$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json) Hash identifier: JBoeYa+4CuD6SDHnz+M/X1EUNk3rt6xwZh2Rn/Xo/9Q= Subject key identifier: CE:BB:6C:2D:99:43:9E:29:33:FF:A9:41:A3:14:79:82:B2:DC:48:F3 Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft Manifest number: 08CB Signing time: Fri 22 Aug 2025 21:40:10 +0000 Manifest this update: Fri 22 Aug 2025 21:40:09 +0000 Manifest next update: Fri 29 Aug 2025 21:40:09 +0000 Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: MkJb6411QU7DEe1oZPw3ZUkBIFHj58VUjvZ8iD/zMJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Validity Not Before: Aug 22 21:40:09 2025 GMT Not After : Aug 29 21:40:09 2025 GMT Subject: CN=68a8e3b9-972a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:93:0a:f6:74:e1:c5:a1:6a:fa:3b:32:26: 9c:ac:79:06:27:21:3c:b4:ac:50:4c:5d:e2:c1:46: 3f:66:a3:e9:00:94:a4:c4:f5:dd:d2:05:22:4a:eb: aa:f5:56:4d:56:09:84:c9:8e:e8:08:dc:5a:29:f8: e7:b7:eb:6d:ff:29:2d:f7:b5:b6:5e:44:f8:1e:ce: 32:61:28:11:16:93:37:53:c2:c3:aa:ae:09:07:33: 09:15:83:d9:28:b1:84:2d:94:ad:60:d2:ac:e6:49: a2:56:3f:f7:74:4c:94:ef:45:d1:bb:bb:48:20:0d: a4:f0:01:3f:5f:df:bd:30:c9:42:54:2e:45:75:38: 0a:a7:8f:da:47:90:d1:6f:1a:94:43:83:c2:35:d6: 07:33:99:4b:b8:41:fe:a7:b3:43:b2:43:ec:1a:18: af:92:c3:9c:67:88:22:c3:91:4b:23:88:be:b7:e1: e5:fe:14:94:03:46:ee:b8:dd:d3:a2:cd:f1:fa:8a: e9:c7:64:02:df:b4:3d:ae:db:79:92:53:a7:c9:59: 7c:1d:74:4e:cd:7a:66:c0:4d:ed:30:9e:f3:35:58: b5:8d:3f:b5:c3:ea:84:95:0a:c2:03:4e:b3:44:4b: 61:33:4c:9f:0b:c7:68:ac:a9:23:b7:78:a6:a8:af: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BB:6C:2D:99:43:9E:29:33:FF:A9:41:A3:14:79:82:B2:DC:48:F3 X509v3 Authority Key Identifier: keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bd:1e:35:c2:82:93:56:ab:e5:d2:8e:44:c6:df:ff:96:2f: bb:9f:7c:bd:64:4d:ca:ac:9d:b1:39:a5:be:17:e8:a7:c5:bb: 3d:f8:8c:22:63:d3:fa:77:21:86:50:07:0d:e6:41:fe:44:85: c3:18:0c:a2:7d:05:de:d1:d3:dd:3a:ec:08:39:da:ad:04:c9: 76:ae:be:99:ed:32:6a:d3:d3:b8:4c:ca:6f:7b:24:1e:60:cb: b1:be:bf:24:ac:4c:b0:3f:f3:99:2c:3e:49:c2:4d:2d:7d:b8: fb:b6:c5:fb:9e:25:d5:f9:0f:ba:f7:49:57:41:5c:7d:47:95: 3a:64:fd:e6:32:45:f2:e3:79:10:ed:ea:c2:f1:21:c0:06:1c: 49:37:76:2c:7f:58:85:cf:a7:bd:74:98:09:b4:e0:ed:72:ed: 69:15:d4:24:c1:9c:b5:13:95:19:62:ea:93:ae:af:98:fd:8c: 87:70:99:f1:6a:ae:65:de:13:8e:2b:b7:b0:6d:cf:b5:5b:a1: d6:fc:e7:a0:b4:a5:10:2b:0d:53:a0:7a:55:55:a1:5c:19:49: f2:21:1e:d5:53:64:d0:07:02:1d:01:39:29:5e:d9:ec:94:8e: 9e:0a:a1:7c:62:cb:ac:6b:e6:e3:71:29:80:04:b9:66:d1:d4: 85:d2:18:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2 N0U2QTBGNDIwHhcNMjUwODIyMjE0MDA5WhcNMjUwODI5MjE0MDA5WjAYMRYwFAYD VQQDEw02OGE4ZTNiOS05NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyaTCvZ04cWhavo7MiacrHkGJyE8tKxQTF3iwUY/ZqPpAJSkxPXd0gUiSuuq 9VZNVgmEyY7oCNxaKfjnt+tt/ykt97W2XkT4Hs4yYSgRFpM3U8LDqq4JBzMJFYPZ KLGELZStYNKs5kmiVj/3dEyU70XRu7tIIA2k8AE/X9+9MMlCVC5FdTgKp4/aR5DR bxqUQ4PCNdYHM5lLuEH+p7NDskPsGhivksOcZ4giw5FLI4i+t+Hl/hSUA0buuN3T os3x+orpx2QC37Q9rtt5klOnyVl8HXROzXpmwE3tMJ7zNVi1jT+1w+qElQrCA06z REthM0yfC8dorKkjt3imqK+D3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM67bC2Z Q54pM/+pQaMUeYKy3EjzMB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo dzdOME5JdU5GZU5uNXFEMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqvR41woKTVqvl0o5Ext//li+7n3y9ZE3KrJ2xOaW+F+inxbs9+Iwi Y9P6dyGGUAcN5kH+RIXDGAyifQXe0dPdOuwIOdqtBMl2rr6Z7TJq09O4TMpveyQe YMuxvr8krEywP/OZLD5Jwk0tfbj7tsX7niXV+Q+690lXQVx9R5U6ZP3mMkXy43kQ 7erC8SHABhxJN3Ysf1iFz6e9dJgJtODtcu1pFdQkwZy1E5UZYuqTrq+Y/YyHcJnx aq5l3hOOK7ewbc+1W6HW/OegtKUQKw1ToHpVVaFcGUnyIR7VU2TQBwIdATkpXtns lI6eCqF8Ysusa+bjcSmABLlm0dSF0hhN -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:19 2025 by rpki-client