$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: UJnL1XL6JaHkD+x2L+nis16pxwXSilUKiX57kW44EXY= Subject key identifier: C9:62:67:7C:63:88:6A:CC:42:72:1D:50:39:87:BD:02:70:AD:A5:0B Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: BA Signing time: Sat 23 Aug 2025 06:11:44 +0000 Manifest this update: Sat 23 Aug 2025 06:11:44 +0000 Manifest next update: Sat 30 Aug 2025 06:11:44 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: HzApALhuBw0xdU9kd6l0+RVTi1Y2tq8/LJ7/zj8Y3sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Aug 23 06:11:44 2025 GMT Not After : Aug 30 06:11:44 2025 GMT Subject: CN=68a95ba0-ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:0e:46:15:13:2b:65:ad:f8:99:f5:72:34: fe:69:b7:40:a5:5d:6f:40:1b:e3:f2:d7:f0:a4:f8: b9:41:89:ba:4f:e7:f7:7a:5b:be:36:9d:2a:d8:3d: 4b:65:e1:bf:8e:96:8f:0b:ff:f2:55:33:93:fb:1d: cc:9c:35:c4:4a:cc:95:fe:6c:c8:7a:02:16:3b:c1: 57:0d:09:b9:69:c0:ac:86:aa:f6:6a:4d:53:f1:c0: 28:f5:5d:49:e3:76:47:c8:16:94:42:23:be:91:91: 6b:b6:db:3a:55:5c:cd:df:36:a8:57:63:35:c7:b9: 53:04:21:e6:32:14:10:80:5d:34:c4:ad:29:c4:7c: 5d:51:39:15:53:0a:f9:75:2b:8c:07:84:4f:19:bb: 41:75:0b:ba:96:db:1d:a5:94:95:c6:fd:86:8d:a0: 08:65:c1:98:c5:72:96:ef:c6:f5:cd:a6:36:b0:e3: 42:43:5f:6b:9d:02:5d:da:7c:e1:97:ff:f9:16:ab: 6d:03:6b:f5:9e:5d:3b:68:a8:43:e8:e5:70:99:f6: 9e:bd:f6:10:52:da:72:b0:7a:45:de:f3:8c:e4:db: f8:6f:4e:bc:a6:57:e4:ae:81:ba:aa:46:9d:98:b6: 14:49:cf:91:08:6d:7b:0d:be:8d:16:10:80:7b:4d: cf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:62:67:7C:63:88:6A:CC:42:72:1D:50:39:87:BD:02:70:AD:A5:0B X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:73:d4:c2:48:63:0b:36:fe:12:3e:e1:7a:c4:f1:58:0b:09: f1:72:7d:c4:2e:c2:07:bc:96:a1:f7:2a:ea:4e:5e:69:69:74: 1f:6f:fd:4d:8b:e7:73:9e:f1:52:bb:b5:f3:5b:04:59:bc:8f: 90:f2:7b:73:fb:e6:9c:31:00:bf:cc:d3:14:d1:91:67:b8:a5: 9c:27:68:c8:dd:12:10:65:b6:c5:27:71:21:d5:24:15:4d:1d: 5f:da:a3:b8:0d:fc:8b:82:64:0d:8e:58:fa:d1:19:84:22:df: c6:e7:74:24:52:e4:ae:8f:cd:cf:b9:a1:bd:a0:3d:d0:b1:a0: 4c:c0:d7:5a:da:20:14:53:16:f3:72:65:a8:76:50:ff:33:ca: 4a:be:3e:7d:82:43:52:d0:69:ab:8b:a0:51:f8:27:75:bc:22: 73:85:fa:36:ad:7b:b5:78:e9:3e:4a:e6:cc:bf:26:74:2e:bc: f0:49:a5:d8:ce:4d:9d:41:3a:4a:1d:f2:e0:20:5e:87:7e:74: ab:8a:f7:8c:4d:72:7f:f3:3f:44:14:3e:16:83:2b:43:77:9b: fe:91:f5:7f:19:ae:dc:ab:68:8b:1c:73:64:c9:ba:99:6f:a9: b0:21:14:63:7a:9f:94:ed:bc:32:e2:27:3b:7d:c3:a8:5e:71: bc:a9:e0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUwODIzMDYxMTQ0WhcNMjUwODMwMDYxMTQ0WjAYMRYwFAYD VQQDEw02OGE5NWJhMC1kZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljkORhUTK2Wt+Jn1cjT+abdApV1vQBvj8tfwpPi5QYm6T+f3elu+Np0q2D1L ZeG/jpaPC//yVTOT+x3MnDXESsyV/mzIegIWO8FXDQm5acCshqr2ak1T8cAo9V1J 43ZHyBaUQiO+kZFrtts6VVzN3zaoV2M1x7lTBCHmMhQQgF00xK0pxHxdUTkVUwr5 dSuMB4RPGbtBdQu6ltsdpZSVxv2GjaAIZcGYxXKW78b1zaY2sONCQ19rnQJd2nzh l//5FqttA2v1nl07aKhD6OVwmfaevfYQUtpysHpF3vOM5Nv4b068plfkroG6qkad mLYUSc+RCG17Db6NFhCAe03P3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMliZ3xj iGrMQnIdUDmHvQJwraULMB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChc9TCSGMLNv4SPuF6xPFYCwnxcn3ELsIHvJah9yrqTl5paXQfb/1N i+dznvFSu7XzWwRZvI+Q8ntz++acMQC/zNMU0ZFnuKWcJ2jI3RIQZbbFJ3Eh1SQV TR1f2qO4DfyLgmQNjlj60RmEIt/G53QkUuSuj83PuaG9oD3QsaBMwNda2iAUUxbz cmWodlD/M8pKvj59gkNS0Gmri6BR+Cd1vCJzhfo2rXu1eOk+SubMvyZ0LrzwSaXY zk2dQTpKHfLgIF6HfnSriveMTXJ/8z9EFD4WgytDd5v+kfV/Ga7cq2iLHHNkybqZ b6mwIRRjep+U7bwy4ic7fcOoXnG8qeBL -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:06 2025 by rpki-client