$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: cT1+RX0Y50z2jYRGgipoHFpWw7Rwy/Qly3Pf2rgD1mk= Subject key identifier: EE:35:79:B1:F6:B1:65:DD:E0:6A:CC:2D:74:57:F8:48:8B:BF:BD:67 Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 34B1 Signing time: Fri 22 Aug 2025 15:13:52 +0000 Manifest this update: Fri 22 Aug 2025 15:13:52 +0000 Manifest next update: Fri 29 Aug 2025 15:13:52 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: 3IPOlpo4YPcbDn4v3tYWHiaoCQ5agI3AiBE1W1oqS54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Aug 22 15:13:52 2025 GMT Not After : Aug 29 15:13:52 2025 GMT Subject: CN=68a88930-0286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bd:f3:7e:78:e3:1b:d2:d6:09:86:cc:75:73: 29:86:91:7f:e1:96:42:ae:98:77:75:31:db:b0:d8: 42:b8:b9:3a:8b:f1:91:45:bf:8d:bc:5c:6c:68:90: c4:34:22:9b:11:49:e2:e8:41:83:a3:8b:91:83:d7: 9a:16:ab:c8:ae:44:51:34:24:c4:b9:cb:5a:2b:d0: 9d:a9:88:78:c9:1c:78:f1:b0:13:58:b6:0c:39:7e: 4c:4b:4b:1b:36:74:64:6c:09:37:84:21:8c:ae:3a: 35:5b:8b:68:11:61:9d:92:ce:bd:45:ca:e0:fc:c0: 80:37:57:64:24:09:dd:be:a9:0b:89:a2:48:00:70: fe:6d:70:c6:56:9d:d7:eb:53:d5:a6:4b:66:02:73: dd:50:cd:dc:22:7f:ac:b0:d3:21:66:fc:1a:90:2f: 45:8f:02:0d:8f:f7:54:5c:c6:99:aa:b6:e1:cd:87: 45:66:5b:f6:20:ca:2f:31:04:6e:d0:97:5d:a4:df: 0f:c9:e2:b4:1d:d9:b7:83:f4:b6:4d:b1:b7:20:d9: 66:63:b0:00:27:f8:1d:c9:c8:d1:4c:05:31:50:14: 3c:08:b3:7b:49:d4:b7:f0:49:ca:e1:06:50:5b:10: 80:7f:f6:20:dd:b7:cc:7a:a3:ff:db:f6:03:77:cf: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:79:B1:F6:B1:65:DD:E0:6A:CC:2D:74:57:F8:48:8B:BF:BD:67 X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:68:25:c8:f2:6c:32:41:fa:31:75:cc:0f:58:99:58:d0:7d: 64:03:b1:c0:c9:33:d8:81:89:54:1c:10:4e:f5:e5:72:0c:26: 81:59:65:83:4f:e0:70:0e:f3:3a:d6:6f:6f:72:c9:d4:5b:5a: ad:07:c3:70:8c:25:00:ff:0c:9f:4e:9a:46:e3:3f:7b:52:2d: c1:17:77:51:5b:ac:ac:34:b2:b4:35:92:19:d5:ce:f1:38:f8: f9:0a:81:7a:2b:4e:3c:66:6e:68:67:78:12:95:a8:a2:1a:b2: a5:07:00:c7:5d:b7:08:32:fd:ba:32:a1:e1:9d:36:18:6e:7a: d7:06:cf:79:94:61:61:a5:74:fd:2f:66:7d:9a:d6:46:ac:82: 1a:e7:70:aa:9f:61:6b:6c:c1:0a:7b:ff:be:42:88:9b:ee:36: 65:73:c1:90:93:48:d8:e8:9f:a2:f7:28:d8:39:26:3f:cc:47: 38:57:ad:55:24:64:13:45:01:8e:b4:5b:87:95:5d:59:32:34: 4a:c9:31:5b:00:93:dd:8a:71:66:5b:95:01:04:09:9a:8b:8b: a7:29:65:da:a6:0b:d7:42:7f:97:96:d9:f0:34:05:ca:5e:81: 21:de:26:a5:0b:21:fb:9b:c2:7e:70:6f:c9:37:ae:e6:14:b8: 2f:58:f8:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUwODIyMTUxMzUyWhcNMjUwODI5MTUxMzUyWjAYMRYwFAYD VQQDEw02OGE4ODkzMC0wMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3b3zfnjjG9LWCYbMdXMphpF/4ZZCrph3dTHbsNhCuLk6i/GRRb+NvFxsaJDE NCKbEUni6EGDo4uRg9eaFqvIrkRRNCTEuctaK9CdqYh4yRx48bATWLYMOX5MS0sb NnRkbAk3hCGMrjo1W4toEWGdks69Rcrg/MCAN1dkJAndvqkLiaJIAHD+bXDGVp3X 61PVpktmAnPdUM3cIn+ssNMhZvwakC9FjwINj/dUXMaZqrbhzYdFZlv2IMovMQRu 0JddpN8PyeK0Hdm3g/S2TbG3INlmY7AAJ/gdycjRTAUxUBQ8CLN7SdS38EnK4QZQ WxCAf/Yg3bfMeqP/2/YDd89KdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO41ebH2 sWXd4GrMLXRX+EiLv71nMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyaCXI8mwyQfoxdcwPWJlY0H1kA7HAyTPYgYlUHBBO9eVyDCaBWWWD T+BwDvM61m9vcsnUW1qtB8NwjCUA/wyfTppG4z97Ui3BF3dRW6ysNLK0NZIZ1c7x OPj5CoF6K048Zm5oZ3gSlaiiGrKlBwDHXbcIMv26MqHhnTYYbnrXBs95lGFhpXT9 L2Z9mtZGrIIa53Cqn2FrbMEKe/++Qoib7jZlc8GQk0jY6J+i9yjYOSY/zEc4V61V JGQTRQGOtFuHlV1ZMjRKyTFbAJPdinFmW5UBBAmai4unKWXapgvXQn+XltnwNAXK XoEh3ialCyH7m8J+cG/JN67mFLgvWPhv -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:23 2025 by rpki-client