$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: TI90P+3Nu3jqMO0AlJDzZHDo2mMlJ2IsQgVsK5Sv1+c= Subject key identifier: 4B:12:02:68:57:12:95:AB:49:D3:4E:AE:5A:57:05:2A:7C:34:D2:6B Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 0560 Signing time: Fri 22 Aug 2025 23:31:10 +0000 Manifest this update: Fri 22 Aug 2025 23:31:09 +0000 Manifest next update: Fri 29 Aug 2025 23:31:09 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: Pcn+y3TI7+f5Nhqmu+vVC+Kf9QRoo2/ppjFBGZ1lCCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Aug 22 23:31:09 2025 GMT Not After : Aug 29 23:31:09 2025 GMT Subject: CN=68a8fdbd-faec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:c5:6b:1c:8c:ce:4d:9f:b1:bb:84:a6:5c: f4:01:fc:5a:dd:b6:ea:52:1f:6a:65:7c:be:44:81: 1a:19:e0:5a:4b:e7:41:fc:e6:53:f4:bb:51:48:b4: d8:d3:02:6f:dd:46:40:8f:bc:80:62:36:d2:c4:33: 5e:e2:08:a0:0f:2e:4b:10:c8:b4:07:13:f2:13:63: 3d:b2:7a:3e:33:3f:40:0a:d6:19:24:a1:55:79:0a: 13:d1:21:c2:fa:83:40:92:ec:c0:10:ee:ad:fc:fe: 98:98:45:f0:ae:cb:ca:16:2b:92:45:ed:94:9e:87: f2:dd:91:90:7d:28:03:35:9b:e2:87:1e:32:55:2e: 43:fb:5b:0e:38:46:6b:a4:38:5c:45:7f:00:7f:63: f3:25:7a:c3:68:56:d0:51:37:51:39:b9:23:5c:e2: e7:12:97:af:5b:3e:af:49:3e:62:6d:88:85:04:05: 39:d1:c2:a4:1d:21:9e:79:da:d6:67:17:0f:6d:c5: c6:10:c2:59:ef:db:aa:25:db:aa:65:39:55:4a:2d: 17:ef:ef:e3:3c:41:08:72:76:9a:49:fa:5a:b1:0c: 3c:67:1d:e1:3b:32:6b:48:eb:2b:51:86:67:d5:4c: e9:df:72:8b:70:d2:42:42:13:e3:1c:3b:90:e6:67: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:02:68:57:12:95:AB:49:D3:4E:AE:5A:57:05:2A:7C:34:D2:6B X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:48:fc:5f:b3:44:1e:74:77:41:75:17:66:c8:8e:e9:b8:41: 99:c3:7f:76:69:be:3a:ba:ef:87:f3:87:51:b8:61:72:9d:9b: 19:d9:01:b9:03:27:f5:d7:4c:b2:22:96:a4:66:f7:86:00:44: bc:63:da:e4:57:9b:00:a1:0d:97:cb:ae:24:2c:2b:2d:3e:5e: f9:7f:cd:3f:16:dc:20:d7:43:05:78:65:73:9e:58:9e:ac:44: 52:92:73:5c:77:09:4b:72:66:88:34:47:2b:ba:6a:0e:3b:c9: 9a:9a:ae:01:2e:32:22:23:33:be:95:0a:1f:43:de:69:02:fc: c5:cc:b3:ab:93:1e:02:a2:4d:b3:72:d4:02:47:1b:db:c9:3c: d9:ef:40:ff:e6:17:18:ec:b2:4c:bf:36:36:fa:80:88:5a:75: b3:13:24:6c:66:cb:97:89:4a:03:c7:3c:1d:8d:50:0b:c5:58: e4:a5:5c:ca:c8:30:c2:bb:68:3b:8d:20:80:14:97:60:b6:b0: 78:8b:a6:15:a2:fd:ee:b0:ef:c0:b4:98:77:18:52:33:dd:54: 5b:d6:6f:3f:d4:dd:ac:92:0d:c4:03:8b:4d:53:e0:6b:f1:39: 82:04:9d:f2:e1:89:c3:86:9c:8d:3e:f9:d0:7c:97:2d:c6:1b: 2e:7a:07:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUwODIyMjMzMTA5WhcNMjUwODI5MjMzMTA5WjAYMRYwFAYD VQQDEw02OGE4ZmRiZC1mYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mzFaxyMzk2fsbuEplz0Afxa3bbqUh9qZXy+RIEaGeBaS+dB/OZT9LtRSLTY 0wJv3UZAj7yAYjbSxDNe4gigDy5LEMi0BxPyE2M9sno+Mz9ACtYZJKFVeQoT0SHC +oNAkuzAEO6t/P6YmEXwrsvKFiuSRe2Unofy3ZGQfSgDNZvihx4yVS5D+1sOOEZr pDhcRX8Af2PzJXrDaFbQUTdRObkjXOLnEpevWz6vST5ibYiFBAU50cKkHSGeedrW ZxcPbcXGEMJZ79uqJduqZTlVSi0X7+/jPEEIcnaaSfpasQw8Zx3hOzJrSOsrUYZn 1Uzp33KLcNJCQhPjHDuQ5mcxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsSAmhX EpWrSdNOrlpXBSp8NNJrMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhSPxfs0QedHdBdRdmyI7puEGZw392ab46uu+H84dRuGFynZsZ2QG5 Ayf110yyIpakZveGAES8Y9rkV5sAoQ2Xy64kLCstPl75f80/Ftwg10MFeGVznlie rERSknNcdwlLcmaINEcrumoOO8mamq4BLjIiIzO+lQofQ95pAvzFzLOrkx4Cok2z ctQCRxvbyTzZ70D/5hcY7LJMvzY2+oCIWnWzEyRsZsuXiUoDxzwdjVALxVjkpVzK yDDCu2g7jSCAFJdgtrB4i6YVov3usO/AtJh3GFIz3VRb1m8/1N2skg3EA4tNU+Br 8TmCBJ3y4YnDhpyNPvnQfJctxhsuegdx -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:13 2025 by rpki-client