$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft File: rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json) Hash identifier: 4CAyXcU5NiL5iXt0J+0cb+RbtzN4sLGPg1YeRMUWNNA= Subject key identifier: A1:C9:85:F4:05:E0:B4:2C:FD:02:80:44:AF:0C:F6:C3:83:14:C4:08 Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 Certificate issuer: /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft Manifest number: D3 Signing time: Thu 07 Aug 2025 06:14:07 +0000 Manifest this update: Thu 07 Aug 2025 06:14:07 +0000 Manifest next update: Thu 14 Aug 2025 06:14:07 +0000 Files and hashes: 1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: MUCm4CiIGM+iX4uDgQAzhTtYOrwFrjTS3vuky9NMKIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BA0, serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Validity Not Before: Aug 7 06:14:07 2025 GMT Not After : Aug 14 06:14:07 2025 GMT Subject: CN=6894442f-2c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7d:a6:51:66:4c:21:55:d8:f4:4f:80:75:49: 46:aa:cf:66:0f:2c:23:9f:c2:55:fc:8a:cd:c6:a9: 88:e1:11:a9:48:e4:57:c9:a5:e5:62:dc:9d:d2:aa: a5:e6:33:b2:87:57:9f:5e:94:8d:ac:1c:66:30:f1: c7:e4:f3:40:e6:c0:ed:b5:82:bb:46:8d:c8:c2:2b: 82:b0:07:c4:cf:ea:60:37:5d:36:e0:10:ff:60:eb: 53:28:18:8b:12:76:57:72:83:0c:11:72:db:a1:66: bc:11:17:36:34:7f:79:77:fb:9e:d7:98:35:9b:cc: dc:78:3b:6b:98:2d:20:39:6f:01:a6:50:5c:eb:73: e8:df:ca:37:1d:7d:6d:7a:3b:1a:41:fc:db:e4:79: 99:64:cd:77:09:f3:00:37:87:58:25:c3:cd:6e:da: 5d:a4:48:5e:7a:05:58:63:fe:e1:ee:d3:7c:5c:91: ed:eb:12:47:b9:5b:38:ed:b7:34:b0:a5:0f:4e:f3: 08:7d:d8:07:7f:71:0b:c4:a4:c5:d4:e2:9d:7f:da: b3:dd:33:46:f4:f5:8c:dd:47:c8:72:8f:8d:7d:0a: da:09:5d:cf:12:c2:39:4b:1d:f3:a7:e2:53:5a:72: 3a:f9:cd:0c:8e:ef:38:09:16:14:50:17:96:1d:65: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:85:F4:05:E0:B4:2C:FD:02:80:44:AF:0C:F6:C3:83:14:C4:08 X509v3 Authority Key Identifier: keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f2:5a:ff:11:30:9a:52:95:54:87:0d:b5:3a:44:70:41:b7: 78:f6:f5:46:51:17:55:f3:a1:21:3a:e2:12:13:41:7f:48:0d: 8c:dd:23:c6:02:4c:82:39:0a:e8:97:c5:1e:f2:99:4e:07:cb: c2:cd:77:75:e1:6d:27:3e:83:e4:6a:a3:bd:f1:59:e3:b7:86: 79:7c:79:7d:21:89:4f:75:7a:ea:19:a0:6c:c8:bd:a6:c4:96: 5e:30:00:cd:5a:fa:96:b3:b1:79:76:0b:68:56:37:77:20:79: 9d:42:49:91:5d:23:7c:a4:72:7e:62:59:b6:55:fb:6d:d5:68: 82:fa:43:82:aa:30:52:bf:68:fb:ce:ea:c4:b0:1a:cc:04:fa: 2b:89:7a:5f:36:dd:f2:3e:9e:19:59:6d:01:d4:3b:af:80:da: c5:ac:69:21:94:dd:c9:67:3c:99:04:5d:0b:dd:71:c9:13:0f: 6d:0a:cb:f3:7d:49:fd:17:31:a4:47:f7:f9:31:c4:ba:a0:d9: c4:18:6e:a7:b7:9e:4d:60:94:e3:96:3e:41:47:90:b3:5b:26: 4e:6a:2c:6d:5b:69:60:6f:40:68:b4:6f:92:f9:0b:85:d3:d6: 1c:cd:80:8b:87:3b:60:aa:2d:3b:19:aa:41:07:ce:ca:9c:6f: ed:2d:e8:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCQTAxMTAvBgNVBAUTKEFDRkNCMzFFMkJFMkFEM0QxMkIxQTc5MTAyRkNCNEZE NThCQjY2ODMwHhcNMjUwODA3MDYxNDA3WhcNMjUwODE0MDYxNDA3WjAYMRYwFAYD VQQDEw02ODk0NDQyZi0yYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA132mUWZMIVXY9E+AdUlGqs9mDywjn8JV/IrNxqmI4RGpSORXyaXlYtyd0qql 5jOyh1efXpSNrBxmMPHH5PNA5sDttYK7Ro3IwiuCsAfEz+pgN1024BD/YOtTKBiL EnZXcoMMEXLboWa8ERc2NH95d/ue15g1m8zceDtrmC0gOW8BplBc63Po38o3HX1t ejsaQfzb5HmZZM13CfMAN4dYJcPNbtpdpEheegVYY/7h7tN8XJHt6xJHuVs47bc0 sKUPTvMIfdgHf3ELxKTF1OKdf9qz3TNG9PWM3UfIco+NfQraCV3PEsI5Sx3zp+JT WnI6+c0Mju84CRYUUBeWHWW1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHJhfQF 4LQs/QKARK8M9sODFMQIMB8GA1UdIwQYMBaAFKz8sx4r4q09ErGnkQL8tP1Yu2aD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JBMC9GNzM4M0Y4NDM4 RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJUMFNzYWVSQXZ5MF9WaTda b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JBMC9GNzM4M0Y4NDM4RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJU MFNzYWVSQXZ5MF9WaTdab00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT8lr/ETCaUpVUhw21OkRwQbd49vVGURdV86EhOuISE0F/SA2M3SPG AkyCOQrol8Ue8plOB8vCzXd14W0nPoPkaqO98Vnjt4Z5fHl9IYlPdXrqGaBsyL2m xJZeMADNWvqWs7F5dgtoVjd3IHmdQkmRXSN8pHJ+Ylm2Vftt1WiC+kOCqjBSv2j7 zurEsBrMBPoriXpfNt3yPp4ZWW0B1DuvgNrFrGkhlN3JZzyZBF0L3XHJEw9tCsvz fUn9FzGkR/f5McS6oNnEGG6nt55NYJTjlj5BR5CzWyZOaixtW2lgb0BotG+S+QuF 09YczYCLhztgqi07GapBB87KnG/tLejj -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:49 2025 by rpki-client