:79:55:4b:bb:17:fa:e5:67:26: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:A5:BD:4E:0B:15:C2:78:BF:6F:4A:00:2E:E9:EE:79:1B:EE:87 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:56:0a:10:79:b0:85:f2:84:99:66:e8:7d:57:0e:52:64:13: 8d:a4:8e:d3:00:9f:6a:c2:48:0b:1e:d6:8f:a6:97:d6:31:17: 98:3b:11:4e:c9:3a:ff:f1:08:1c:d3:8f:f0:01:3c:49:98:9f: 5b:45:a4:56:c7:63:7b:dc:3b:61:f9:44:49:a5:e1:5f:55:4c: 65:75:3f:2b:c4:e1:cc:c3:1b:68:3f:69:db:1e:8e:8b:ef:fc: 6a:8d:12:4a:df:2a:67:d9:c4:ef:63:69:d1:38:68:1e:73:fc: 45:1a:e1:d2:70:72:25:3c:31:3c:d9:5f:0d:70:f3:34:26:5a: 03:76:25:37:29:91:c9:57:be:f3:e5:fe:e2:1f:36:44:4f:5f: 76:53:06:d0:88:02:43:03:d4:c6:e0:4f:d6:82:eb:59:d9:e7: cc:25:78:49:75:20:06:3b:40:00:60:8a:a0:4f:53:53:ba:8a: 84:fe:9f:81:41:9b:e4:77:e9:76:6a:a1:51:d9:12:9f:8e:37: 35:0a:e5:e3:5d:97:3b:d8:58:7d:48:3a:66:52:76:15:05:e6: 6d:4f:d7:1a:2f:e4:cc:57:b3:e4:e8:79:3c:cb:e3:0c:4c:0a: 15:a3:35:5d:07:10:9c:5e:48:e3:3c:96:a9:12:31:f9:91:43: 13:d7:b7:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwODA4MTQyMTE3WhcNMjUwODE1MTQyMTE3WjAYMRYwFAYD VQQDEw02ODk2MDdkZC03OTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3YBNVHJlQmZaIeTXoAyfYTsY0laDim+12nvd3DNB8azPQ7650sSam9YTxX0 Pv9eb5kbfQsRSplFGc/8O7/H4yOYqc4xPANyMLgYAIgf2xqSABOGvjIhHY6lniLS Ec9wSC8rSP1OOR+rqYeBCIjO2aaKEwhMNRdgfmMrKMkxFx2ITZxaEpiiUPTN8s32 HQ1/HAOUsUqjnaFdzJLAdU8Rhlu9kf6f5pvr0nGHeeNV5PB/SiSC32Ny8Er67K9X UR1v1xkxWI/wseqKEHgFvKPBwr5ahlFCnI84nsc9gxosxhIOJ60hHYXKOFTRHaN6 eAb040kHS/15VUu7F/rlZyYKvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL52pb1O CxXCeL9vSgAu6e55G+6HMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZVgoQebCF8oSZZuh9Vw5SZBONpI7TAJ9qwkgLHtaPppfWMReYOxFO yTr/8Qgc04/wATxJmJ9bRaRWx2N73Dth+URJpeFfVUxldT8rxOHMwxtoP2nbHo6L 7/xqjRJK3ypn2cTvY2nROGgec/xFGuHScHIlPDE82V8NcPM0JloDdiU3KZHJV77z 5f7iHzZET192UwbQiAJDA9TG4E/WgutZ2efMJXhJdSAGO0AAYIqgT1NTuoqE/p+B QZvkd+l2aqFR2RKfjjc1CuXjXZc72Fh9SDpmUnYVBeZtT9caL+TMV7Pk6Hk8y+MM TAoVozVdBxCcXkjjPJapEjH5kUMT17cu -----END CERTIFICATE-----Generated at Sun Aug 10 13:50:05 2025 by rpki-client