$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: rbrUcnqbI6XHJW4zNg1t7b0dS2IjFKwhQtEk9sMRp+U= Subject key identifier: 95:0F:ED:6C:E9:E9:03:16:9A:42:F7:E7:25:41:11:0A:54:EE:32:4F Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 2564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9FED Signing time: Fri 22 Aug 2025 14:30:33 +0000 Manifest this update: Fri 22 Aug 2025 14:30:33 +0000 Manifest next update: Fri 29 Aug 2025 14:30:33 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: YXV0M6oSPHozxVTvOfAmiJprFfYf8T1Smz/7+40XrPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9572 (0x2564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: Aug 22 14:30:33 2025 GMT Not After : Aug 29 14:30:33 2025 GMT Subject: CN=68a87f09-9402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:e0:e8:d2:99:8d:bc:aa:23:16:c5:54:c9: ba:c3:85:5e:b0:f4:e3:d4:3f:5a:3d:42:b6:0b:8a: 49:f5:fa:4f:5e:bf:ce:5c:17:65:5c:71:77:7c:5a: 2e:07:c0:54:87:58:08:c0:76:1e:6c:56:54:b9:1b: 7c:f5:54:e9:90:bf:99:b1:dd:e8:2f:4d:49:ee:03: f6:4e:df:d4:b7:ab:66:0e:b2:22:d3:a0:ad:b3:d7: 7d:5f:88:9f:fc:3d:00:1d:65:77:3f:05:f4:ef:a8: 12:4b:c2:f0:76:6f:95:1b:af:53:ee:2f:e0:42:5e: 6e:4f:47:23:04:ac:04:a9:d0:d8:ab:f6:de:12:ee: b1:c9:ef:fa:d2:49:f9:82:99:57:1e:5b:37:49:0e: ad:51:3a:58:70:31:86:94:f3:68:02:bf:d8:e2:35: 99:10:b9:ac:76:0f:20:45:5f:ed:44:1c:ca:71:c8: ea:8b:b2:bc:9b:78:07:04:04:05:17:1e:d3:89:bc: 97:b6:31:3c:56:41:82:95:fa:99:ff:94:be:d9:ef: 6b:68:a5:74:77:88:95:17:46:54:0d:bd:fc:03:ac: 6f:86:a8:71:02:98:e3:51:56:73:77:3a:f7:a6:dd: 0c:43:20:60:42:66:1c:1a:db:e7:c9:62:58:72:43: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:ED:6C:E9:E9:03:16:9A:42:F7:E7:25:41:11:0A:54:EE:32:4F X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:6f:20:9d:37:e4:9a:fe:2e:33:1c:7c:67:21:eb:c3:7d: e6:71:2e:73:38:a0:c7:f3:bd:8f:8b:7c:8f:a0:f8:b3:de:ac: dd:f6:59:70:b6:cb:39:94:26:f1:00:81:8d:67:10:29:fa:a1: 8a:2d:96:ff:aa:e8:9b:d1:0a:44:86:88:cc:4d:47:98:64:65: 43:80:99:dd:75:4b:5b:62:b7:d1:5b:16:06:a5:9a:17:6a:41: d2:61:33:99:2b:88:cd:4d:81:34:8b:c1:9c:5e:e3:b0:22:4a: b0:59:48:1a:09:bf:6f:55:82:9e:b4:5b:da:fa:15:2b:19:92: 63:73:6f:0e:42:33:fb:68:85:6b:f3:b2:71:fa:e3:3b:ae:3d: d1:29:b7:63:ce:0c:03:bc:46:43:a6:b9:59:fc:b7:de:c9:3f: 22:bb:c4:5b:2a:94:51:6c:d8:6f:3d:77:db:5d:41:b3:fe:98: 4a:ab:c3:35:0d:97:76:77:96:80:f6:e8:61:6e:61:56:76:2d: 20:44:c8:86:33:cf:68:8c:b3:c6:0b:d8:30:eb:d1:06:6c:98: 4a:41:b3:e2:20:43:a2:06:9f:b8:7d:86:47:34:84:65:a7:23: f4:7f:c8:e0:36:9a:b7:36:1a:64:13:07:54:5b:5c:80:21:88: c2:20:34:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjUwODIyMTQzMDMzWhcNMjUwODI5MTQzMDMzWjAYMRYwFAYD VQQDEw02OGE4N2YwOS05NDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz/g6NKZjbyqIxbFVMm6w4VesPTj1D9aPUK2C4pJ9fpPXr/OXBdlXHF3fFou B8BUh1gIwHYebFZUuRt89VTpkL+Zsd3oL01J7gP2Tt/Ut6tmDrIi06Cts9d9X4if /D0AHWV3PwX076gSS8Lwdm+VG69T7i/gQl5uT0cjBKwEqdDYq/beEu6xye/60kn5 gplXHls3SQ6tUTpYcDGGlPNoAr/Y4jWZELmsdg8gRV/tRBzKccjqi7K8m3gHBAQF Fx7TibyXtjE8VkGClfqZ/5S+2e9raKV0d4iVF0ZUDb38A6xvhqhxApjjUVZzdzr3 pt0MQyBgQmYcGtvnyWJYckMaVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUP7Wzp 6QMWmkL35yVBEQpU7jJPMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMSm8gnTfkmv4uMxx8ZyHrw33mcS5zOKDH872Pi3yPoPiz3qzd9llw tss5lCbxAIGNZxAp+qGKLZb/quib0QpEhojMTUeYZGVDgJnddUtbYrfRWxYGpZoX akHSYTOZK4jNTYE0i8GcXuOwIkqwWUgaCb9vVYKetFva+hUrGZJjc28OQjP7aIVr 87Jx+uM7rj3RKbdjzgwDvEZDprlZ/LfeyT8iu8RbKpRRbNhvPXfbXUGz/phKq8M1 DZd2d5aA9uhhbmFWdi0gRMiGM89ojLPGC9gw69EGbJhKQbPiIEOiBp+4fYZHNIRl pyP0f8jgNpq3NhpkEwdUW1yAIYjCIDQg -----END CERTIFICATE-----Generated at Sat Aug 23 18:50:33 2025 by rpki-client