$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: 6v0JoRz5HTGhBXimU1Tz6iNObP95JRCT5o02KnjsdWI= Subject key identifier: 47:49:66:E7:62:ED:75:FD:CC:77:43:38:2E:DE:41:8A:55:6B:2E:77 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:00:47 +0000 Manifest this update: Sat 23 Aug 2025 07:00:46 +0000 Manifest next update: Sat 30 Aug 2025 07:00:46 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: OEjYYbrC5/qrEc7ZSVI/b9qfhwNyEON+vaXNzYWcWb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Aug 23 07:00:46 2025 GMT Not After : Aug 30 07:00:46 2025 GMT Subject: CN=68a9671f-500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c1:07:b8:82:89:2b:df:4d:47:46:cc:61:70: 4e:49:03:a3:40:d1:8d:5e:b1:6b:72:10:94:ff:16: ef:53:f4:47:b0:78:a0:45:ac:0e:d1:b2:79:ba:91: 9f:3e:d0:a4:76:19:dc:c4:19:66:a3:4d:28:46:95: 3f:97:f5:49:f6:e5:9e:5f:7a:e1:a6:66:b0:90:bd: 19:ee:80:f5:85:2a:d1:16:cd:24:80:fe:c7:b8:8a: 5d:15:06:a7:21:34:ac:0a:76:77:02:31:5a:de:16: de:9f:af:05:e0:38:7d:74:b2:55:c6:15:2b:f1:79: ac:1c:e1:72:9d:98:72:56:2d:86:25:ce:b3:df:7d: 75:56:22:ba:20:88:7e:18:22:4f:5b:d3:71:7e:9e: 9d:ff:16:8b:e3:ee:dd:7c:b8:39:4f:b8:1c:e5:8d: 1c:01:32:cf:27:48:48:46:a3:a3:3f:04:f5:41:cf: 1e:de:6a:ff:1c:d9:3b:55:2b:45:f9:61:c0:b0:35: 59:39:52:e9:e9:ff:86:45:f6:cc:d1:d6:55:c2:24: 65:98:08:c6:06:61:96:4d:2a:25:85:8d:b3:dc:42: a8:96:14:14:d4:94:a2:f3:00:e8:7d:8d:b8:0e:61: da:5e:0f:bb:27:5d:a3:fc:e5:c9:d0:57:33:b3:c8: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:49:66:E7:62:ED:75:FD:CC:77:43:38:2E:DE:41:8A:55:6B:2E:77 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d6:b0:9d:ef:91:41:c0:af:8d:ef:69:2b:71:0e:80:df:ea: cb:04:2a:04:91:57:b2:81:d4:ef:6b:f6:4c:9d:99:96:58:0b: 93:c2:28:a4:93:fa:44:4e:df:d2:f3:8d:5a:34:35:25:8c:c1: df:2b:8d:29:a6:c8:e6:ba:ca:a8:cb:b6:82:de:40:ff:04:00: 71:4d:f5:7f:2f:1e:ee:4b:1b:97:d0:b8:39:35:5a:12:1b:ee: 18:c9:85:2a:c9:ea:58:fa:20:7d:72:64:e4:da:9d:d6:99:ae: ce:3b:1a:c7:9a:57:9c:3b:c7:c4:0c:19:30:e4:3f:2c:a1:fc: 94:28:f8:25:d1:d9:1e:0b:dc:99:ab:29:e4:93:42:c6:04:0f: bb:eb:d5:a5:92:7c:03:e5:78:38:93:18:3e:40:98:44:dc:08: 73:f3:29:62:af:bf:bd:2f:f2:fa:42:05:26:7c:62:2e:11:66: 39:89:e4:35:43:08:cc:78:65:89:e4:bb:5d:2e:70:3e:b4:b9: 70:8e:3d:e2:72:7c:d3:a7:40:9a:84:ae:31:af:86:43:9a:06: 48:e2:8e:93:61:51:92:d0:06:80:a0:9a:00:5f:83:be:ff:31: 8c:4b:d5:a7:73:40:53:8a:ee:76:96:79:72:99:f7:7b:d2:de: 11:eb:00:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTA4MjMwNzAwNDZaFw0yNTA4MzAwNzAwNDZaMBgxFjAUBgNV BAMTDTY4YTk2NzFmLTUwMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvwQe4gokr301HRsxhcE5JA6NA0Y1esWtyEJT/Fu9T9EeweKBFrA7Rsnm6kZ8+ 0KR2GdzEGWajTShGlT+X9Un25Z5feuGmZrCQvRnugPWFKtEWzSSA/se4il0VBqch NKwKdncCMVreFt6frwXgOH10slXGFSvxeawc4XKdmHJWLYYlzrPffXVWIrogiH4Y Ik9b03F+np3/Fovj7t18uDlPuBzljRwBMs8nSEhGo6M/BPVBzx7eav8c2TtVK0X5 YcCwNVk5Uunp/4ZF9szR1lXCJGWYCMYGYZZNKiWFjbPcQqiWFBTUlKLzAOh9jbgO YdpeD7snXaP85cnQVzOzyJmDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR0lm52Lt df3Md0M4Lt5BilVrLncwHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbWsJ3vkUHAr43vaStxDoDf6ssEKgSRV7KB1O9r9kydmZZYC5PCKKST +kRO39LzjVo0NSWMwd8rjSmmyOa6yqjLtoLeQP8EAHFN9X8vHu5LG5fQuDk1WhIb 7hjJhSrJ6lj6IH1yZOTandaZrs47GseaV5w7x8QMGTDkPyyh/JQo+CXR2R4L3Jmr KeSTQsYED7vr1aWSfAPleDiTGD5AmETcCHPzKWKvv70v8vpCBSZ8Yi4RZjmJ5DVD CMx4ZYnku10ucD60uXCOPeJyfNOnQJqErjGvhkOaBkjijpNhUZLQBoCgmgBfg77/ MYxL1adzQFOK7naWeXKZ93vS3hHrAGo= -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:39 2025 by rpki-client