$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: 7o9RxgM8Gps67sUNqt75vr09R/gxuPww3Vqhsd+53UQ= Subject key identifier: 08:F7:0A:C4:DC:6C:44:AC:DD:99:F3:F1:B6:C6:FE:F4:1F:77:FB:B8 Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 03BB Signing time: Sat 23 Aug 2025 00:55:07 +0000 Manifest this update: Sat 23 Aug 2025 00:55:06 +0000 Manifest next update: Sat 30 Aug 2025 00:55:06 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: HgzETQ4565f1gnDrLxDlcmZtxLIdndm11ykmTMa+q7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: Aug 23 00:55:06 2025 GMT Not After : Aug 30 00:55:06 2025 GMT Subject: CN=68a9116b-3711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:69:c0:2c:cd:97:1a:38:8f:8e:13:a9:26: cb:9f:de:ec:62:82:4a:82:76:8d:0d:50:88:5e:80: 81:2f:a3:5b:b8:4f:37:d7:d4:b8:c2:61:e6:f4:ce: dd:2d:19:8f:c0:16:cf:f5:b0:f5:5e:b1:78:25:3f: 2c:16:46:b7:e4:46:ed:d0:d0:3e:89:31:7c:b0:ad: c7:cf:9e:47:1a:82:21:fd:12:0a:d1:8d:21:bd:d0: 18:c1:11:33:d5:5b:39:21:35:92:cb:69:b3:97:da: 38:03:9c:67:01:bd:c3:0e:f2:f2:46:81:4a:80:6c: b1:d4:a3:f8:91:d2:be:53:fd:da:fe:71:59:f9:72: 8e:32:b5:20:c4:d4:60:78:77:8c:0f:31:1e:71:91: 88:cf:1c:f9:b0:ac:f9:64:38:5e:b9:25:7e:50:6c: b8:fd:5a:89:53:3d:95:72:a0:93:3d:e5:1e:31:1b: 7c:95:da:e7:44:3d:1f:09:9b:37:6e:4a:44:ca:c4: 07:0c:fd:c1:66:3a:38:05:0d:77:4e:8c:bf:65:5c: de:07:b8:94:11:6e:b6:76:a1:ed:57:45:73:e8:1f: 47:79:ff:53:7b:90:1f:ea:81:f0:c6:12:11:5a:99: ce:bf:34:be:63:a2:db:65:71:73:73:48:3b:f0:f4: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F7:0A:C4:DC:6C:44:AC:DD:99:F3:F1:B6:C6:FE:F4:1F:77:FB:B8 X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e9:04:60:23:1e:7a:8d:7f:29:31:07:55:50:74:7f:2d:76: fc:a9:7d:78:ca:9d:30:4d:a9:7f:12:3e:0d:e7:58:ec:84:fc: db:2b:1d:15:53:ac:6b:fc:e0:d5:7c:87:db:9e:1e:fd:00:70: 53:26:a2:0b:fd:9e:e2:98:f6:c0:d0:22:d5:9c:c0:a9:6f:7b: 2d:78:99:56:66:40:f8:89:d2:aa:5a:d0:6d:8f:47:16:e1:d4: 68:be:3d:73:1c:b6:8f:a5:01:53:71:f9:03:80:56:02:cd:29: 1b:44:9c:eb:b6:c1:96:8d:d9:28:68:2e:6c:d6:71:4c:3d:e7: 2d:c8:ee:73:2e:0f:dd:0c:ca:3b:d2:76:c3:c3:e0:7a:d5:21: 31:71:1c:bd:67:fd:d8:b8:14:06:74:aa:08:26:e2:05:3c:ec: 2f:db:d2:96:9d:58:c8:69:49:ff:16:c4:8e:25:b4:08:cf:a1: d4:2a:ce:b1:ec:00:e4:4a:9b:d6:17:e8:3a:df:59:6f:3d:ce: 1a:f9:76:d8:44:e9:38:30:85:74:6b:cd:78:89:f9:a8:cf:d0: 38:ad:22:76:e6:51:a4:a4:11:45:f0:f4:50:5b:64:04:4c:ce: 55:cd:b5:f7:28:58:c5:f8:24:6a:0d:65:68:2f:c4:e3:d0:c6: 4c:83:9a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjUwODIzMDA1NTA2WhcNMjUwODMwMDA1NTA2WjAYMRYwFAYD VQQDEw02OGE5MTE2Yi0zNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtBpwCzNlxo4j44TqSbLn97sYoJKgnaNDVCIXoCBL6NbuE8319S4wmHm9M7d LRmPwBbP9bD1XrF4JT8sFka35Ebt0NA+iTF8sK3Hz55HGoIh/RIK0Y0hvdAYwREz 1Vs5ITWSy2mzl9o4A5xnAb3DDvLyRoFKgGyx1KP4kdK+U/3a/nFZ+XKOMrUgxNRg eHeMDzEecZGIzxz5sKz5ZDheuSV+UGy4/VqJUz2VcqCTPeUeMRt8ldrnRD0fCZs3 bkpEysQHDP3BZjo4BQ13Toy/ZVzeB7iUEW62dqHtV0Vz6B9Hef9Te5Af6oHwxhIR WpnOvzS+Y6LbZXFzc0g78PTikwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj3CsTc bESs3Znz8bbG/vQfd/u4MB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq6QRgIx56jX8pMQdVUHR/LXb8qX14yp0wTal/Ej4N51jshPzbKx0V U6xr/ODVfIfbnh79AHBTJqIL/Z7imPbA0CLVnMCpb3steJlWZkD4idKqWtBtj0cW 4dRovj1zHLaPpQFTcfkDgFYCzSkbRJzrtsGWjdkoaC5s1nFMPectyO5zLg/dDMo7 0nbDw+B61SExcRy9Z/3YuBQGdKoIJuIFPOwv29KWnVjIaUn/FsSOJbQIz6HUKs6x 7ADkSpvWF+g631lvPc4a+XbYROk4MIV0a814ifmoz9A4rSJ25lGkpBFF8PRQW2QE TM5VzbX3KFjF+CRqDWVoL8Tj0MZMg5rW -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:02 2025 by rpki-client