$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: 7jyQ6/HED0of4Ypi5NqY1Z7vfrEN3FwI0VO8lUYzxvU= Subject key identifier: 00:C5:43:BC:B5:7B:C7:B8:51:95:08:E8:8C:95:10:F9:7D:2B:92:E8 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 2D Signing time: Tue 05 Aug 2025 08:22:47 +0000 Manifest this update: Tue 05 Aug 2025 08:22:47 +0000 Manifest next update: Tue 12 Aug 2025 08:22:47 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: mt7pGVPcqB6GUAFA01n59iY70Ff800iVEN3NDgKiDoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Aug 5 08:22:47 2025 GMT Not After : Aug 12 08:22:47 2025 GMT Subject: CN=6891bf57-761e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:9b:95:73:0b:08:4f:c8:81:13:24:ad:33: e4:d6:52:44:df:20:26:d9:49:c0:c9:7a:e1:c9:1a: ed:1b:78:1b:b0:3d:f7:d3:89:1c:70:ee:b2:d6:6e: 39:3a:be:8f:4f:cd:b9:07:ee:de:80:58:df:a3:f7: 60:14:62:97:36:4a:fc:6d:84:4c:a3:62:ad:bc:ff: a7:e0:92:01:fd:ff:66:7a:02:fd:28:3a:fe:92:be: 0c:56:2b:01:80:64:e7:cd:ee:4d:ce:1c:89:b4:e4: dc:3a:9d:d9:b8:00:43:6a:61:58:bc:b9:b4:70:55: f9:88:9a:02:37:98:c1:da:89:4c:55:c9:8b:e6:ea: 31:21:70:cb:67:9e:8e:83:c9:7b:cd:8e:de:aa:e2: ea:60:7e:b1:69:54:28:8f:59:21:a7:c8:ca:4e:81: 67:86:93:a9:86:fb:22:ce:86:c8:89:80:ea:d1:fb: 29:48:47:49:95:34:78:f8:6d:88:53:ba:59:ef:cc: e9:7d:87:86:76:c3:5f:11:6f:f6:75:0a:12:43:58: d0:99:d7:bd:5b:bc:2b:f5:a8:50:05:78:b0:8c:1d: 8d:61:7f:4a:61:da:5d:41:04:a0:f6:54:53:c1:c8: ee:c2:bc:75:2e:3e:67:3f:1e:19:e3:cd:32:fe:0a: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:43:BC:B5:7B:C7:B8:51:95:08:E8:8C:95:10:F9:7D:2B:92:E8 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:60:14:24:ff:05:bc:0a:70:b3:3c:a8:66:28:39:21:14:96: 83:13:a2:60:30:e8:3f:eb:8a:1e:9d:fa:3e:2b:aa:cb:1e:fb: e2:c4:00:2f:79:b4:d1:4a:31:f2:50:49:e1:7a:63:03:d6:08: 46:b8:02:92:66:96:60:00:bb:57:87:56:87:e8:21:71:42:58: 14:68:47:80:03:aa:3d:8a:7f:e5:04:d2:b2:cb:30:eb:0c:91: 49:87:ec:56:85:b6:b0:74:36:a5:3b:74:1b:1c:00:fb:f6:f7: 3a:a8:82:c9:84:65:4c:ab:d2:52:29:d9:a2:da:98:dc:f2:6a: 7e:8a:6b:4d:97:5e:46:a3:b9:8d:2c:6e:1a:0c:38:b3:3f:b3: 8a:70:c2:d5:62:7c:73:0a:42:16:15:44:f5:85:10:cd:2d:dd: 61:10:5a:e8:14:0d:ce:a2:e5:20:02:c0:87:aa:64:aa:a2:c7: ac:87:aa:fd:a7:d1:ce:6b:3f:4b:8d:20:83:50:76:2f:b3:2a: 16:f0:68:45:a7:ce:fd:a9:5c:5f:22:92:05:ec:fd:37:1b:ce: ad:b8:09:fe:c2:18:0b:ce:09:e2:45:d9:17:6e:8b:aa:f2:57: c0:0f:e8:0a:71:5d:ad:3d:65:a5:6e:14:cf:98:73:90:24:85: a3:21:db:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTA4MDUwODIyNDdaFw0yNTA4MTIwODIyNDdaMBgxFjAUBgNV BAMTDTY4OTFiZjU3LTc2MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWuZuVcwsIT8iBEyStM+TWUkTfICbZScDJeuHJGu0beBuwPffTiRxw7rLWbjk6 vo9PzbkH7t6AWN+j92AUYpc2SvxthEyjYq28/6fgkgH9/2Z6Av0oOv6SvgxWKwGA ZOfN7k3OHIm05Nw6ndm4AENqYVi8ubRwVfmImgI3mMHaiUxVyYvm6jEhcMtnno6D yXvNjt6q4upgfrFpVCiPWSGnyMpOgWeGk6mG+yLOhsiJgOrR+ylIR0mVNHj4bYhT ulnvzOl9h4Z2w18Rb/Z1ChJDWNCZ171bvCv1qFAFeLCMHY1hf0ph2l1BBKD2VFPB yO7CvHUuPmc/HhnjzTL+Cq+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAMVDvLV7 x7hRlQjojJUQ+X0rkugwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL1gFCT/BbwKcLM8qGYoOSEUloMTomAw6D/rih6d+j4rqsse++LEAC95 tNFKMfJQSeF6YwPWCEa4ApJmlmAAu1eHVofoIXFCWBRoR4ADqj2Kf+UE0rLLMOsM kUmH7FaFtrB0NqU7dBscAPv29zqogsmEZUyr0lIp2aLamNzyan6Ka02XXkajuY0s bhoMOLM/s4pwwtVifHMKQhYVRPWFEM0t3WEQWugUDc6i5SACwIeqZKqix6yHqv2n 0c5rP0uNIINQdi+zKhbwaEWnzv2pXF8ikgXs/Tcbzq24Cf7CGAvOCeJF2Rdui6ry V8AP6ApxXa09ZaVuFM+Yc5AkhaMh2wI= -----END CERTIFICATE-----Generated at Thu Aug 7 04:02:53 2025 by rpki-client