$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft File: htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft (raw, json) Hash identifier: 1jrZ1lsig6U4s9XYnN3TIw9KbwJGYZd1VRLxqdwE0dE= Subject key identifier: 96:20:82:5D:1F:9A:C8:45:89:E2:BF:8E:03:9E:C6:F7:2B:9A:0A:B0 Authority key identifier: 86:D9:5F:41:ED:19:81:FA:8D:0B:59:08:D6:44:46:51:0E:6E:AC:7D Certificate issuer: /CN=A91A99C5/serialNumber=86D95F41ED1981FA8D0B5908D64446510E6EAC7D Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htlfQe0ZgfqNC1kI1kRGUQ5urH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft Manifest number: 06 Signing time: Sat 19 Jul 2025 08:26:50 +0000 Manifest this update: Sat 19 Jul 2025 08:26:50 +0000 Manifest next update: Sat 26 Jul 2025 08:26:50 +0000 Files and hashes: 1: htlfQe0ZgfqNC1kI1kRGUQ5urH0.crl (hash: TNJIrvdA01SsM0fTMGDxrT0tPTHtlZ6NqfJXWvumJ4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.crl rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htlfQe0ZgfqNC1kI1kRGUQ5urH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=86D95F41ED1981FA8D0B5908D64446510E6EAC7D Validity Not Before: Jul 19 08:26:50 2025 GMT Not After : Jul 26 08:26:50 2025 GMT Subject: CN=687b56ca-5b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:21:aa:fe:3c:f7:da:04:b9:bb:cc:06:0e:9d: 1b:ac:fb:0e:c5:a0:23:ac:27:c7:80:57:20:6d:20: 13:aa:5b:bd:1a:c3:77:6f:ae:54:4c:3f:4b:fc:b0: 1c:57:a3:3f:f7:d0:da:8d:a3:a6:93:d5:20:58:14: 8b:23:4a:1d:1a:80:87:ea:d0:22:7a:71:87:53:39: 16:93:3e:68:6e:0a:4b:ac:7b:55:66:d6:e9:0c:4e: c4:70:42:8c:87:50:66:8d:be:43:28:e1:62:b0:04: 49:06:d3:88:e4:c5:3b:26:09:84:1f:c4:99:4f:8c: 3b:3d:8d:00:c4:ca:68:28:cb:b2:5b:4c:20:53:1b: 3b:a5:43:11:46:99:3e:b0:22:2b:12:79:8b:41:ab: b1:79:98:02:92:78:09:10:6b:20:a4:e9:b4:cc:e5: 28:2e:df:3e:2c:f1:54:3e:4b:db:08:ca:b1:c9:67: 03:28:7d:9e:1c:ac:e4:37:58:29:78:de:9a:5c:a2: fb:0d:3c:a2:15:7e:af:a8:af:34:9b:6f:1c:9b:3b: 02:f6:a4:ee:44:7b:4b:0e:9e:eb:95:65:39:28:04: 13:ae:b8:67:fb:3a:23:2b:1f:94:82:60:24:09:f2: 4b:3f:15:d3:cf:f5:39:c1:8a:30:3f:25:3c:e1:fa: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:20:82:5D:1F:9A:C8:45:89:E2:BF:8E:03:9E:C6:F7:2B:9A:0A:B0 X509v3 Authority Key Identifier: keyid:86:D9:5F:41:ED:19:81:FA:8D:0B:59:08:D6:44:46:51:0E:6E:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htlfQe0ZgfqNC1kI1kRGUQ5urH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/0603E5BE5DBC11F09AA17850C4F9AE02/htlfQe0ZgfqNC1kI1kRGUQ5urH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ee:31:8b:07:78:d6:e6:a3:4a:08:d1:fb:fd:5f:c9:68:36: 2e:4b:6e:aa:bc:4e:92:60:31:b8:cc:ec:82:04:0d:f1:26:bb: ee:7c:9f:8f:c5:94:ae:e8:ee:52:3a:87:c5:60:18:c7:43:66: c8:fd:00:5d:de:cb:6a:0a:2a:b5:5e:02:93:1b:25:ca:44:0a: 9a:1f:44:59:5c:dc:f7:28:62:fc:ef:87:e6:82:f9:8e:2f:3d: 32:8e:94:11:fe:d3:3b:f2:07:2c:d8:55:63:92:8f:cd:a6:e7: f1:bf:6e:51:5e:ba:ff:dd:85:72:0c:c0:20:8c:be:c1:0c:57: 3d:09:74:62:fe:6a:d6:a8:eb:8d:f4:3e:d7:10:78:26:67:d8: 89:72:45:c6:25:b4:4e:4b:eb:47:ef:ba:0a:e6:d1:64:f5:1d: 56:5d:b5:08:ae:f3:f4:ec:65:5a:9e:db:21:3f:02:a3:e7:51: 09:58:ba:cc:87:71:b7:3c:df:2c:b5:59:86:5f:a7:d5:27:ab: 6f:a8:a0:01:fd:f1:1a:ec:57:7a:24:9f:64:10:b6:ef:a5:fd: d7:ac:a1:e4:af:ed:77:3b:fe:80:5b:6c:bc:bb:4e:56:c7:ff: 10:2e:66:f7:3d:3a:3d:ed:51:0c:4b:19:b9:c3:b8:96:34:0d: a6:1f:a0:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTlDNTExMC8GA1UEBRMoODZEOTVGNDFFRDE5ODFGQThEMEI1OTA4RDY0NDQ2NTEw RTZFQUM3RDAeFw0yNTA3MTkwODI2NTBaFw0yNTA3MjYwODI2NTBaMBgxFjAUBgNV BAMTDTY4N2I1NmNhLTViNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrIar+PPfaBLm7zAYOnRus+w7FoCOsJ8eAVyBtIBOqW70aw3dvrlRMP0v8sBxX oz/30NqNo6aT1SBYFIsjSh0agIfq0CJ6cYdTORaTPmhuCkuse1Vm1ukMTsRwQoyH UGaNvkMo4WKwBEkG04jkxTsmCYQfxJlPjDs9jQDEymgoy7JbTCBTGzulQxFGmT6w IisSeYtBq7F5mAKSeAkQayCk6bTM5Sgu3z4s8VQ+S9sIyrHJZwMofZ4crOQ3WCl4 3ppcovsNPKIVfq+orzSbbxybOwL2pO5Ee0sOnuuVZTkoBBOuuGf7OiMrH5SCYCQJ 8ks/FdPP9TnBijA/JTzh+r/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUliCCXR+a yEWJ4r+OA57G9yuaCrAwHwYDVR0jBBgwFoAUhtlfQe0ZgfqNC1kI1kRGUQ5urH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OUM1LzA2MDNFNUJFNURC QzExRjA5QUExNzg1MEM0RjlBRTAyL2h0bGZRZTBaZ2ZxTkMxa0kxa1JHVVE1dXJI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHRsZlFlMFpnZnFOQzFrSTFrUkdVUTV1ckgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OUM1LzA2MDNFNUJFNURCQzExRjA5QUExNzg1MEM0RjlBRTAyL2h0bGZRZTBaZ2Zx TkMxa0kxa1JHVVE1dXJIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADruMYsHeNbmo0oI0fv9X8loNi5Lbqq8TpJgMbjM7IIEDfEmu+58n4/F lK7o7lI6h8VgGMdDZsj9AF3ey2oKKrVeApMbJcpECpofRFlc3PcoYvzvh+aC+Y4v PTKOlBH+0zvyByzYVWOSj82m5/G/blFeuv/dhXIMwCCMvsEMVz0JdGL+atao6430 PtcQeCZn2IlyRcYltE5L60fvugrm0WT1HVZdtQiu8/TsZVqe2yE/AqPnUQlYusyH cbc83yy1WYZfp9Unq2+ooAH98RrsV3okn2QQtu+l/desoeSv7Xc7/oBbbLy7TlbH /xAuZvc9Oj3tUQxLGbnDuJY0DaYfoME= -----END CERTIFICATE-----Generated at Sun Jul 20 02:56:40 2025 by rpki-client