$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: PtOIHS98Jbc2lFx1rvKwEX9suslCR81xuMwRt+M+9Q8= Subject key identifier: 5F:7D:CD:C4:14:55:A6:C4:1F:9D:90:6D:7B:C8:8F:D1:59:D8:FA:B9 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 34B0 Signing time: Fri 22 Aug 2025 14:38:56 +0000 Manifest this update: Fri 22 Aug 2025 14:38:56 +0000 Manifest next update: Fri 29 Aug 2025 14:38:56 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: ckx2aQz19qW/84uh4JzP7hdOYyK//sIozqobtQudEnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Aug 22 14:38:56 2025 GMT Not After : Aug 29 14:38:56 2025 GMT Subject: CN=68a88100-e5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:f4:6a:39:b0:37:7f:b4:b7:eb:46:d1:f4: 3f:9c:bc:35:61:b6:18:cc:cb:c5:40:e4:78:0a:e8: 4a:66:5b:86:76:fb:00:69:af:3b:13:c2:be:a6:1d: b1:85:42:1a:2b:25:96:65:a6:27:dd:70:e1:59:d6: 76:96:67:ae:2b:ce:f4:3f:f9:d2:1d:94:8d:5d:df: 31:92:b3:2e:ef:dd:56:0a:02:be:ba:33:59:19:0f: e4:b7:3e:02:55:cb:b2:5b:cf:6c:ad:7a:1b:3c:7a: fc:18:e6:32:20:32:cb:04:f4:c4:6a:cf:3d:23:b6: a8:55:7d:31:c5:37:bf:af:1c:e7:29:2c:b9:4d:92: a2:91:e6:2a:e4:b0:30:44:e9:bb:14:a7:a0:56:b8: 65:d8:53:ea:a1:44:1a:cd:1f:29:53:b8:49:71:9e: 01:fc:99:18:1c:7f:f3:31:80:db:51:23:b3:22:77: fd:f3:0b:81:ed:05:e2:87:c2:0d:27:ed:6f:1d:5c: 0d:d3:d6:c4:27:a7:15:1b:76:59:d9:50:66:9f:12: bc:5d:5a:a6:be:cc:b8:29:88:be:08:3a:94:c2:c8: 68:1a:05:90:ec:6d:8e:b9:c0:6a:e0:33:6a:58:c3: be:98:22:2c:01:33:a0:96:ea:68:b4:39:00:bd:3e: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7D:CD:C4:14:55:A6:C4:1F:9D:90:6D:7B:C8:8F:D1:59:D8:FA:B9 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:4c:a4:30:8d:a9:5d:ee:13:00:86:7c:36:01:2f:d2:af:0a: 46:7c:f3:21:d0:1a:c0:7e:5b:30:80:d1:9c:5a:10:37:70:f8: 41:03:e8:e6:61:55:8e:67:17:5b:48:c7:7b:0a:fd:46:30:2c: e6:f4:3c:ba:95:5a:63:c9:49:f3:2a:ad:44:b9:cd:3b:a9:cc: 63:31:41:76:e6:af:39:02:c8:bd:be:70:0a:9a:1a:4b:7a:d8: 05:36:56:fb:ff:e7:bd:c9:f1:37:c0:f7:de:64:ed:3c:3e:f7: 6a:05:4d:ae:60:b5:54:00:65:f5:c9:de:a5:90:c3:86:c8:37: 4c:d0:25:31:09:9c:9c:04:31:83:66:bf:d9:26:97:0d:d1:48: 39:ae:6e:90:66:9f:02:ef:88:5f:61:09:21:0c:57:1f:c2:bc: da:cc:f4:d4:36:5d:56:c1:ca:c1:52:fc:57:a2:ce:fd:9a:e4: 6b:79:6e:d0:68:97:df:14:db:34:5a:29:2f:92:ae:1e:e8:d5: 9f:15:6a:be:1b:13:1a:8f:f7:3f:e2:9f:64:6b:11:55:e0:f5: ac:eb:41:6d:08:23:06:22:3e:4e:28:54:c0:7b:e6:91:05:1a: f7:16:e8:63:9c:f1:76:67:37:5f:4e:0d:eb:9e:0b:6f:20:04: 8d:4c:ab:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwODIyMTQzODU2WhcNMjUwODI5MTQzODU2WjAYMRYwFAYD VQQDEw02OGE4ODEwMC1lNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3430ajmwN3+0t+tG0fQ/nLw1YbYYzMvFQOR4CuhKZluGdvsAaa87E8K+ph2x hUIaKyWWZaYn3XDhWdZ2lmeuK870P/nSHZSNXd8xkrMu791WCgK+ujNZGQ/ktz4C VcuyW89srXobPHr8GOYyIDLLBPTEas89I7aoVX0xxTe/rxznKSy5TZKikeYq5LAw ROm7FKegVrhl2FPqoUQazR8pU7hJcZ4B/JkYHH/zMYDbUSOzInf98wuB7QXih8IN J+1vHVwN09bEJ6cVG3ZZ2VBmnxK8XVqmvsy4KYi+CDqUwshoGgWQ7G2OucBq4DNq WMO+mCIsATOglupotDkAvT457wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF99zcQU VabEH52QbXvIj9FZ2Pq5MB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9TKQwjald7hMAhnw2AS/SrwpGfPMh0BrAflswgNGcWhA3cPhBA+jm YVWOZxdbSMd7Cv1GMCzm9Dy6lVpjyUnzKq1Euc07qcxjMUF25q85Asi9vnAKmhpL etgFNlb7/+e9yfE3wPfeZO08PvdqBU2uYLVUAGX1yd6lkMOGyDdM0CUxCZycBDGD Zr/ZJpcN0Ug5rm6QZp8C74hfYQkhDFcfwrzazPTUNl1WwcrBUvxXos79muRreW7Q aJffFNs0Wikvkq4e6NWfFWq+GxMaj/c/4p9kaxFV4PWs60FtCCMGIj5OKFTAe+aR BRr3FuhjnPF2ZzdfTg3rngtvIASNTKtZ -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:11 2025 by rpki-client