$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: RT5BLh7tmEDUtIJp024NYngKO4pSfqWbOt+O3nMpXcI= Subject key identifier: 28:8C:42:E1:8F:10:DF:30:4F:5A:EC:F5:A9:4D:8D:06:65:67:DD:D3 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 5E Signing time: Wed 23 Jul 2025 07:28:18 +0000 Manifest this update: Wed 23 Jul 2025 07:28:17 +0000 Manifest next update: Wed 30 Jul 2025 07:28:17 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: VKGNjMmxakbGMuKkm7l/AxJweDgiU0qidlIJ+wCzHKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Jul 23 07:28:17 2025 GMT Not After : Jul 30 07:28:17 2025 GMT Subject: CN=68808f12-755d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:cc:89:ed:32:c1:e2:8a:22:34:55:b6:b2: 86:5e:d5:22:3e:55:e0:5f:ca:4a:3b:9d:f5:3d:d2: c7:4a:4a:c4:d3:63:63:01:60:a0:29:3f:07:c0:4a: c7:ed:1e:c3:df:2d:07:d1:d6:6f:a1:e1:25:70:09: 23:c3:b9:e9:38:5c:b9:1f:b4:02:9e:08:21:01:a5: fe:70:ba:20:9a:41:9d:5e:f8:b3:e6:2c:11:df:b7: 00:e3:9c:5a:6d:0e:07:8f:10:bb:3f:3f:49:94:2f: 95:f7:07:70:f5:77:0f:88:8b:27:4c:64:70:3a:da: af:15:84:b7:2b:b9:d7:73:c5:86:b9:b5:e0:44:3d: d1:78:c9:84:7a:dc:7f:b6:d1:d4:77:18:d7:f4:56: 7c:f6:f7:94:c0:b3:2d:05:de:a7:3e:da:cb:5b:8b: 0d:48:3b:5a:1d:cf:56:b7:12:83:22:8a:85:1d:25: be:b4:8e:45:ff:3b:2e:4b:43:45:48:ce:db:f7:d3: 28:59:cc:70:f4:16:a3:f5:f1:cb:f7:20:f6:14:9f: 62:37:2a:07:34:d7:31:8c:5d:bb:42:8a:93:af:3e: 63:1a:cd:1b:fb:a3:23:bf:62:b8:5c:83:cb:69:dd: a4:72:fa:7a:40:bb:f6:6e:91:d2:3d:4b:61:9c:51: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:42:E1:8F:10:DF:30:4F:5A:EC:F5:A9:4D:8D:06:65:67:DD:D3 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:04:1c:c1:c9:02:44:fd:0d:9c:72:b7:06:78:5c:46:5c:2b: 5f:cb:fa:7e:c4:28:fb:c5:5e:34:e7:10:4d:4e:b1:ee:91:91: 75:b9:f6:9e:8e:6d:a4:2e:8c:1e:89:5e:12:20:51:58:de:b7: e4:e6:b3:a0:58:81:e9:04:57:47:c0:1e:35:a5:b3:f2:af:96: ac:16:e0:35:74:08:10:d6:e7:a8:03:d4:a1:aa:eb:53:d5:03: a4:5f:29:a8:5b:50:24:fa:59:e2:8f:4b:41:d4:38:73:65:a3: 37:71:7b:64:37:6d:42:7c:95:49:50:33:94:68:03:f7:6a:cb: 18:c0:75:ea:b1:a8:55:72:0c:f7:df:18:6f:ac:41:9a:ce:d9: bc:4a:a7:77:ee:e0:ba:c9:f1:94:85:0d:f5:91:81:ed:8d:89: fc:b7:84:13:ee:8b:15:a8:a6:4d:d2:93:9e:a4:28:e3:c9:2d: 0f:4d:a3:6f:cb:a6:9b:3d:30:23:00:f6:45:05:c7:9d:7e:db: 34:61:a6:02:a3:f2:11:b8:48:05:d7:2c:68:5d:20:73:ec:39: ac:63:eb:e5:41:fd:d3:e8:2b:80:c2:1a:91:9d:04:94:2a:f8: c7:3b:01:95:84:af:c8:b6:a1:cc:ce:3e:e4:c5:1d:d3:70:35: 3c:e8:9b:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA3MjMwNzI4MTdaFw0yNTA3MzAwNzI4MTdaMBgxFjAUBgNV BAMTDTY4ODA4ZjEyLTc1NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ8MyJ7TLB4ooiNFW2soZe1SI+VeBfyko7nfU90sdKSsTTY2MBYKApPwfASsft HsPfLQfR1m+h4SVwCSPDuek4XLkftAKeCCEBpf5wuiCaQZ1e+LPmLBHftwDjnFpt DgePELs/P0mUL5X3B3D1dw+IiydMZHA62q8VhLcruddzxYa5teBEPdF4yYR63H+2 0dR3GNf0Vnz295TAsy0F3qc+2stbiw1IO1odz1a3EoMiioUdJb60jkX/Oy5LQ0VI ztv30yhZzHD0FqP18cv3IPYUn2I3Kgc01zGMXbtCipOvPmMazRv7oyO/Yrhcg8tp 3aRy+npAu/ZukdI9S2GcUTaBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKIxC4Y8Q 3zBPWuz1qU2NBmVn3dMwHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEEEHMHJAkT9DZxytwZ4XEZcK1/L+n7EKPvFXjTnEE1Ose6RkXW59p6O baQujB6JXhIgUVjet+Tms6BYgekEV0fAHjWls/KvlqwW4DV0CBDW56gD1KGq61PV A6RfKahbUCT6WeKPS0HUOHNlozdxe2Q3bUJ8lUlQM5RoA/dqyxjAdeqxqFVyDPff GG+sQZrO2bxKp3fu4LrJ8ZSFDfWRge2Nify3hBPuixWopk3Sk56kKOPJLQ9No2/L pps9MCMA9kUFx51+2zRhpgKj8hG4SAXXLGhdIHPsOaxj6+VB/dPoK4DCGpGdBJQq +Mc7AZWEr8i2oczOPuTFHdNwNTzom/k= -----END CERTIFICATE-----Generated at Thu Jul 24 05:03:13 2025 by rpki-client