$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json) Hash identifier: 55DYQsxSdC8PyLKCbVVv01nC9QDW3/j10bgU6dtC4Do= Subject key identifier: 23:9F:4C:26:FF:3A:4B:C3:17:C9:37:36:95:F1:72:DE:A3:15:D5:8F Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft Manifest number: 0536 Signing time: Fri 08 Aug 2025 23:58:07 +0000 Manifest this update: Fri 08 Aug 2025 23:58:06 +0000 Manifest next update: Fri 15 Aug 2025 23:58:06 +0000 Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: Zgp+jTrB7spZBiyWCdCzR3JQbzcIaM34pRtBZTwMoaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Validity Not Before: Aug 8 23:58:06 2025 GMT Not After : Aug 15 23:58:06 2025 GMT Subject: CN=68968f0f-561f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:d8:09:ea:ce:36:0c:c5:a6:51:6e:97:00: bd:f4:2a:90:a5:a8:19:71:01:27:84:85:58:28:cf: 7d:35:78:c6:a2:bf:ef:4f:e2:33:30:3c:3e:29:fa: 46:c1:7a:d9:c6:44:46:e5:68:ee:e2:69:b7:2b:4d: 7c:03:39:50:6d:e2:a8:54:f3:0a:d8:f6:20:e9:d6: e2:81:4a:22:d8:ff:2e:30:9e:c6:e2:24:df:d9:f9: 5f:78:a0:2c:05:b8:ce:58:dd:4c:c4:d9:55:7d:b7: 55:b4:9a:b8:59:54:1b:89:a5:d9:f7:67:f7:bf:bf: a7:4b:0c:97:64:0b:fc:9a:b9:06:9b:eb:8c:24:89: cc:68:55:91:ab:73:57:ee:9c:11:59:89:59:40:02: 1c:80:17:4c:e5:05:e5:3a:35:62:36:d7:9c:68:a8: cd:11:fc:7c:bd:c4:c8:78:d5:c2:dd:ca:2c:e3:57: 2a:c1:c8:3d:6f:c8:ba:c0:1b:41:9b:40:eb:c8:f0: ab:da:b1:42:25:4b:1f:48:7b:40:ed:78:ba:ae:cf: 56:26:b9:9d:cf:23:ae:8e:5a:c9:50:83:3d:26:89: 77:d8:ff:ab:fb:be:44:47:d1:b4:90:db:6e:26:b3: 71:a7:36:6c:20:8a:58:aa:61:0d:68:e5:e5:d7:8d: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9F:4C:26:FF:3A:4B:C3:17:C9:37:36:95:F1:72:DE:A3:15:D5:8F X509v3 Authority Key Identifier: keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:1b:03:9e:92:af:9c:d8:fb:3d:4c:83:52:8b:95:b2:83: cd:b2:c8:ca:d5:46:ce:21:fc:70:94:6b:26:7f:53:d0:cd:6e: be:ed:0b:07:d6:2f:c8:88:db:5b:7a:d1:74:c9:91:79:6a:e2: b6:d7:ea:64:0e:25:26:8f:4e:9f:66:28:56:ac:e1:93:02:c7: d5:0b:57:94:43:30:69:ad:58:33:4f:a2:ac:bc:f4:7e:ad:f6: a0:66:ac:cc:24:51:e4:c2:f5:47:8e:db:95:0e:51:d5:eb:68: 9a:30:c6:64:07:6a:78:55:08:d6:e4:1b:95:0b:00:08:c6:3c: 1b:cc:77:af:e7:e3:f8:7f:70:c4:ae:6f:a4:0d:e4:12:c0:eb: 15:f1:85:f6:f7:48:41:75:ea:70:3e:72:7a:43:9d:21:94:48: 0d:9d:d5:b7:1d:58:d1:85:18:f9:11:7c:7a:0e:ed:f4:95:58: dd:74:57:42:4e:be:2e:f0:ef:5b:07:81:68:fc:cb:de:4e:d7: 66:5e:39:13:93:bd:43:4a:4c:14:2a:27:a0:67:9d:03:9c:6b: 57:8b:9f:13:68:8b:09:94:6e:93:2b:71:b5:d7:8a:63:a0:fd: 03:aa:55:aa:e5:1f:59:0b:45:8a:8c:c7:6d:6c:0f:7f:35:43: ea:68:e7:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKEQxMkZGNUJERTVENEQyRUE3MTg4Q0IwMDJDN0ZGMDE2 REM5OTRENzIwHhcNMjUwODA4MjM1ODA2WhcNMjUwODE1MjM1ODA2WjAYMRYwFAYD VQQDEw02ODk2OGYwZi01NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnynYCerONgzFplFulwC99CqQpagZcQEnhIVYKM99NXjGor/vT+IzMDw+KfpG wXrZxkRG5Wju4mm3K018AzlQbeKoVPMK2PYg6dbigUoi2P8uMJ7G4iTf2flfeKAs BbjOWN1MxNlVfbdVtJq4WVQbiaXZ92f3v7+nSwyXZAv8mrkGm+uMJInMaFWRq3NX 7pwRWYlZQAIcgBdM5QXlOjViNtecaKjNEfx8vcTIeNXC3cos41cqwcg9b8i6wBtB m0DryPCr2rFCJUsfSHtA7Xi6rs9WJrmdzyOujlrJUIM9Jol32P+r+75ER9G0kNtu JrNxpzZsIIpYqmENaOXl140Q0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOfTCb/ OkvDF8k3NpXxct6jFdWPMB8GA1UdIwQYMBaAFNEv9b3l1NLqcYjLACx/8BbcmU1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9EMzE2N0YwQTA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1cHhpTXNBTEhfd0Z0eVpU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBTXzF2ZVhVMHVweGlNc0FMSF93RnR5WlRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9EMzE2N0YwQTA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1 cHhpTXNBTEhfd0Z0eVpUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB7RsDnpKvnNj7PUyDUouVsoPNssjK1UbOIfxwlGsmf1PQzW6+7QsH 1i/IiNtbetF0yZF5auK21+pkDiUmj06fZihWrOGTAsfVC1eUQzBprVgzT6KsvPR+ rfagZqzMJFHkwvVHjtuVDlHV62iaMMZkB2p4VQjW5BuVCwAIxjwbzHev5+P4f3DE rm+kDeQSwOsV8YX290hBdepwPnJ6Q50hlEgNndW3HVjRhRj5EXx6Du30lVjddFdC Tr4u8O9bB4Fo/MveTtdmXjkTk71DSkwUKiegZ50DnGtXi58TaIsJlG6TK3G114pj oP0DqlWq5R9ZC0WKjMdtbA9/NUPqaOdU -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:20 2025 by rpki-client