$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json) Hash identifier: sjgV4JBD2+yt6BfMEjhdbuunS0f6+7OCf9xvotbkNLg= Subject key identifier: DB:31:65:38:D0:EE:38:C4:62:E9:94:6B:F8:EB:C9:58:C6:63:E2:09 Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft Manifest number: 51 Signing time: Tue 05 Aug 2025 07:51:54 +0000 Manifest this update: Tue 05 Aug 2025 07:51:54 +0000 Manifest next update: Tue 12 Aug 2025 07:51:54 +0000 Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: S45ZnPoyrDGv1gBzmpRerNIdWIaR8atQLXoypnUmBE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Validity Not Before: Aug 5 07:51:54 2025 GMT Not After : Aug 12 07:51:54 2025 GMT Subject: CN=6891b81a-0036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:0a:90:97:17:2c:be:7f:84:5e:41:e0:65: fa:ec:a3:c3:0c:67:0a:e1:52:27:ea:f9:df:8e:5b: 76:2f:87:30:75:2b:a7:07:f1:99:87:02:20:7f:bc: 79:56:5d:63:c7:20:c2:29:f1:c3:46:b2:e3:75:b7: a5:30:55:29:cf:97:ca:52:a3:70:43:b5:0b:f9:e6: df:ff:7c:b7:7b:0a:eb:9a:45:7c:a7:a0:96:72:10: 6c:5a:a6:11:f7:f6:59:38:18:5c:38:3f:77:2a:75: 2a:2f:84:f0:07:41:0f:6f:1f:85:ee:35:f9:f3:01: 05:b8:0f:13:7d:5c:03:ba:6e:1a:4a:a2:83:83:23: ac:ac:04:c1:18:95:82:67:c0:f5:ec:45:cd:6e:19: 38:84:ea:8c:25:23:57:66:16:65:5f:37:4f:b8:e7: 57:23:7e:a6:f2:66:74:48:3f:90:35:e8:6f:d3:2c: 3a:99:11:a1:65:0e:65:43:3a:13:7b:74:0f:07:0b: ce:e7:4c:e3:c5:85:29:47:3b:94:32:34:1b:b3:de: 2b:33:25:6a:66:eb:35:58:a7:8a:c9:b1:5f:2a:48: 6b:b7:23:86:a2:01:3e:99:a4:c6:d9:a3:f7:a8:40: 1c:8a:6d:6e:68:d5:e6:f0:09:06:44:71:dd:82:4f: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:31:65:38:D0:EE:38:C4:62:E9:94:6B:F8:EB:C9:58:C6:63:E2:09 X509v3 Authority Key Identifier: keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:be:e8:5f:52:07:d5:ef:60:c3:c6:1a:33:f5:1a:62:07:2a: 79:42:0a:b0:a3:dc:04:bd:de:c0:c3:a5:2f:ca:f2:63:52:2a: a8:21:ed:8e:9c:c2:45:7b:01:06:4a:10:61:5a:b8:cf:5a:89: 32:ac:89:39:27:81:1b:f8:71:5f:06:cb:05:c1:8f:5b:9b:dc: f5:59:0c:b3:10:7f:75:0a:a5:a3:a1:dc:e1:20:8a:80:20:64: 7d:10:42:dd:d0:de:34:c0:27:be:65:37:65:3d:25:3c:d8:3f: 0f:57:2b:88:cf:ce:de:18:40:15:1b:aa:4d:52:b0:f1:15:ba: bc:e7:a3:25:0d:76:1d:0c:45:e4:03:30:1b:1a:70:3b:c4:06: 47:de:99:f4:f5:bb:93:2e:1a:36:e6:20:c5:81:d4:a0:cb:fe: 22:5e:99:db:59:19:8d:27:43:87:93:04:68:23:44:1e:90:a6: 69:fd:dc:3c:c7:40:75:0b:3b:d0:0a:87:6f:3c:b4:ea:f1:a8: ba:93:f7:ed:d8:39:69:58:f7:1a:6e:c6:fc:cf:92:f6:94:32: 60:41:a0:66:5d:90:8d:98:97:00:aa:34:a9:d1:97:61:b8:68: e4:8f:53:71:5d:62:0d:27:67:80:7e:8b:d7:ee:9e:12:37:30: 58:fe:59:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNzlGNUVEQTRDNzBFMkUwM0U5MDhCODE4QzE3NzU4RjJB NjY5Nzc1NzAeFw0yNTA4MDUwNzUxNTRaFw0yNTA4MTIwNzUxNTRaMBgxFjAUBgNV BAMTDTY4OTFiODFhLTAwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2eAqQlxcsvn+EXkHgZfrso8MMZwrhUifq+d+OW3YvhzB1K6cH8ZmHAiB/vHlW XWPHIMIp8cNGsuN1t6UwVSnPl8pSo3BDtQv55t//fLd7CuuaRXynoJZyEGxaphH3 9lk4GFw4P3cqdSovhPAHQQ9vH4XuNfnzAQW4DxN9XAO6bhpKooODI6ysBMEYlYJn wPXsRc1uGTiE6owlI1dmFmVfN0+451cjfqbyZnRIP5A16G/TLDqZEaFlDmVDOhN7 dA8HC87nTOPFhSlHO5QyNBuz3iszJWpm6zVYp4rJsV8qSGu3I4aiAT6ZpMbZo/eo QByKbW5o1ebwCQZEcd2CTwNBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2zFlONDu OMRi6ZRr+OvJWMZj4gkwHwYDVR0jBBgwFoAUefXtpMcOLgPpCLgYwXdY8qZpd1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzQ5RUUyMzE2RjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWZYdHBNY09MZ1BwQ0xnWXdYZFk4cVpwZDFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzQ5RUUyMzE2RjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQ cENMZ1l3WGRZOHFacGQxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGy+6F9SB9XvYMPGGjP1GmIHKnlCCrCj3AS93sDDpS/K8mNSKqgh7Y6c wkV7AQZKEGFauM9aiTKsiTkngRv4cV8GywXBj1ub3PVZDLMQf3UKpaOh3OEgioAg ZH0QQt3Q3jTAJ75lN2U9JTzYPw9XK4jPzt4YQBUbqk1SsPEVurznoyUNdh0MReQD MBsacDvEBkfemfT1u5MuGjbmIMWB1KDL/iJemdtZGY0nQ4eTBGgjRB6Qpmn93DzH QHULO9AKh288tOrxqLqT9+3YOWlY9xpuxvzPkvaUMmBBoGZdkI2YlwCqNKnRl2G4 aOSPU3FdYg0nZ4B+i9funhI3MFj+Wfk= -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:27 2025 by rpki-client