$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: QrMPGiGomakXfy2+5Yj6T6sG01XeVno+yGxDcPCeklg= Subject key identifier: EA:23:89:01:48:E7:5F:B9:70:C1:41:2D:67:A5:5E:CC:0D:50:B5:1A Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: 89 Signing time: Thu 03 Jul 2025 06:44:35 +0000 Manifest this update: Thu 03 Jul 2025 06:44:34 +0000 Manifest next update: Thu 10 Jul 2025 06:44:34 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: Tm2At5Dmr3V7TiNpVaevf13zrgRvWm62kY3tjQpIYlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Jul 3 06:44:34 2025 GMT Not After : Jul 10 06:44:34 2025 GMT Subject: CN=686626d3-9a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:90:57:dd:d9:63:66:e6:92:79:23:9b:b4: 99:64:56:ab:ec:98:bf:aa:05:08:d5:86:80:76:08: 84:f0:36:54:5f:fe:59:5a:39:ad:a0:36:98:b2:50: 31:f8:1d:78:e2:27:05:94:cf:25:ee:f1:99:57:b0: 99:69:43:df:bc:49:cf:2f:1a:61:33:58:fd:d0:e5: 6b:5b:37:54:59:e3:ae:ce:a2:f7:24:9f:03:42:bb: 2a:2d:00:d3:83:66:8d:71:bb:0c:33:3c:ae:fa:4f: 6f:68:14:fd:4d:7a:54:1b:cf:f2:c5:8a:db:fb:15: 8e:3c:c5:7a:16:bd:c4:47:ee:70:1e:7a:ec:10:49: a0:af:9d:49:7a:c6:97:ac:7e:f8:01:a1:28:af:10: 56:16:47:b2:de:a1:27:0a:65:6a:e7:41:6d:d2:49: 87:52:70:5c:87:51:98:6e:ee:bf:83:50:a2:0c:e1: 75:51:ef:27:13:a5:9b:aa:02:95:9d:2b:98:4c:7c: 3d:f4:05:a1:af:25:7e:56:75:27:71:79:17:28:4c: 87:61:94:0f:b7:a2:2b:83:0d:3a:6f:8c:71:be:66: b2:b8:ca:90:7c:4f:69:34:ba:0d:cf:7f:bf:ce:0e: 2f:9c:8e:af:75:ce:75:ca:43:b5:f5:15:e7:45:54: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:89:01:48:E7:5F:B9:70:C1:41:2D:67:A5:5E:CC:0D:50:B5:1A X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f6:0b:0f:9e:37:4f:2b:0e:2a:90:0f:67:67:24:a1:55:15: 4e:b2:c7:f1:93:9f:40:c2:61:fa:6a:e5:24:1a:50:1e:b5:99: 68:0f:47:02:21:7c:b8:35:4a:ae:be:ec:27:58:83:89:32:78: f5:0c:c4:82:d8:10:d8:0a:ef:02:f6:00:be:d6:c5:9e:ae:02: 6f:c3:b1:53:0e:bc:4e:1a:17:9a:e4:2b:4d:5f:d9:61:1e:43: 57:3e:5d:fd:d4:10:71:2e:0e:fc:08:46:b0:26:08:c2:77:4a: 3d:a9:cc:0f:b2:0a:76:00:d9:03:ef:f9:80:a0:e0:85:4c:4d: 9b:72:37:2e:63:a3:57:46:85:67:a7:b2:e8:c6:70:19:5a:2b: 70:14:b6:8a:41:45:ed:35:9d:f7:8d:a5:d9:14:fa:e7:19:d4: 50:19:4e:65:3b:d4:85:ed:03:97:16:86:af:2c:4f:c8:5a:7a: 0d:8c:d2:23:cb:b7:aa:ad:41:9b:81:c1:ce:55:2f:41:8b:c1: 2a:dd:d4:92:b5:4e:70:da:ca:ec:2d:37:c0:c9:47:c9:89:e7: 77:25:17:54:c6:27:c1:8f:4f:74:4a:17:bd:52:73:4b:f1:50: 27:00:d7:1e:a5:7f:60:f4:d3:69:06:57:77:da:62:5d:8a:a8: e8:a8:34:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUwNzAzMDY0NDM0WhcNMjUwNzEwMDY0NDM0WjAYMRYwFAYD VQQDEw02ODY2MjZkMy05YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOqQV93ZY2bmknkjm7SZZFar7Ji/qgUI1YaAdgiE8DZUX/5ZWjmtoDaYslAx +B144icFlM8l7vGZV7CZaUPfvEnPLxphM1j90OVrWzdUWeOuzqL3JJ8DQrsqLQDT g2aNcbsMMzyu+k9vaBT9TXpUG8/yxYrb+xWOPMV6Fr3ER+5wHnrsEEmgr51JesaX rH74AaEorxBWFkey3qEnCmVq50Ft0kmHUnBch1GYbu6/g1CiDOF1Ue8nE6WbqgKV nSuYTHw99AWhryV+VnUncXkXKEyHYZQPt6Irgw06b4xxvmayuMqQfE9pNLoNz3+/ zg4vnI6vdc51ykO19RXnRVS9HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOojiQFI 51+5cMFBLWelXswNULUaMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9gsPnjdPKw4qkA9nZyShVRVOssfxk59AwmH6auUkGlAetZloD0cC IXy4NUquvuwnWIOJMnj1DMSC2BDYCu8C9gC+1sWergJvw7FTDrxOGhea5CtNX9lh HkNXPl391BBxLg78CEawJgjCd0o9qcwPsgp2ANkD7/mAoOCFTE2bcjcuY6NXRoVn p7LoxnAZWitwFLaKQUXtNZ33jaXZFPrnGdRQGU5lO9SF7QOXFoavLE/IWnoNjNIj y7eqrUGbgcHOVS9Bi8Eq3dSStU5w2srsLTfAyUfJied3JRdUxifBj090She9UnNL 8VAnANcepX9g9NNpBld32mJdiqjoqDQF -----END CERTIFICATE-----Generated at Thu Jul 3 21:07:39 2025 by rpki-client