$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: ZCBtMfKUssuIL3xdaLTm1SmIHUZhZlVGhoQK9yCJmDs= Subject key identifier: 5B:C4:51:8E:F5:88:EB:91:DD:34:CC:C2:4F:B5:8C:58:09:D7:DE:4E Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 161F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 161F Signing time: Fri 22 Aug 2025 16:50:54 +0000 Manifest this update: Fri 22 Aug 2025 16:50:54 +0000 Manifest next update: Fri 29 Aug 2025 16:50:54 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: RKR1SVNrtmBJ4rIDR6rdb1nAq8QGBe0O7CvbeKlGldg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5663 (0x161f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Aug 22 16:50:54 2025 GMT Not After : Aug 29 16:50:54 2025 GMT Subject: CN=68a89fee-3751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:83:dd:25:94:db:27:29:c3:1e:71:db:f0:90: c6:d4:fe:2c:e1:39:30:a8:51:7c:a3:d0:3a:ab:a8: 7a:40:a1:9d:af:02:b6:e0:4f:5e:aa:66:6b:42:2b: 52:dc:2a:a9:7f:47:96:ed:66:98:50:94:2b:dd:96: 8e:75:3b:5e:88:eb:ea:6a:b3:60:e4:c5:0e:05:d6: e0:95:eb:85:bf:97:29:2d:6c:54:ae:ec:a8:0b:5f: 93:da:3b:e6:e9:63:5a:cb:0f:af:f5:44:4d:dc:7a: 28:2e:bb:3f:f6:d9:a0:c5:b3:59:77:41:22:d1:05: 5b:72:8a:a4:0e:99:e0:71:7a:0e:71:e2:aa:b7:59: ea:3c:4d:a6:50:75:c9:6c:71:fe:a7:6d:fa:5b:ba: 26:d3:31:8e:e9:dd:ba:ed:6c:7f:3d:2a:84:41:fe: 32:10:9f:d8:db:df:c9:e6:11:c2:38:73:90:b9:97: 10:4e:6e:54:e3:67:7d:35:de:62:9d:c5:e3:5f:d4: bf:88:c5:44:b7:89:68:c1:ba:a4:d3:f3:32:7b:07: 3c:38:02:fc:f9:6b:ba:d2:ae:23:3d:94:27:0d:8f: b6:89:1f:9b:81:ff:3b:a3:f8:ac:ce:c4:cd:71:e2: 47:18:dd:b7:85:25:53:56:91:bf:a6:df:fc:6d:79: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C4:51:8E:F5:88:EB:91:DD:34:CC:C2:4F:B5:8C:58:09:D7:DE:4E X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:37:3c:62:2a:df:18:28:48:12:84:3a:a8:db:5f:8f:d7:40: 58:e7:15:a7:89:5e:3d:3f:d4:ff:e9:30:e9:22:09:1c:7a:61: cb:8b:b0:d9:c7:cf:0e:6b:4b:14:e5:53:59:03:c1:0a:8b:14: 49:77:00:ae:8a:17:2d:bc:f9:96:26:09:ca:98:f8:ad:d9:42: 7d:64:80:96:fb:de:e2:f7:a3:f6:e4:04:2b:27:7f:1c:cc:9f: 9f:96:a8:c9:a2:7b:5c:1d:bc:e5:9f:64:ba:e0:5f:8e:7c:19: cb:6c:ff:b9:ce:b9:5f:0e:4e:de:78:39:29:99:e3:ee:e6:f3: 0c:b0:ef:65:7a:79:a8:32:51:ee:c3:00:3c:a7:99:28:ff:c7: 95:d6:34:c1:98:0d:df:30:ff:c8:54:c5:72:19:92:56:bc:3d: 7b:74:a6:e5:16:10:42:21:ee:e4:9e:3e:e4:05:0f:41:41:3e: f5:91:75:59:95:a6:11:b9:79:4f:45:ca:94:40:7e:67:65:eb: fb:08:5c:71:a9:a3:00:03:94:10:ca:1f:1b:81:6e:49:05:8b: ae:8d:7b:4d:b1:96:93:5c:63:f0:7b:7c:de:2b:bb:13:41:e2: 57:89:fe:6a:f2:51:fc:1d:6b:ba:c2:35:91:c3:90:e1:6e:c7: 6e:da:87:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUwODIyMTY1MDU0WhcNMjUwODI5MTY1MDU0WjAYMRYwFAYD VQQDEw02OGE4OWZlZS0zNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54PdJZTbJynDHnHb8JDG1P4s4TkwqFF8o9A6q6h6QKGdrwK24E9eqmZrQitS 3Cqpf0eW7WaYUJQr3ZaOdTteiOvqarNg5MUOBdbgleuFv5cpLWxUruyoC1+T2jvm 6WNayw+v9URN3HooLrs/9tmgxbNZd0Ei0QVbcoqkDpngcXoOceKqt1nqPE2mUHXJ bHH+p236W7om0zGO6d267Wx/PSqEQf4yEJ/Y29/J5hHCOHOQuZcQTm5U42d9Nd5i ncXjX9S/iMVEt4lowbqk0/Myewc8OAL8+Wu60q4jPZQnDY+2iR+bgf87o/iszsTN ceJHGN23hSVTVpG/pt/8bXlzowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvEUY71 iOuR3TTMwk+1jFgJ195OMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhNzxiKt8YKEgShDqo21+P10BY5xWniV49P9T/6TDpIgkcemHLi7DZ x88Oa0sU5VNZA8EKixRJdwCuihctvPmWJgnKmPit2UJ9ZICW+97i96P25AQrJ38c zJ+flqjJontcHbzln2S64F+OfBnLbP+5zrlfDk7eeDkpmePu5vMMsO9lenmoMlHu wwA8p5ko/8eV1jTBmA3fMP/IVMVyGZJWvD17dKblFhBCIe7knj7kBQ9BQT71kXVZ laYRuXlPRcqUQH5nZev7CFxxqaMAA5QQyh8bgW5JBYuujXtNsZaTXGPwe3zeK7sT QeJXif5q8lH8HWu6wjWRw5Dhbsdu2od2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:25 2025 by rpki-client