$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: E59sWysNI82K60bDFvnzw/e+2/zB9H3vmTqXwxrTlQ4= Subject key identifier: 7B:EA:2E:D7:25:A2:A1:37:E8:48:A5:E8:C2:20:1A:E5:7B:79:BC:9D Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: 011E Signing time: Sat 23 Aug 2025 04:53:25 +0000 Manifest this update: Sat 23 Aug 2025 04:53:25 +0000 Manifest next update: Sat 30 Aug 2025 04:53:25 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: bQ8BWaB8DBW9a8rGT+jokQujsLXy4rKnXSEnMu9En6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Aug 23 04:53:25 2025 GMT Not After : Aug 30 04:53:25 2025 GMT Subject: CN=68a94945-985a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:e5:e5:8d:fa:65:be:d8:ba:79:49:d2:94: 9c:21:74:4f:fb:68:aa:8f:68:85:6f:63:18:2a:87: 97:c2:d6:e7:f8:4d:82:ee:a1:c3:95:61:c1:60:3c: 25:d3:d8:48:72:af:07:96:53:97:06:df:d8:6d:f5: 8f:87:10:63:25:52:f4:da:52:57:18:05:d7:00:9c: 60:31:98:7a:df:32:f5:57:3c:63:e4:d4:ad:a4:e6: 5c:ef:86:41:3c:47:95:49:44:71:d9:ae:c1:ac:11: 6a:ef:6f:03:8b:7e:8c:cd:8e:11:3f:d5:4f:cd:e3: 17:88:73:9e:77:80:0e:1d:95:bd:f1:cb:e7:42:8d: 69:54:2e:db:5b:b0:a5:6e:c9:ec:f1:69:cf:ff:84: 97:78:99:e3:6e:bc:a7:6d:eb:0f:6f:07:d2:e7:fc: 06:18:f0:2e:df:db:45:48:00:82:a7:e2:87:dc:6f: 29:07:44:02:ff:87:57:26:36:39:98:1f:d3:16:7c: 4a:74:06:59:91:9a:fc:07:74:00:48:27:b7:d6:96: 82:bb:5f:e6:d3:f3:c2:c5:a5:94:fc:5b:c5:10:0a: 5b:ed:f9:39:c6:9f:e8:a7:d1:6a:ca:87:bb:37:78: e6:3d:82:1b:ed:e8:9f:ce:09:2d:eb:f2:02:71:a3: b6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EA:2E:D7:25:A2:A1:37:E8:48:A5:E8:C2:20:1A:E5:7B:79:BC:9D X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bd:7a:7f:43:31:47:5a:57:7e:c8:39:e4:56:ee:39:6a:25: 1c:97:c7:74:e9:8b:eb:5e:b7:a1:f9:38:c4:8b:53:28:f7:4d: a7:94:3a:25:fa:a6:e6:38:a8:b1:54:bc:0a:05:e7:9e:f5:98: 8d:e0:65:50:4a:79:97:5c:d0:71:54:16:76:cc:db:bf:3d:07: 91:f9:61:ad:e7:c8:78:7b:49:fb:ab:f5:eb:07:93:a1:e2:ff: 3d:f7:35:3a:ea:27:16:17:4b:7e:22:56:dd:5f:cd:ea:27:23: 93:3d:4b:c1:91:7a:4f:80:6c:76:e5:1d:2b:2b:e9:32:fb:d2: 7a:0a:f6:42:d6:a5:51:2c:b5:b0:a2:c0:24:02:97:d5:de:d3: 45:f8:d2:61:99:67:b6:5f:0e:db:da:e0:dd:82:9b:49:54:db: 3a:fe:ad:26:c6:d6:28:c5:ba:28:ce:c8:33:5a:a7:1c:36:20: 11:7d:b0:36:ef:cb:47:94:c7:48:f2:8b:78:d3:f7:ae:dc:2b: b2:5a:3c:80:85:04:8e:8d:c4:2f:4b:d9:ad:8b:af:9a:a0:0c: 50:b0:cd:d1:29:93:13:bb:f3:ed:a3:ea:1c:11:47:b8:0e:66: a7:d8:2c:ad:10:c0:b7:b5:b6:7e:fb:1a:bd:13:fe:38:7b:cb: 2e:b2:83:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwODIzMDQ1MzI1WhcNMjUwODMwMDQ1MzI1WjAYMRYwFAYD VQQDEw02OGE5NDk0NS05ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Gzl5Y36Zb7YunlJ0pScIXRP+2iqj2iFb2MYKoeXwtbn+E2C7qHDlWHBYDwl 09hIcq8HllOXBt/YbfWPhxBjJVL02lJXGAXXAJxgMZh63zL1Vzxj5NStpOZc74ZB PEeVSURx2a7BrBFq728Di36MzY4RP9VPzeMXiHOed4AOHZW98cvnQo1pVC7bW7Cl bsns8WnP/4SXeJnjbrynbesPbwfS5/wGGPAu39tFSACCp+KH3G8pB0QC/4dXJjY5 mB/TFnxKdAZZkZr8B3QASCe31paCu1/m0/PCxaWU/FvFEApb7fk5xp/op9Fqyoe7 N3jmPYIb7eifzgkt6/ICcaO20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvqLtcl oqE36Eil6MIgGuV7ebydMB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQvXp/QzFHWld+yDnkVu45aiUcl8d06YvrXreh+TjEi1Mo902nlDol +qbmOKixVLwKBeee9ZiN4GVQSnmXXNBxVBZ2zNu/PQeR+WGt58h4e0n7q/XrB5Oh 4v899zU66icWF0t+IlbdX83qJyOTPUvBkXpPgGx25R0rK+ky+9J6CvZC1qVRLLWw osAkApfV3tNF+NJhmWe2Xw7b2uDdgptJVNs6/q0mxtYoxboozsgzWqccNiARfbA2 78tHlMdI8ot40/eu3CuyWjyAhQSOjcQvS9mti6+aoAxQsM3RKZMTu/Pto+ocEUe4 Dman2CytEMC3tbZ++xq9E/44e8susoPX -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:32 2025 by rpki-client