$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: Z2OVQmgLmRTDSLpi6Bsf5EHDyHhoLr2CBz59/ajakN0= Subject key identifier: BA:CD:E5:91:6A:81:72:78:8A:EF:5C:25:83:23:DA:69:E5:39:0B:58 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E64 Signing time: Fri 22 Aug 2025 18:11:57 +0000 Manifest this update: Fri 22 Aug 2025 18:11:56 +0000 Manifest next update: Fri 29 Aug 2025 18:11:56 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: YxFVsM7CcmnW4BYALmy7gqRmt1k/UyyJZ7YVhZiWQ/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Aug 22 18:11:56 2025 GMT Not After : Aug 29 18:11:56 2025 GMT Subject: CN=68a8b2ec-386b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:d0:65:61:af:df:b6:c3:d3:37:61:cf:d9: 86:c6:ac:61:3d:d9:ad:8d:d3:37:4f:e2:f2:40:7b: a6:a5:aa:5b:89:45:2e:7c:65:66:79:b0:f3:a1:2c: 28:3b:7f:e4:aa:f9:7a:a5:d4:5f:35:f4:6f:73:f2: e8:81:e6:cb:a7:19:ef:a4:d1:8d:9d:a1:af:7e:b1: fb:4e:57:4c:7c:f4:66:cc:a6:a0:61:45:71:f4:58: 74:d6:ba:6a:84:4d:49:ac:d8:11:da:ab:16:f0:f2: 3d:97:9d:6b:e0:dc:2a:ef:c2:67:56:5f:bc:6d:0d: 89:f9:ea:4a:44:e7:bf:62:dc:1b:5a:45:3b:bd:bc: 67:3e:da:d2:67:c7:8a:1a:be:d7:d8:92:3a:a7:c8: 4c:74:e4:fb:9d:21:67:29:2a:c5:55:62:bb:70:0f: 8f:ac:7b:ee:c2:e1:a8:94:a4:2b:cd:8e:48:f7:0c: 5e:72:9f:32:b2:19:4c:13:c9:0f:20:be:a8:dd:45: 43:27:99:41:90:9e:12:34:16:af:05:37:7a:8d:d5: 55:78:fc:ca:b0:76:c0:29:6d:8c:e8:36:7f:b0:25: 42:1b:49:56:03:f5:39:a4:c2:9d:64:d6:6a:21:c7: 39:d5:12:81:69:a2:73:e7:0c:64:46:0c:e8:2e:94: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:E5:91:6A:81:72:78:8A:EF:5C:25:83:23:DA:69:E5:39:0B:58 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:4f:0c:49:c6:af:fb:27:f8:b9:ee:b1:9c:65:15:12:e3: 97:b1:65:3c:a6:e8:f8:91:2b:68:50:da:15:7c:54:20:85:cf: 20:e5:63:ff:33:1e:6f:e8:28:86:ff:9e:0c:bd:45:99:24:1b: 5b:94:c6:77:6c:69:2e:71:43:2f:0c:7b:c9:9e:78:8a:0e:e4: 4e:0c:ba:6d:ed:f4:ea:b9:10:33:d1:b5:46:93:63:6a:9a:3b: dd:65:23:30:fd:9b:ba:79:99:b7:f6:d9:ec:a7:97:16:28:da: 1c:83:00:6c:a8:42:74:34:c0:11:f6:74:1d:b7:d7:31:4e:08: 3b:3e:f8:5b:0e:96:6c:f2:eb:e3:b9:c5:ad:b5:ce:a1:14:c5: da:4d:51:6e:91:b2:c4:f5:01:ee:c8:2d:4e:9f:ff:cf:fb:00: 99:35:83:b1:4a:a8:c7:be:72:8d:dc:78:e3:b4:f1:e0:65:62: 8b:9d:bc:1f:47:26:57:f3:42:1a:81:9d:b3:3b:fb:07:fd:07: 96:32:49:18:06:8b:67:86:8b:35:26:fc:3e:93:13:31:f2:89: 25:27:bf:48:f1:77:ac:80:5a:2f:2b:18:41:40:54:42:e7:d2: 9d:46:39:40:ea:93:8c:e7:f9:51:00:90:1e:cc:ff:c9:5a:99: 7a:8b:e6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwODIyMTgxMTU2WhcNMjUwODI5MTgxMTU2WjAYMRYwFAYD VQQDEw02OGE4YjJlYy0zODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GvQZWGv37bD0zdhz9mGxqxhPdmtjdM3T+LyQHumpapbiUUufGVmebDzoSwo O3/kqvl6pdRfNfRvc/LogebLpxnvpNGNnaGvfrH7TldMfPRmzKagYUVx9Fh01rpq hE1JrNgR2qsW8PI9l51r4Nwq78JnVl+8bQ2J+epKROe/YtwbWkU7vbxnPtrSZ8eK Gr7X2JI6p8hMdOT7nSFnKSrFVWK7cA+PrHvuwuGolKQrzY5I9wxecp8yshlME8kP IL6o3UVDJ5lBkJ4SNBavBTd6jdVVePzKsHbAKW2M6DZ/sCVCG0lWA/U5pMKdZNZq Icc51RKBaaJz5wxkRgzoLpR49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrN5ZFq gXJ4iu9cJYMj2mnlOQtYMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaLE8MScav+yf4ue6xnGUVEuOXsWU8puj4kStoUNoVfFQghc8g5WP/ Mx5v6CiG/54MvUWZJBtblMZ3bGkucUMvDHvJnniKDuRODLpt7fTquRAz0bVGk2Nq mjvdZSMw/Zu6eZm39tnsp5cWKNocgwBsqEJ0NMAR9nQdt9cxTgg7PvhbDpZs8uvj ucWttc6hFMXaTVFukbLE9QHuyC1On//P+wCZNYOxSqjHvnKN3HjjtPHgZWKLnbwf RyZX80IagZ2zO/sH/QeWMkkYBotnhos1Jvw+kxMx8oklJ79I8XesgFovKxhBQFRC 59KdRjlA6pOM5/lRAJAezP/JWpl6i+aY -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:34 2025 by rpki-client