$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: g9FRO47+fhkXXJZl6kuSwT9iQWzZ86hQIgTdJHhnWzA= Subject key identifier: 49:34:E6:80:FA:71:16:E6:3B:19:2D:FC:15:B2:A2:8B:1D:C7:E4:EF Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 22 Signing time: Tue 05 Aug 2025 08:33:39 +0000 Manifest this update: Tue 05 Aug 2025 08:33:38 +0000 Manifest next update: Tue 12 Aug 2025 08:33:38 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: XZgyDWVvGdm6wlfjicPsg4UM95RjuNEi0+b0PwRDCH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Aug 5 08:33:38 2025 GMT Not After : Aug 12 08:33:38 2025 GMT Subject: CN=6891c1e3-d134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:a4:bf:96:6f:99:07:00:b7:77:a5:55:0a: cb:3a:ba:07:e6:8a:e1:67:9a:d1:3d:51:cc:f9:d2: 53:26:c6:37:18:02:24:b0:25:1b:b6:5e:f7:1b:a6: 26:d8:25:c3:3b:32:ef:a7:b0:1e:0d:70:14:aa:9b: 60:ef:71:99:6d:a5:aa:11:51:72:af:81:0b:a2:19: 2d:a1:14:bf:fb:bf:b8:16:88:68:ed:a3:bc:e9:de: d4:78:32:fd:a1:42:3f:35:ac:1c:65:de:f8:91:72: de:c0:a6:82:dd:0c:9a:60:96:a4:ae:92:00:0c:7a: 6e:54:e6:42:9e:3e:eb:e1:61:bb:c7:d6:e1:88:e4: d2:ee:6d:b6:51:b6:dd:08:06:30:e1:91:17:0c:74: 07:01:09:99:88:ca:5e:d6:36:64:85:34:eb:4d:7f: 1a:3d:77:50:e4:7e:e1:d7:a4:4a:dc:1a:99:2e:2f: c6:9a:42:b5:40:b7:9a:40:7c:5e:2c:4e:a5:c1:42: e7:8c:f4:9c:32:b0:35:f0:62:bf:22:91:c2:d2:7c: ec:d2:de:fa:7a:17:27:06:f1:83:30:5b:f7:5a:88: f4:b6:78:c5:1e:0f:6b:f9:22:e2:35:5a:79:f8:c8: 75:26:67:92:45:87:87:26:de:17:04:bc:c4:63:bb: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:34:E6:80:FA:71:16:E6:3B:19:2D:FC:15:B2:A2:8B:1D:C7:E4:EF X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d0:08:52:52:7f:bc:40:64:60:3a:96:ce:16:46:d7:b8:a1: ed:84:2e:51:97:ae:64:de:ce:45:53:21:b8:9f:cb:50:d3:1e: e0:43:5e:76:1a:69:d7:9c:31:13:a0:61:15:09:2d:b3:71:a8: 7d:43:4f:7b:3f:1d:de:b9:ab:24:b1:cc:43:c4:ba:c0:d0:ec: ec:f1:3d:7c:27:1b:4f:35:99:da:8f:20:06:c9:d7:69:93:c4: 15:39:f7:cb:cb:1d:8a:30:f2:16:88:1d:15:20:fe:cd:12:76: 60:b9:5a:4e:32:e6:f3:b7:f3:66:60:7b:f7:3c:63:95:3b:5a: 49:7f:5d:c5:9f:bc:9f:8b:dd:f5:06:47:62:fc:bb:87:76:fa: 66:27:3e:48:4c:6b:e2:72:5e:5e:55:93:ed:eb:12:5a:38:35: b8:f7:49:f8:b3:9f:20:74:2f:7f:5a:80:00:a6:79:3a:74:92: 5c:55:8c:60:a3:c3:23:33:6b:56:00:10:cd:73:f2:5a:c6:27: 14:06:c2:90:b9:25:45:7d:c6:1d:c3:d8:14:2e:b3:57:64:58: 52:36:ec:f7:43:68:da:6c:7f:31:23:84:87:3f:2e:b1:29:de: ac:60:e8:ab:b0:6c:55:09:60:84:81:80:a6:73:cd:5e:a2:04: 74:14:39:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNTA4MDUwODMzMzhaFw0yNTA4MTIwODMzMzhaMBgxFjAUBgNV BAMTDTY4OTFjMWUzLWQxMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3J6S/lm+ZBwC3d6VVCss6ugfmiuFnmtE9Ucz50lMmxjcYAiSwJRu2XvcbpibY JcM7Mu+nsB4NcBSqm2DvcZltpaoRUXKvgQuiGS2hFL/7v7gWiGjto7zp3tR4Mv2h Qj81rBxl3viRct7ApoLdDJpglqSukgAMem5U5kKePuvhYbvH1uGI5NLubbZRtt0I BjDhkRcMdAcBCZmIyl7WNmSFNOtNfxo9d1DkfuHXpErcGpkuL8aaQrVAt5pAfF4s TqXBQueM9JwysDXwYr8ikcLSfOzS3vp6FycG8YMwW/daiPS2eMUeD2v5IuI1Wnn4 yHUmZ5JFh4cm3hcEvMRjux2ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSTTmgPpx FuY7GS38FbKiix3H5O8wHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABLQCFJSf7xAZGA6ls4WRte4oe2ELlGXrmTezkVTIbify1DTHuBDXnYa adecMROgYRUJLbNxqH1DT3s/Hd65qySxzEPEusDQ7OzxPXwnG081mdqPIAbJ12mT xBU598vLHYow8haIHRUg/s0SdmC5Wk4y5vO382Zge/c8Y5U7Wkl/XcWfvJ+L3fUG R2L8u4d2+mYnPkhMa+JyXl5Vk+3rElo4Nbj3SfiznyB0L39agACmeTp0klxVjGCj wyMza1YAEM1z8lrGJxQGwpC5JUV9xh3D2BQus1dkWFI27PdDaNpsfzEjhIc/LrEp 3qxg6KuwbFUJYISBgKZzzV6iBHQUOeA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:18 2025 by rpki-client