$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: R9UKKwUV+h9kExlMZJVRS83DOVrWIWJQbmMQY2+GRX4= Subject key identifier: 44:53:28:67:CE:9F:90:BD:55:02:83:51:1B:62:A3:C5:7B:45:74:7B Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 512D Signing time: Fri 22 Aug 2025 15:17:23 +0000 Manifest this update: Fri 22 Aug 2025 15:17:22 +0000 Manifest next update: Fri 29 Aug 2025 15:17:22 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: VhqFxghwQG59NLMkdiXTi91g+zNQJe5vlSA+Od0Gw1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Aug 22 15:17:22 2025 GMT Not After : Aug 29 15:17:22 2025 GMT Subject: CN=68a88a03-16f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cf:d9:1b:af:ce:a9:0a:7a:74:cd:5e:80:aa: 2a:74:22:30:da:6e:14:1d:af:7c:22:13:64:9c:f8: 02:58:a9:1f:4b:ff:68:91:1a:e5:15:e8:9f:f6:86: cc:ca:7f:db:58:d2:71:1d:a7:e3:60:ef:b6:ef:73: f4:be:c9:2b:b7:56:29:45:12:08:96:af:c1:c6:62: e1:84:da:a9:a6:ac:7b:86:04:08:ba:5f:49:b3:ea: 2d:b1:8f:ac:f2:19:a3:e4:63:aa:d5:81:19:a8:78: a8:5d:6a:a3:69:82:4b:09:ed:fa:7c:10:f7:79:2f: be:ed:81:16:e0:83:7b:c1:df:f6:aa:53:00:a2:cb: 45:e9:23:4f:d0:f5:18:88:ba:98:55:fa:e8:bd:8f: a2:69:1e:0e:3a:8f:87:99:6d:97:f5:00:2e:ea:bf: eb:04:91:e1:4f:5f:ef:95:e1:4b:b1:4c:62:05:8e: 27:6f:61:82:9d:bb:29:e7:30:96:5f:27:92:2a:8e: 47:7a:d1:24:ef:68:82:2f:7b:52:b1:7e:75:6c:0a: e2:09:d9:5f:36:59:0c:5c:8c:50:33:15:17:7e:77: bc:36:75:62:9a:d2:8c:2b:b9:19:79:ac:4e:c7:88: f9:02:bd:12:40:ef:73:29:8e:53:54:e8:f8:11:37: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:28:67:CE:9F:90:BD:55:02:83:51:1B:62:A3:C5:7B:45:74:7B X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:82:00:f0:99:54:13:09:c6:b7:36:92:6b:33:f6:66:07:0b: 47:fa:8c:ef:64:18:4a:bc:ef:70:d4:ce:00:c5:58:92:bc:7a: 0d:3d:59:2a:8c:c1:0f:a0:6c:64:12:93:59:18:d2:fa:69:84: 77:34:db:68:9f:6b:6f:cb:49:09:5e:67:d8:01:79:3c:3e:34: 4a:7a:5c:85:41:95:a8:da:3b:d5:8b:2f:a1:66:22:ed:58:1d: 90:94:0d:58:0c:c2:35:ab:8b:36:27:f4:cb:4b:3b:c9:c1:2e: ab:85:21:18:e9:e5:45:cc:74:5a:12:43:51:f5:7f:49:84:d1: 2d:71:22:df:e4:c3:41:09:63:f8:40:91:e5:cb:de:6d:d9:03: dd:11:dc:a0:7c:ef:44:92:0a:39:66:90:a1:7a:3d:eb:ea:1f: 01:dc:89:6c:62:b6:1b:b1:93:6b:4b:1c:03:40:3a:9d:04:f7: 50:07:55:8e:b9:7c:9f:b7:d1:e1:90:e8:22:03:4e:8c:26:75: f5:93:16:10:7d:2a:ed:6a:40:f7:36:9c:5f:29:dc:3f:3a:d6: b2:d8:b5:a8:45:b1:50:2d:97:6b:f1:89:70:c8:ca:c2:66:4b: 7d:8a:51:ed:c9:9e:3c:44:71:11:17:4f:f9:43:df:f3:42:30: 63:f3:a8:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUwODIyMTUxNzIyWhcNMjUwODI5MTUxNzIyWjAYMRYwFAYD VQQDEw02OGE4OGEwMy0xNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8c/ZG6/OqQp6dM1egKoqdCIw2m4UHa98IhNknPgCWKkfS/9okRrlFeif9obM yn/bWNJxHafjYO+273P0vskrt1YpRRIIlq/BxmLhhNqppqx7hgQIul9Js+otsY+s 8hmj5GOq1YEZqHioXWqjaYJLCe36fBD3eS++7YEW4IN7wd/2qlMAostF6SNP0PUY iLqYVfrovY+iaR4OOo+HmW2X9QAu6r/rBJHhT1/vleFLsUxiBY4nb2GCnbsp5zCW XyeSKo5HetEk72iCL3tSsX51bAriCdlfNlkMXIxQMxUXfne8NnVimtKMK7kZeaxO x4j5Ar0SQO9zKY5TVOj4ETfiswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERTKGfO n5C9VQKDURtio8V7RXR7MB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ggDwmVQTCca3NpJrM/ZmBwtH+ozvZBhKvO9w1M4AxViSvHoNPVkq jMEPoGxkEpNZGNL6aYR3NNton2tvy0kJXmfYAXk8PjRKelyFQZWo2jvViy+hZiLt WB2QlA1YDMI1q4s2J/TLSzvJwS6rhSEY6eVFzHRaEkNR9X9JhNEtcSLf5MNBCWP4 QJHly95t2QPdEdygfO9Ekgo5ZpChej3r6h8B3IlsYrYbsZNrSxwDQDqdBPdQB1WO uXyft9HhkOgiA06MJnX1kxYQfSrtakD3NpxfKdw/Otay2LWoRbFQLZdr8YlwyMrC Zkt9ilHtyZ48RHERF0/5Q9/zQjBj86h1 -----END CERTIFICATE-----Generated at Sat Aug 23 21:18:23 2025 by rpki-client