$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft File: RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json) Hash identifier: XYMH40X/kTTB04hoB9rBCkEQMOgn1kiMhNUeZTlk92o= Subject key identifier: 41:86:5A:13:98:71:C2:60:36:6D:52:CD:04:62:6E:08:68:BE:03:1F Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 Certificate issuer: /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft Manifest number: 0C2D Signing time: Fri 18 Jul 2025 18:45:58 +0000 Manifest this update: Fri 18 Jul 2025 18:45:58 +0000 Manifest next update: Fri 25 Jul 2025 18:45:58 +0000 Files and hashes: 1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: rsAcchfBnVlY4th9DImO8bGXPNpUDABa4yRMXFgDaaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Validity Not Before: Jul 18 18:45:58 2025 GMT Not After : Jul 25 18:45:58 2025 GMT Subject: CN=687a9666-79d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:91:35:5e:4f:77:1a:e0:37:b2:e8:16:f2: 90:70:e1:50:c2:61:04:ca:fd:2a:d7:9f:62:cb:d4: 40:c3:de:6f:af:c2:db:a0:2c:70:ee:30:08:5a:a4: 1c:dc:9d:3d:c5:19:7a:dc:4a:e0:8d:54:b5:8f:a4: 7c:4c:79:8f:79:99:87:8b:69:a0:87:b9:3c:0b:fe: 1d:f6:cc:24:08:c3:10:72:04:3f:fc:6f:01:77:e3: 79:1e:16:80:fc:07:0f:f8:27:00:e8:cb:d0:1a:da: 44:b5:b6:38:d7:4b:f4:25:21:07:53:50:87:f6:47: 13:56:01:55:12:62:61:2a:59:91:7f:76:cc:7f:0d: 6a:cf:99:dd:bf:12:2f:00:1e:4b:ff:c2:83:52:3a: c1:40:9d:41:25:f9:bf:83:00:0e:8e:84:0b:c8:5b: 08:76:47:37:31:fc:87:97:00:ce:11:0b:ef:85:0a: 8f:2b:9b:91:92:a5:0a:82:b4:b3:5f:04:ab:ec:be: 4e:d7:18:4c:86:50:85:58:48:a9:e7:e0:68:f2:0d: a6:0a:49:75:83:eb:5b:1e:ab:c7:e6:01:e9:d5:81: a1:25:9c:a0:7d:90:79:4d:c5:18:1d:8a:a2:af:94: e2:9b:bf:84:e2:26:ed:83:a6:02:ff:98:18:6b:ad: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:5A:13:98:71:C2:60:36:6D:52:CD:04:62:6E:08:68:BE:03:1F X509v3 Authority Key Identifier: keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:ee:31:97:36:13:32:7a:10:f6:a8:93:48:c9:2e:84:70: 76:5c:9b:ea:eb:7a:28:13:09:dc:c5:2b:d2:3e:c7:94:f2:c7: 51:15:58:b1:ff:56:6e:bf:34:08:47:5f:fc:f9:5f:77:4a:24: df:11:ee:eb:75:ac:f5:3f:46:28:9f:f7:53:10:90:13:ae:9e: 36:f3:a8:78:63:ac:ab:17:79:0a:5a:b3:06:f5:ad:3c:cc:22: 6d:ba:66:9d:05:58:9b:eb:ef:66:05:36:1a:76:b1:30:ca:08: c9:2e:9f:e6:16:5b:5f:de:7c:b6:d5:d3:bc:af:f1:d0:0b:f8: 2f:a0:d8:a3:91:3f:90:66:f7:26:3b:c6:87:83:52:22:b5:45: b0:1e:49:78:c4:84:e1:3c:5a:e2:36:b5:d0:56:d3:60:82:86: b5:97:34:a1:d9:0b:e5:ab:c6:cd:7c:a8:59:a8:ea:94:0f:1a: 70:6c:2f:76:a0:14:c7:b2:27:07:69:b5:69:c5:ab:b4:e5:55: ec:e8:64:7b:c4:1d:4d:bb:a6:4b:61:98:48:ef:38:b1:3b:5f: db:9b:6b:19:91:2f:b2:da:f0:8b:c6:1f:47:9a:b7:c5:5f:4d: 2e:d4:c6:aa:0b:3b:c0:a8:97:d7:54:03:4e:9f:70:64:b1:96: 5f:e6:bf:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG Mzc1MkY0MzcwHhcNMjUwNzE4MTg0NTU4WhcNMjUwNzI1MTg0NTU4WjAYMRYwFAYD VQQDEw02ODdhOTY2Ni03OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cCRNV5PdxrgN7LoFvKQcOFQwmEEyv0q159iy9RAw95vr8LboCxw7jAIWqQc 3J09xRl63ErgjVS1j6R8THmPeZmHi2mgh7k8C/4d9swkCMMQcgQ//G8Bd+N5HhaA /AcP+CcA6MvQGtpEtbY410v0JSEHU1CH9kcTVgFVEmJhKlmRf3bMfw1qz5ndvxIv AB5L/8KDUjrBQJ1BJfm/gwAOjoQLyFsIdkc3MfyHlwDOEQvvhQqPK5uRkqUKgrSz XwSr7L5O1xhMhlCFWEip5+Bo8g2mCkl1g+tbHqvH5gHp1YGhJZygfZB5TcUYHYqi r5Tim7+E4ibtg6YC/5gYa61R3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGGWhOY ccJgNm1SzQRibghovgMfMB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5 RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSve4xlzYTMnoQ9qiTSMkuhHB2XJvq63ooEwncxSvSPseU8sdRFVix /1ZuvzQIR1/8+V93SiTfEe7rdaz1P0Yon/dTEJATrp4286h4Y6yrF3kKWrMG9a08 zCJtumadBVib6+9mBTYadrEwygjJLp/mFltf3ny21dO8r/HQC/gvoNijkT+QZvcm O8aHg1IitUWwHkl4xIThPFriNrXQVtNggoa1lzSh2Qvlq8bNfKhZqOqUDxpwbC92 oBTHsicHabVpxau05VXs6GR7xB1Nu6ZLYZhI7zixO1/bm2sZkS+y2vCLxh9HmrfF X00u1MaqCzvAqJfXVANOn3BksZZf5r+Z -----END CERTIFICATE-----Generated at Sun Jul 20 07:23:21 2025 by rpki-client