$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft File: adr8x94-0cCfTDZqTKThf_sRqEk.mft (raw, json) Hash identifier: INmr9I5gYaR+jK/E+Whp+6kxuJTZqqFixd4VMxHuhSc= Subject key identifier: DA:7B:26:5C:60:A8:1A:8B:4A:38:93:5C:0F:DD:0B:4B:C7:C2:C7:36 Authority key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 Certificate issuer: /CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft Manifest number: 72 Signing time: Tue 01 Jul 2025 07:36:15 +0000 Manifest this update: Tue 01 Jul 2025 07:36:15 +0000 Manifest next update: Tue 08 Jul 2025 07:36:15 +0000 Files and hashes: 1: adr8x94-0cCfTDZqTKThf_sRqEk.crl (hash: XFAJBGv1L0wRXOz/ebIysv3wZUnQyw7noMZYsgxvmrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91879AC, serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Validity Not Before: Jul 1 07:36:15 2025 GMT Not After : Jul 8 07:36:15 2025 GMT Subject: CN=68638fef-04dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:68:a1:e8:2a:91:4f:ce:da:00:cd:ff:f8: a9:70:94:7d:67:33:3c:e0:4c:f0:34:fc:ab:a5:3f: 9d:8b:bc:80:19:a7:db:51:c1:56:c5:a9:93:55:ad: d7:79:57:a7:5e:e6:7c:5d:a3:5c:7f:03:70:25:f5: e0:2a:2e:f6:cb:d9:79:b4:75:d0:e7:03:1e:41:44: 98:83:2a:af:00:d4:cf:33:2a:98:cc:6a:34:a2:46: 8a:51:bf:05:e0:45:d5:05:fc:1d:f0:1d:ea:cf:9f: 6c:a7:4b:fc:e3:e4:3f:1d:aa:20:1c:a7:63:58:61: f1:64:45:86:ef:69:cd:68:dd:ad:6c:4f:1f:a8:2d: cd:26:1c:31:16:c1:ec:bd:be:ac:4f:ec:36:43:76: e7:30:85:56:70:dc:03:d9:be:56:8b:01:e7:cb:35: 81:1a:0f:01:db:09:25:15:06:a8:4a:69:28:28:6c: a0:6c:e8:91:07:54:c9:b2:d7:59:6b:36:ed:38:5c: 8b:e7:3e:c6:9b:69:28:2f:17:00:45:9b:3c:4e:6e: 59:b4:17:ca:ca:9d:3d:98:9e:d0:56:d9:2f:40:a0: e5:6d:70:0b:4a:a0:2a:c6:fb:4c:b0:4a:49:ed:de: 01:6c:cf:a6:fd:2a:93:76:b2:d2:a9:a6:bd:95:97: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:26:5C:60:A8:1A:8B:4A:38:93:5C:0F:DD:0B:4B:C7:C2:C7:36 X509v3 Authority Key Identifier: keyid:69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:04:84:99:2b:22:7e:5b:75:e7:d7:e5:8d:7a:2d:13:5a: be:0f:1f:8e:48:f2:dd:1f:f8:c4:38:ed:95:25:2f:91:10:91: fa:75:3e:9d:5e:bf:9b:97:d3:0e:7f:ec:45:ab:de:63:e4:91: e5:6f:a1:64:de:33:49:47:34:9d:1f:c7:0c:e7:4b:c7:dd:41: 33:50:53:86:71:2c:f8:63:13:ed:87:be:93:64:fc:31:4d:82: 44:06:7f:a5:de:28:70:bb:ae:da:bf:89:98:f5:84:ca:8d:c3: ae:ba:4a:15:6b:96:0a:f8:87:02:89:60:65:3a:23:3f:e2:a2: 34:a6:37:3d:7e:2f:2c:4c:90:ae:4f:9d:2e:57:8b:37:a7:6c: 04:a8:b3:0e:f3:b6:25:6a:9e:7a:01:09:40:d5:b8:74:11:30: 86:8b:f1:74:2a:51:c7:dc:b7:d4:43:b7:7c:3e:7d:1f:21:7f: f9:2b:76:24:c9:74:7e:cf:04:30:f4:80:9d:ae:c0:57:9b:0f: 54:b2:bb:96:1c:21:d5:12:b5:f3:47:aa:40:7d:c6:8d:57:86: ce:16:a5:da:54:cd:ab:00:51:b0:0a:79:4f:83:49:17:4b:e4: ca:6a:2c:b9:03:84:4a:57:94:de:df:c3:ab:46:d9:cf:17:b8: 48:2b:ea:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzlBQzExMC8GA1UEBRMoNjlEQUZDQzdERTNFRDFDMDlGNEMzNjZBNENBNEUxN0ZG QjExQTg0OTAeFw0yNTA3MDEwNzM2MTVaFw0yNTA3MDgwNzM2MTVaMBgxFjAUBgNV BAMTDTY4NjM4ZmVmLTA0ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDBmih6CqRT87aAM3/+KlwlH1nMzzgTPA0/KulP52LvIAZp9tRwVbFqZNVrdd5 V6de5nxdo1x/A3Al9eAqLvbL2Xm0ddDnAx5BRJiDKq8A1M8zKpjMajSiRopRvwXg RdUF/B3wHerPn2ynS/zj5D8dqiAcp2NYYfFkRYbvac1o3a1sTx+oLc0mHDEWwey9 vqxP7DZDducwhVZw3APZvlaLAefLNYEaDwHbCSUVBqhKaSgobKBs6JEHVMmy11lr Nu04XIvnPsabaSgvFwBFmzxOblm0F8rKnT2YntBW2S9AoOVtcAtKoCrG+0ywSknt 3gFsz6b9KpN2stKppr2VlxSHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2nsmXGCo GotKOJNcD90LS8fCxzYwHwYDVR0jBBgwFoAUadr8x94+0cCfTDZqTKThf/sRqEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzY4Rjc5MjJDQTgw MTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGNDZlREWnFUS1RoZl9zUnFF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWRyOHg5NC0wY0NmVERacVRLVGhmX3NScUVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OUFDLzY4Rjc5MjJDQTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGND ZlREWnFUS1RoZl9zUnFFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADU1BISZKyJ+W3Xn1+WNei0TWr4PH45I8t0f+MQ47ZUlL5EQkfp1Pp1e v5uX0w5/7EWr3mPkkeVvoWTeM0lHNJ0fxwznS8fdQTNQU4ZxLPhjE+2HvpNk/DFN gkQGf6XeKHC7rtq/iZj1hMqNw666ShVrlgr4hwKJYGU6Iz/iojSmNz1+LyxMkK5P nS5XizenbASosw7ztiVqnnoBCUDVuHQRMIaL8XQqUcfct9RDt3w+fR8hf/krdiTJ dH7PBDD0gJ2uwFebD1Syu5YcIdUStfNHqkB9xo1Xhs4WpdpUzasAUbAKeU+DSRdL 5MpqLLkDhEpXlN7fw6tG2c8XuEgr6lM= -----END CERTIFICATE-----Generated at Wed Jul 2 19:56:49 2025 by rpki-client