$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: sgLgcdtyvsFAAiRSd5DUz3/QudBnLoqvgHTolu2ph+M= Subject key identifier: 6E:7C:E0:D1:B9:31:61:5A:45:97:7D:F5:28:6E:F2:D3:B3:8C:36:8C Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 4E Signing time: Sat 23 Aug 2025 07:34:53 +0000 Manifest this update: Sat 23 Aug 2025 07:34:53 +0000 Manifest next update: Sat 30 Aug 2025 07:34:53 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: b6lbgq2Fo793yKfthkeYfxRGPv2mssVczKXUGZynaes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Aug 23 07:34:53 2025 GMT Not After : Aug 30 07:34:53 2025 GMT Subject: CN=68a96f1d-eb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:7b:a2:34:80:58:f4:36:ab:b9:d2:83:08: 18:69:e0:15:98:c2:d1:91:60:68:29:ce:21:fd:df: ab:88:7d:1c:a2:c6:39:80:c8:98:35:e5:60:3d:90: fa:63:06:f1:1c:7f:29:13:1f:a4:ec:ee:50:95:a5: 82:5c:4c:c6:39:80:44:f0:d0:6c:e9:62:2d:9f:e8: fa:f3:f6:9f:ff:58:2f:9e:0f:9d:e8:39:86:47:3c: 67:a2:48:a4:32:ee:0a:ac:41:90:91:e8:b7:1d:34: d3:7f:7b:96:6b:c3:26:39:5a:08:4e:a3:0e:87:44: 74:1b:3d:2a:60:5e:94:81:f0:f5:44:25:78:e4:8a: 77:f0:ee:f4:c0:bf:a8:76:fa:0b:1d:03:c1:36:40: 34:58:4b:f9:74:a1:ef:a0:2a:09:4f:3b:b2:9e:74: 16:a7:54:c2:1a:d2:8e:bf:ab:47:0f:55:df:02:82: df:fb:8e:24:9d:67:00:d9:25:4f:4c:18:11:cf:27: 0e:c7:d0:c3:6d:0d:ef:f4:15:06:36:c1:c7:7b:66: 79:d6:11:5e:42:9e:8e:b6:c1:12:a9:44:8a:9d:8d: e2:28:7d:46:e1:d4:88:5a:b8:54:d6:8a:d0:b4:bd: 5e:75:5d:1e:52:83:be:bd:05:eb:8f:b7:8a:62:06: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7C:E0:D1:B9:31:61:5A:45:97:7D:F5:28:6E:F2:D3:B3:8C:36:8C X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:a9:3b:a4:86:73:3e:19:6f:1c:5e:fc:56:8f:44:bc:d3:3d: c1:02:35:86:0e:b9:e9:dc:df:2f:bf:df:02:fc:87:14:ff:97: 40:9a:d7:47:eb:19:d9:c0:1f:2f:c1:c8:8e:40:94:b2:94:32: ee:6d:0b:03:04:28:b3:bf:c4:f8:4c:29:a7:78:31:48:db:87: 55:65:35:3b:0a:f6:c6:7d:cf:33:a4:bb:69:7e:af:6c:ca:16: 34:d7:a4:c7:40:c6:f8:b4:cf:8d:20:83:59:3e:bf:72:4a:f6: b9:ce:d1:26:56:d8:4f:80:59:0f:d9:0d:4b:32:6c:5d:1c:e7: 63:2e:35:34:7f:c0:27:94:e2:9d:0c:c4:d1:94:68:f2:23:6b: 81:e4:d6:fa:fc:ad:ed:bd:c2:4d:0f:2d:44:83:34:a7:b5:de: 63:1e:9c:01:7a:7f:35:90:45:19:81:1e:4c:06:19:dd:31:68: e2:8c:05:3d:81:2b:ea:0f:2f:12:fe:bd:4b:2d:74:46:4f:da: 25:d5:5b:96:b6:ad:2e:9c:2e:9c:03:cf:20:b6:be:26:f9:b1: 21:c1:6b:a8:60:d4:bb:31:e1:0a:cf:91:1c:c0:da:27:1e:b2: 08:d7:58:b6:ba:72:c2:eb:87:7b:62:c5:80:0e:e5:d5:18:db: 31:fc:22:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA4MjMwNzM0NTNaFw0yNTA4MzAwNzM0NTNaMBgxFjAUBgNV BAMTDTY4YTk2ZjFkLWViN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsfXuiNIBY9DarudKDCBhp4BWYwtGRYGgpziH936uIfRyixjmAyJg15WA9kPpj BvEcfykTH6Ts7lCVpYJcTMY5gETw0GzpYi2f6Prz9p//WC+eD53oOYZHPGeiSKQy 7gqsQZCR6LcdNNN/e5ZrwyY5WghOow6HRHQbPSpgXpSB8PVEJXjkinfw7vTAv6h2 +gsdA8E2QDRYS/l0oe+gKglPO7KedBanVMIa0o6/q0cPVd8Cgt/7jiSdZwDZJU9M GBHPJw7H0MNtDe/0FQY2wcd7ZnnWEV5Cno62wRKpRIqdjeIofUbh1IhauFTWitC0 vV51XR5Sg769BeuPt4piBlYtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbnzg0bkx YVpFl331KG7y07OMNowwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOWpO6SGcz4Zbxxe/FaPRLzTPcECNYYOuenc3y+/3wL8hxT/l0Ca10fr GdnAHy/ByI5AlLKUMu5tCwMEKLO/xPhMKad4MUjbh1VlNTsK9sZ9zzOku2l+r2zK FjTXpMdAxvi0z40gg1k+v3JK9rnO0SZW2E+AWQ/ZDUsybF0c52MuNTR/wCeU4p0M xNGUaPIja4Hk1vr8re29wk0PLUSDNKe13mMenAF6fzWQRRmBHkwGGd0xaOKMBT2B K+oPLxL+vUstdEZP2iXVW5a2rS6cLpwDzyC2vib5sSHBa6hg1Lsx4QrPkRzA2ice sgjXWLa6csLrh3tixYAO5dUY2zH8IvI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:10 2025 by rpki-client