$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json) Hash identifier: fwr5oxWIlbpOhBFGOzsFy/UCO/Bnq7uF4uMBrbFFLA0= Subject key identifier: 07:77:FF:28:1A:BC:70:D0:8C:BF:27:19:52:06:EB:B8:39:80:D8:20 Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft Manifest number: DE Signing time: Sat 23 Aug 2025 05:36:32 +0000 Manifest this update: Sat 23 Aug 2025 05:36:32 +0000 Manifest next update: Sat 30 Aug 2025 05:36:32 +0000 Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: aV7P0WYGum1TUEK+JyVpTBU13bJdXyE5518SWgiffk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Validity Not Before: Aug 23 05:36:32 2025 GMT Not After : Aug 30 05:36:32 2025 GMT Subject: CN=68a95360-b31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:0c:6f:9a:fb:e1:07:98:07:69:d6:04:11: 4c:05:3a:20:40:0b:8a:fa:e5:8d:73:fe:97:15:27: 94:89:f9:ab:cb:f2:f7:64:ec:ea:5b:ed:51:65:ae: f5:79:df:b5:11:f5:fa:d0:34:4e:a2:e7:33:22:de: bb:79:76:e2:e8:d1:02:c8:73:93:e3:e4:10:36:41: a5:be:ae:fd:a3:89:31:89:df:dc:77:50:e2:f3:23: ff:65:c3:54:f0:db:fd:c4:29:87:6e:e2:01:cf:e0: f5:73:c7:d6:f6:ce:55:52:a3:02:1b:5b:4a:15:42: b6:d7:d0:a2:8c:66:8a:fb:5c:85:7f:2f:46:ef:7d: d7:d4:21:eb:b0:48:15:2d:93:d5:41:8b:1f:d7:ad: e9:0f:27:78:d0:44:4e:34:3c:e5:8d:a5:36:fd:52: 05:4f:d1:00:94:a1:eb:aa:11:19:28:c4:5f:99:35: c8:7f:48:de:d6:e9:a0:4e:44:90:51:da:81:41:d3: d2:29:36:47:85:25:2f:40:2d:bf:99:4e:82:07:cb: 9d:b4:a3:ec:88:d0:c2:b0:0f:eb:60:8d:5a:8e:11: ea:6d:85:40:39:e5:1c:3d:24:f5:7a:6e:9a:8b:31: b0:ef:38:cd:39:ae:81:0c:7b:8d:1e:14:2b:39:c6: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:77:FF:28:1A:BC:70:D0:8C:BF:27:19:52:06:EB:B8:39:80:D8:20 X509v3 Authority Key Identifier: keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:07:15:0b:4a:82:8e:93:8b:da:a2:0e:67:55:84:b9:e6:e1: 66:5f:15:a5:83:88:6c:cd:4e:64:26:b9:97:ca:80:3a:05:26: 6e:9e:c7:6b:37:d9:f0:d7:e9:7a:a6:ca:ba:4b:da:3c:5b:d9: 6a:3a:e4:ed:3a:69:12:9b:b4:67:f4:e0:84:14:31:18:30:1a: 79:6a:cf:80:83:76:c9:e6:65:ae:f6:2b:f1:47:03:b0:da:41: 20:ef:51:2c:48:4e:32:9e:7f:39:e5:3f:c5:bb:6f:e1:50:b5: 60:5f:71:13:e6:85:05:61:66:9d:3f:b8:cb:a4:df:a1:c6:78: 76:10:5e:52:6c:3b:c2:4a:24:7b:60:1b:14:57:fa:63:a1:91: 5d:3f:f0:0d:0d:dd:3a:e2:1e:21:4b:41:20:66:de:83:ee:24: bf:a6:24:91:b1:1b:2c:ab:0e:ca:c8:91:1a:24:a8:86:b8:c8: 8f:be:e2:eb:3a:e3:cc:dd:94:96:ed:2d:ef:0d:34:fc:53:c7: 6a:b2:20:ac:99:27:7d:00:ee:f2:3d:4f:25:44:a0:57:9a:2e: 1f:43:55:8e:da:cb:d2:14:8a:fb:db:14:13:0d:8f:0e:42:0d: 96:fa:10:b3:26:0d:65:0b:8b:1f:65:d6:43:0e:19:54:3e:37: d5:9b:3b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKEU2NEUwMjE3NzQzNUFFRjFDQkZENjI0RTI2NjdFNjk2 OUFBRkFBRkYwHhcNMjUwODIzMDUzNjMyWhcNMjUwODMwMDUzNjMyWjAYMRYwFAYD VQQDEw02OGE5NTM2MC1iMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qgMb5r74QeYB2nWBBFMBTogQAuK+uWNc/6XFSeUifmry/L3ZOzqW+1RZa71 ed+1EfX60DROouczIt67eXbi6NECyHOT4+QQNkGlvq79o4kxid/cd1Di8yP/ZcNU 8Nv9xCmHbuIBz+D1c8fW9s5VUqMCG1tKFUK219CijGaK+1yFfy9G733X1CHrsEgV LZPVQYsf163pDyd40ERONDzljaU2/VIFT9EAlKHrqhEZKMRfmTXIf0je1umgTkSQ UdqBQdPSKTZHhSUvQC2/mU6CB8udtKPsiNDCsA/rYI1ajhHqbYVAOeUcPST1em6a izGw7zjNOa6BDHuNHhQrOcYdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAd3/yga vHDQjL8nGVIG67g5gNggMB8GA1UdIwQYMBaAFOZOAhd0Na7xy/1iTiZn5paar6r/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FRjgxMzdFNDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2SExfV0pPSm1mbWxwcXZx djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrNENGM1ExcnZITF9XSk9KbWZtbHBxdnF2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FRjgxMzdFNDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2 SExfV0pPSm1mbWxwcXZxdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFBxULSoKOk4vaog5nVYS55uFmXxWlg4hszU5kJrmXyoA6BSZunsdr N9nw1+l6psq6S9o8W9lqOuTtOmkSm7Rn9OCEFDEYMBp5as+Ag3bJ5mWu9ivxRwOw 2kEg71EsSE4ynn855T/Fu2/hULVgX3ET5oUFYWadP7jLpN+hxnh2EF5SbDvCSiR7 YBsUV/pjoZFdP/ANDd064h4hS0EgZt6D7iS/piSRsRssqw7KyJEaJKiGuMiPvuLr OuPM3ZSW7S3vDTT8U8dqsiCsmSd9AO7yPU8lRKBXmi4fQ1WO2svSFIr72xQTDY8O Qg2W+hCzJg1lC4sfZdZDDhlUPjfVmzsW -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:48 2025 by rpki-client