$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json) Hash identifier: MrJ3uCPbtJepjSvOPbgw6ZiKC0O3MSEMCQ8RiV0Ph5k= Subject key identifier: 7F:58:B9:F7:33:98:8A:8D:AE:1E:8B:39:B5:BF:67:3F:70:6C:F9:2F Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft Manifest number: 79 Signing time: Sat 19 Jul 2025 07:00:33 +0000 Manifest this update: Sat 19 Jul 2025 07:00:32 +0000 Manifest next update: Sat 26 Jul 2025 07:00:32 +0000 Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: Wkdvfnz6ss55Q8qfqROJrRMmBLORJ42rWneT1yzEK9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Validity Not Before: Jul 19 07:00:32 2025 GMT Not After : Jul 26 07:00:32 2025 GMT Subject: CN=687b4290-05da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:32:86:a5:ca:50:94:fa:a5:77:fe:16:17: f1:53:5e:75:ce:9e:bd:c2:60:4a:e7:a5:21:30:a2: b3:d7:8e:7b:ed:a7:39:23:9c:c5:21:bf:8e:29:e5: 07:64:37:d8:5c:6f:3c:6a:c8:8d:8c:a8:f1:44:75: 65:ed:a2:ad:e1:51:98:21:cf:69:26:8e:27:a7:88: 58:fa:ad:87:4d:37:99:15:3b:4e:41:ff:e2:57:de: 03:ca:1d:d7:31:2f:d7:43:58:88:f9:aa:4e:97:59: 06:de:c7:fd:56:92:a1:fb:f7:99:d4:d2:0a:1c:e9: 51:df:e1:6c:ac:d0:08:86:2d:e4:b5:b3:5e:e6:91: c0:26:56:49:75:19:05:cd:2d:db:3d:ee:ad:6f:80: 6d:da:c7:a0:c6:54:71:0a:88:cb:0a:25:86:c8:8f: e1:77:ae:43:15:fa:ad:3f:7a:9c:18:64:d0:7a:cc: fe:45:cf:6a:c1:44:86:0e:c3:6b:f3:b5:85:fc:81: 12:23:eb:49:82:a9:4c:79:a2:81:0c:0f:12:b5:08: fb:6a:50:62:ac:74:f7:b8:40:f2:43:aa:8e:ba:86: 03:88:20:c3:2b:df:f3:6f:37:ab:e3:a0:86:5f:67: 89:12:d4:51:dd:96:89:fc:ae:9d:5a:5f:47:55:4c: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:B9:F7:33:98:8A:8D:AE:1E:8B:39:B5:BF:67:3F:70:6C:F9:2F X509v3 Authority Key Identifier: keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e0:74:1c:0f:7a:61:b6:01:33:27:0c:95:24:0c:ba:c7:02: 45:c4:be:64:0e:15:77:59:d4:70:91:46:06:f1:99:11:e8:e4: 3e:1b:5f:e1:05:ac:43:d2:0f:f5:0a:74:d5:21:57:50:2c:83: 01:1d:ae:70:5d:93:c8:d7:24:3f:50:62:81:70:86:c0:b3:2e: 27:6c:09:e9:a5:ec:be:f4:10:40:8c:74:10:f0:ec:83:be:ac: 2f:24:64:42:b7:30:89:8c:9c:41:63:51:91:2e:d1:e4:98:dc: b5:ba:5a:06:dd:fb:3b:22:e2:0f:3b:24:71:86:0f:74:2d:c7: e0:96:2b:c0:b5:fa:07:e6:80:62:7a:d5:28:65:53:c4:47:68: 0f:ff:1b:cf:ca:88:0f:af:81:bc:69:2a:61:8e:5b:a1:dd:5f: 93:ae:a0:fb:a0:0b:57:5e:ae:ec:37:8d:45:51:12:6c:45:33: ac:7a:aa:3b:d4:a1:b1:51:61:3a:8e:be:75:13:9d:2d:18:ac: e4:04:28:cd:4f:07:8a:cc:f1:82:32:3d:ae:10:02:c0:d0:93: 0c:e4:f0:cc:dc:4c:6f:8f:a7:0e:ef:57:ee:53:11:b9:f4:d6: d3:bf:8e:02:43:91:cf:f9:41:57:4b:9a:38:2b:f8:78:55:a7: 9d:47:d0:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUM3MzExMC8GA1UEBRMoRUI4OTg3QzUyMEFGRUNEQzI0RjQxQzg2RkM2QkFERDND MTZGQTYyQTAeFw0yNTA3MTkwNzAwMzJaFw0yNTA3MjYwNzAwMzJaMBgxFjAUBgNV BAMTDTY4N2I0MjkwLTA1ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtNzKGpcpQlPqld/4WF/FTXnXOnr3CYErnpSEworPXjnvtpzkjnMUhv44p5Qdk N9hcbzxqyI2MqPFEdWXtoq3hUZghz2kmjieniFj6rYdNN5kVO05B/+JX3gPKHdcx L9dDWIj5qk6XWQbex/1WkqH795nU0goc6VHf4Wys0AiGLeS1s17mkcAmVkl1GQXN Lds97q1vgG3ax6DGVHEKiMsKJYbIj+F3rkMV+q0/epwYZNB6zP5Fz2rBRIYOw2vz tYX8gRIj60mCqUx5ooEMDxK1CPtqUGKsdPe4QPJDqo66hgOIIMMr3/NvN6vjoIZf Z4kS1FHdlon8rp1aX0dVTGj3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf1i59zOY io2uHos5tb9nP3Bs+S8wHwYDVR0jBBgwFoAU64mHxSCv7Nwk9ByG/Gut08Fvpiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxQzczL0M0OTFCQTRFQUMw RDExRUY5ODc5OTI2RUM0RjlBRTAyLzY0bUh4U0N2N053azlCeUdfR3V0MDhGdnBp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjRtSHhTQ3Y3TndrOUJ5R19HdXQwOEZ2cGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx QzczL0M0OTFCQTRFQUMwRDExRUY5ODc5OTI2RUM0RjlBRTAyLzY0bUh4U0N2N053 azlCeUdfR3V0MDhGdnBpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzgdBwPemG2ATMnDJUkDLrHAkXEvmQOFXdZ1HCRRgbxmRHo5D4bX+EF rEPSD/UKdNUhV1AsgwEdrnBdk8jXJD9QYoFwhsCzLidsCeml7L70EECMdBDw7IO+ rC8kZEK3MImMnEFjUZEu0eSY3LW6Wgbd+zsi4g87JHGGD3Qtx+CWK8C1+gfmgGJ6 1ShlU8RHaA//G8/KiA+vgbxpKmGOW6HdX5OuoPugC1deruw3jUVREmxFM6x6qjvU obFRYTqOvnUTnS0YrOQEKM1PB4rM8YIyPa4QAsDQkwzk8MzcTG+Ppw7vV+5TEbn0 1tO/jgJDkc/5QVdLmjgr+HhVp51H0JI= -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:06 2025 by rpki-client