$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: MO2nfcIH3gen3fksQxT5gBnsw201PLwdxr77/r2KzCs= Subject key identifier: E0:80:E8:F8:A5:7B:D3:83:FD:95:23:0A:E2:B8:ED:AB:E9:2A:94:13 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 66 Signing time: Sat 23 Aug 2025 07:14:16 +0000 Manifest this update: Sat 23 Aug 2025 07:14:15 +0000 Manifest next update: Sat 30 Aug 2025 07:14:15 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: VSqpN+lEo2VQktxOJeNw/Cv6HK/bFgFiVWjMYkitvs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Aug 23 07:14:15 2025 GMT Not After : Aug 30 07:14:15 2025 GMT Subject: CN=68a96a47-493d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:d8:57:9d:55:e5:22:76:a9:b9:42:4c:22: 5f:ec:38:6f:78:d0:e8:3b:6a:ae:54:bc:3e:58:df: fb:0e:88:80:43:d2:1a:82:7a:b9:d1:86:b5:52:5a: e4:39:12:ed:6e:0a:55:6e:99:6e:ec:a0:58:d4:62: 8f:77:08:93:79:20:34:9e:a5:ab:65:86:8d:f7:66: e0:9c:88:aa:d0:d8:7a:8a:af:47:92:cd:cf:69:89: 76:12:bd:46:c6:4f:eb:e3:04:c3:c9:48:4c:c1:62: be:3d:1c:ab:22:5a:8e:ba:22:d2:21:62:4a:30:a7: 6a:da:e1:6d:6a:3d:1e:57:0e:b0:19:86:cb:55:dc: 4a:5b:c6:8a:83:74:44:9e:4c:1d:5d:41:c2:42:e0: a7:66:98:4f:04:80:52:4e:d6:be:7d:79:4d:8b:3e: b1:35:08:39:43:86:17:41:57:be:41:ef:ee:81:08: d8:1e:bc:95:ab:1a:75:64:b7:8f:28:4c:4d:cf:1c: 9f:03:de:f9:65:84:02:61:bf:75:d8:5c:76:ed:f7: 24:49:8d:8a:59:7d:2b:f8:e9:16:c5:64:83:85:00: 70:3a:1f:00:79:b9:97:e8:9d:11:3a:ca:69:7b:10: ea:8a:01:31:b1:72:64:ef:9c:64:62:40:79:0e:03: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:80:E8:F8:A5:7B:D3:83:FD:95:23:0A:E2:B8:ED:AB:E9:2A:94:13 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:48:33:9f:bf:6d:39:4e:ee:53:7b:4d:ca:29:a0:0f:11:30: fb:b8:37:29:24:7c:48:0f:9f:3b:7c:a6:0c:eb:f5:69:ae:f1: 8f:d7:a9:f2:c2:e9:77:ac:de:eb:1c:cc:f3:96:1c:ec:64:20: 32:24:36:26:27:f2:16:68:06:6c:fd:4f:a3:61:0a:40:ec:a0: 5b:61:e0:cf:01:4f:55:54:41:00:41:5a:81:3b:b9:1a:9b:d5: a0:08:da:1d:8c:97:0f:8a:60:e0:02:a1:33:a2:94:93:81:b7: cb:6b:c8:a6:18:99:94:e8:c2:52:e1:6e:3a:36:e7:09:0c:72: 93:4a:3e:78:15:4c:1a:c9:fd:47:93:f1:dd:7d:c4:ea:fc:9c: 2e:9e:44:7e:aa:08:dd:99:c3:d6:82:05:5a:d0:84:fa:37:f4: 5f:3d:dd:b7:4c:36:01:97:16:59:81:a0:6d:ef:b5:5b:e5:12: 49:5d:8f:a3:4b:39:e1:68:73:52:1a:0f:b6:3b:e4:c2:ac:e2: d6:8a:00:c8:80:99:97:10:63:b9:6b:47:66:0a:59:32:50:77: 4a:3a:34:1c:76:1d:27:b1:1a:ba:11:18:db:dc:93:7d:31:b5: 34:01:b7:f2:38:97:cf:dc:fd:ba:f7:44:66:b7:b8:9f:e8:12: 54:50:fc:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEE4MDExMC8GA1UEBRMoM0ZEN0Y1NTVGQzdENkZDMjM1MzlBM0E2MjFFRjJEMDQ4 RDRDN0NDNzAeFw0yNTA4MjMwNzE0MTVaFw0yNTA4MzAwNzE0MTVaMBgxFjAUBgNV BAMTDTY4YTk2YTQ3LTQ5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9u9hXnVXlInapuUJMIl/sOG940Og7aq5UvD5Y3/sOiIBD0hqCernRhrVSWuQ5 Eu1uClVumW7soFjUYo93CJN5IDSepatlho33ZuCciKrQ2HqKr0eSzc9piXYSvUbG T+vjBMPJSEzBYr49HKsiWo66ItIhYkowp2ra4W1qPR5XDrAZhstV3EpbxoqDdESe TB1dQcJC4KdmmE8EgFJO1r59eU2LPrE1CDlDhhdBV75B7+6BCNgevJWrGnVkt48o TE3PHJ8D3vllhAJhv3XYXHbt9yRJjYpZfSv46RbFZIOFAHA6HwB5uZfonRE6yml7 EOqKATGxcmTvnGRiQHkOA9w5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4IDo+KV7 04P9lSMK4rjtq+kqlBMwHwYDVR0jBBgwFoAUP9f1Vfx9b8I1OaOmIe8tBI1MfMcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0QTgwLzI5RUM3M0JBRTRF RjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDlmMVZmeDliOEkxT2FPbUllOHRCSTFNZk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 QTgwLzI5RUM3M0JBRTRFRjExRUZCNzE0RTU2Q0M0RjlBRTAyL1A5ZjFWZng5YjhJ MU9hT21JZTh0QkkxTWZNYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJIM5+/bTlO7lN7TcopoA8RMPu4NykkfEgPnzt8pgzr9Wmu8Y/XqfLC 6Xes3usczPOWHOxkIDIkNiYn8hZoBmz9T6NhCkDsoFth4M8BT1VUQQBBWoE7uRqb 1aAI2h2Mlw+KYOACoTOilJOBt8tryKYYmZTowlLhbjo25wkMcpNKPngVTBrJ/UeT 8d19xOr8nC6eRH6qCN2Zw9aCBVrQhPo39F893bdMNgGXFlmBoG3vtVvlEkldj6NL OeFoc1IaD7Y75MKs4taKAMiAmZcQY7lrR2YKWTJQd0o6NBx2HSexGroRGNvck30x tTQBt/I4l8/c/br3RGa3uJ/oElRQ/Og= -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:30 2025 by rpki-client