$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: 5ZHSFO4TxNalPp5jcSdkA7g18jMQKnJvKYln4QFgji0= Subject key identifier: 65:1E:4B:C8:A1:C6:8F:FA:E6:0B:9B:DA:C5:F4:89:E2:52:AA:00:54 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9AA1 Signing time: Fri 22 Aug 2025 15:18:21 +0000 Manifest this update: Fri 22 Aug 2025 15:18:21 +0000 Manifest next update: Fri 29 Aug 2025 15:18:21 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: DIRXFi3zpKk2ItanTgW23InsCLcsHp5VWAzawnyzvJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Aug 22 15:18:21 2025 GMT Not After : Aug 29 15:18:21 2025 GMT Subject: CN=68a88a3d-57f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:6c:5a:5f:24:87:90:aa:46:25:22:06:4f: 3a:dc:e7:bf:4e:13:9c:2b:61:2c:09:d7:bd:eb:85: 14:8a:4c:da:c2:6f:21:4f:52:9b:0f:90:26:66:80: d2:fa:04:ca:0a:0b:5f:72:d6:e1:f9:7d:ed:d5:79: 60:12:8d:f2:ea:da:e5:9e:2d:11:f0:95:12:6e:d8: 1f:78:a0:18:93:bb:d0:ff:57:4f:4b:96:25:aa:e9: ab:e7:4c:c0:66:c9:c8:b2:61:91:7d:f1:e6:96:1b: ba:4f:ad:1a:00:3b:f2:16:1f:fa:49:e4:7a:48:82: bc:2d:9d:61:49:92:c5:cf:f0:a0:06:a4:cc:b2:52: b9:bf:f6:17:d9:69:4e:8b:1d:c9:65:2d:df:62:52: 5e:ab:63:25:fc:b5:11:05:36:1d:44:aa:db:97:d2: bd:ac:d3:17:93:0a:ae:6b:fc:d8:b5:cc:4b:83:9a: a3:73:b2:81:8c:c9:cb:2f:02:7a:97:42:05:2f:74: 71:64:6d:c0:79:19:ab:5e:1e:4e:68:2d:09:59:41: e0:34:fc:90:2e:a0:a7:38:bd:3e:bb:8e:4e:bf:51: 11:9a:81:43:56:74:73:19:f3:3b:27:a5:00:af:89: 3b:bf:87:57:4c:35:ca:b6:15:1b:87:eb:92:0c:f6: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1E:4B:C8:A1:C6:8F:FA:E6:0B:9B:DA:C5:F4:89:E2:52:AA:00:54 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:dc:fe:60:37:80:d3:9b:f0:4a:39:5b:a6:82:8b:64:de:f5: e4:e5:8e:eb:38:6f:ee:9e:2a:3b:03:ba:4f:d6:0f:8f:b0:6a: 59:0f:d6:65:bb:37:c5:c4:19:b8:26:be:71:ab:2e:41:2f:b3: 9d:29:7f:e1:54:68:83:b3:aa:16:8d:8b:3f:ee:a9:64:89:7d: 48:84:c6:23:06:53:57:6f:88:87:fb:45:d1:2c:55:71:c8:ec: ab:c9:66:3d:63:c9:06:96:7c:c7:f6:44:ad:b9:9d:16:30:fc: 0b:df:0f:a3:bd:ab:1a:e9:47:ed:75:69:17:56:7d:5b:90:62: 61:30:32:6c:de:05:cf:29:3e:bc:9f:f9:70:97:1d:f5:1c:83: ea:df:f4:28:10:dd:1c:e1:f3:2b:1f:a3:69:ef:a1:ab:57:33: c0:c3:1d:63:75:3a:11:fb:8a:69:a7:6d:f2:ca:cc:cf:fa:57: 93:44:6b:38:41:a5:1d:47:64:6a:69:82:17:24:b9:0b:dd:86: e8:f0:eb:7d:94:4b:3d:16:d2:0d:44:e8:62:bb:e9:e2:a2:6f: 0c:04:36:78:8a:0e:1f:58:44:40:31:35:a5:8e:a1:0b:34:ec: 9a:f1:f9:d6:c5:6c:25:ed:8f:c0:04:ae:bf:36:6a:6b:de:3f: 8d:ab:61:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUwODIyMTUxODIxWhcNMjUwODI5MTUxODIxWjAYMRYwFAYD VQQDEw02OGE4OGEzZC01N2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw9sWl8kh5CqRiUiBk863Oe/ThOcK2EsCde964UUikzawm8hT1KbD5AmZoDS +gTKCgtfctbh+X3t1XlgEo3y6trlni0R8JUSbtgfeKAYk7vQ/1dPS5Ylqumr50zA ZsnIsmGRffHmlhu6T60aADvyFh/6SeR6SIK8LZ1hSZLFz/CgBqTMslK5v/YX2WlO ix3JZS3fYlJeq2Ml/LURBTYdRKrbl9K9rNMXkwqua/zYtcxLg5qjc7KBjMnLLwJ6 l0IFL3RxZG3AeRmrXh5OaC0JWUHgNPyQLqCnOL0+u45Ov1ERmoFDVnRzGfM7J6UA r4k7v4dXTDXKthUbh+uSDPbI8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUeS8ih xo/65gub2sX0ieJSqgBUMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ3P5gN4DTm/BKOVumgotk3vXk5Y7rOG/unio7A7pP1g+PsGpZD9Zl uzfFxBm4Jr5xqy5BL7OdKX/hVGiDs6oWjYs/7qlkiX1IhMYjBlNXb4iH+0XRLFVx yOyryWY9Y8kGlnzH9kStuZ0WMPwL3w+jvasa6UftdWkXVn1bkGJhMDJs3gXPKT68 n/lwlx31HIPq3/QoEN0c4fMrH6Np76GrVzPAwx1jdToR+4ppp23yyszP+leTRGs4 QaUdR2RqaYIXJLkL3Ybo8Ot9lEs9FtINROhiu+niom8MBDZ4ig4fWERAMTWljqEL NOya8fnWxWwl7Y/ABK6/Nmpr3j+Nq2G+ -----END CERTIFICATE-----Generated at Sat Aug 23 16:09:35 2025 by rpki-client