$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: S6ikhP+jSwsFWyB63iRPxylEJd9Bxhm7nrDqF1pDbV4= Subject key identifier: 70:11:A6:C8:33:29:28:90:50:DD:8A:3A:A8:9E:5E:88:E2:44:76:AF Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1A99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 21BA Signing time: Fri 08 Aug 2025 16:02:46 +0000 Manifest this update: Fri 08 Aug 2025 16:02:46 +0000 Manifest next update: Fri 15 Aug 2025 16:02:46 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: EfzI/RE1SRA7Mx09hLp4G9v512/UbX+bYFMb2XfEM1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6809 (0x1a99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Validity Not Before: Aug 8 16:02:46 2025 GMT Not After : Aug 15 16:02:46 2025 GMT Subject: CN=68961fa6-233c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:1c:b6:31:52:04:04:74:58:3d:e7:16:16: 45:62:96:10:86:42:7e:a9:bb:d9:a5:6c:c6:30:c3: fe:18:97:48:72:f2:91:62:cc:65:46:7a:10:c0:bc: d2:c4:08:e3:f4:22:94:6d:36:36:c9:41:26:49:2b: d1:a8:17:45:ea:7f:aa:65:bd:bb:46:1b:48:c0:9c: 6c:e2:ee:01:b2:f9:b1:a1:02:b9:2e:c0:63:6c:48: 1f:f3:fc:b5:15:09:9c:3b:28:ea:4a:4c:36:aa:8d: 2e:0f:02:c8:90:67:46:de:6f:6e:bc:f0:be:12:1b: 81:20:d8:c0:46:42:8b:08:d7:0b:3b:08:36:64:80: 03:17:70:80:f8:f4:c2:81:17:72:b6:7b:dd:9b:cc: b9:e6:90:3b:10:b2:80:55:78:0d:0e:fe:26:34:ef: c6:2f:5c:bb:9e:81:a2:36:1e:55:5b:2e:8d:3b:a5: 29:b2:85:75:49:3d:e5:dc:b0:7c:2f:6a:20:f1:59: 7b:6d:ef:0e:2e:53:76:ec:1b:87:b5:66:ec:2e:9e: 5b:25:3e:08:59:05:0a:96:36:37:23:4a:9b:94:63: e6:c6:af:29:78:06:26:15:05:a2:34:e9:34:2b:da: 3a:21:91:8a:be:e0:0b:8e:e8:f3:0d:b4:a2:03:9a: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:11:A6:C8:33:29:28:90:50:DD:8A:3A:A8:9E:5E:88:E2:44:76:AF X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ef:55:58:7d:21:e0:a9:28:2f:65:fd:90:a1:38:c6:55:1d: 4a:eb:88:3d:10:15:19:79:f1:7d:c5:64:5b:6d:9a:26:e6:ab: ba:78:08:27:f8:47:a4:10:90:8c:a5:b7:27:e9:3f:33:af:38: 50:18:16:81:2d:db:04:f1:5d:6e:3d:0e:b2:c1:e1:6f:77:d0: 9a:e2:c8:c3:85:79:b3:9f:be:d6:e8:4f:00:a0:24:ee:22:a9: aa:1a:77:5d:22:d9:51:44:3c:12:5c:91:7f:70:b7:87:7e:63: 17:a3:5e:39:36:be:a7:29:56:b9:b3:5d:00:40:24:3a:ce:e9: 0a:0f:ca:c0:24:2e:fc:a9:cd:5c:ff:63:5d:11:7b:3d:92:b1: 18:7e:c1:8e:eb:f3:a5:f1:b9:00:dd:7a:ee:8c:86:37:5a:4b: de:11:4f:9c:f0:e5:be:00:41:4d:83:40:c1:f0:b7:57:e8:84: b4:f1:87:04:ad:6e:1a:ad:bd:f4:ef:84:65:24:ab:2e:b1:5f: 68:29:a8:0b:9a:5f:e1:96:0d:78:49:9b:94:27:19:63:40:9a: e2:dc:42:20:d9:74:2e:63:f1:cb:d7:d9:c4:6c:7b:9a:59:15: b9:e0:01:cd:72:d1:c1:13:9a:9e:f9:cb:28:e9:30:d7:53:ec: 41:57:92:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUwODA4MTYwMjQ2WhcNMjUwODE1MTYwMjQ2WjAYMRYwFAYD VQQDEw02ODk2MWZhNi0yMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni4ctjFSBAR0WD3nFhZFYpYQhkJ+qbvZpWzGMMP+GJdIcvKRYsxlRnoQwLzS xAjj9CKUbTY2yUEmSSvRqBdF6n+qZb27RhtIwJxs4u4BsvmxoQK5LsBjbEgf8/y1 FQmcOyjqSkw2qo0uDwLIkGdG3m9uvPC+EhuBINjARkKLCNcLOwg2ZIADF3CA+PTC gRdytnvdm8y55pA7ELKAVXgNDv4mNO/GL1y7noGiNh5VWy6NO6UpsoV1ST3l3LB8 L2og8Vl7be8OLlN27BuHtWbsLp5bJT4IWQUKljY3I0qblGPmxq8peAYmFQWiNOk0 K9o6IZGKvuALjujzDbSiA5q4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHARpsgz KSiQUN2KOqieXojiRHavMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd71VYfSHgqSgvZf2QoTjGVR1K64g9EBUZefF9xWRbbZom5qu6eAgn +EekEJCMpbcn6T8zrzhQGBaBLdsE8V1uPQ6yweFvd9Ca4sjDhXmzn77W6E8AoCTu IqmqGnddItlRRDwSXJF/cLeHfmMXo145Nr6nKVa5s10AQCQ6zukKD8rAJC78qc1c /2NdEXs9krEYfsGO6/Ol8bkA3XrujIY3WkveEU+c8OW+AEFNg0DB8LdX6IS08YcE rW4arb3074RlJKsusV9oKagLml/hlg14SZuUJxljQJri3EIg2XQuY/HL19nEbHua WRW54AHNctHBE5qe+cso6TDXU+xBV5K/ -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:22 2025 by rpki-client