$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: I0oyexvWK3kV9BRg7F5yFElLUef0gjm5EzfkFc1CMXU= Subject key identifier: D4:9F:17:89:E9:06:02:68:12:58:5F:C0:7C:55:9B:DE:DF:CE:71:E0 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: 91 Signing time: Sat 19 Jul 2025 06:40:09 +0000 Manifest this update: Sat 19 Jul 2025 06:40:09 +0000 Manifest next update: Sat 26 Jul 2025 06:40:09 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: lyVF7cVUwzgAokQbhUVjLMZmrZ0JpYGFNrG8yBKolCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Jul 19 06:40:09 2025 GMT Not After : Jul 26 06:40:09 2025 GMT Subject: CN=687b3dc9-92d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:54:b4:1c:05:32:f7:af:23:b0:f2:dc:05: 4c:3c:73:40:56:fb:84:9f:78:09:97:de:ee:ed:69: 35:b1:9a:53:10:94:5e:f5:a2:83:fe:45:81:db:f1: 50:0c:3c:1b:a5:9f:90:b2:67:27:d7:f7:4a:23:90: 95:25:75:f4:08:2e:96:b8:c0:75:a5:14:cc:1b:4c: e7:2b:85:d8:3f:ea:55:eb:f6:6a:44:a4:fd:41:c3: cc:f3:ab:32:6a:56:f1:47:51:01:ff:c4:2e:6a:64: ff:f0:63:45:34:34:ec:e3:9c:85:54:9a:63:e8:bf: 7c:cc:ed:2f:a8:b2:48:e3:c1:9a:0e:50:00:21:56: b0:a3:ce:bf:51:21:48:31:e6:4e:c7:9b:d2:f5:10: b6:06:48:4c:2c:71:db:43:90:d5:3d:20:47:d1:f3: 6c:52:54:65:a3:00:3d:8d:66:65:b3:c2:0c:72:7b: b5:f1:0a:51:76:c1:2b:e4:aa:1b:16:1f:aa:de:9a: ea:4f:15:54:e7:de:17:0f:5a:c5:47:4d:e9:82:f6: 9d:bf:31:68:bd:f1:71:62:b7:af:27:c7:cf:9e:18: 94:6f:9f:3f:aa:c0:ad:9e:ba:49:58:36:ee:7d:87: c3:d2:b7:48:cf:c3:a2:de:ee:f4:9f:ec:94:2c:1b: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:17:89:E9:06:02:68:12:58:5F:C0:7C:55:9B:DE:DF:CE:71:E0 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:de:db:72:ac:49:9c:64:90:6d:6a:54:32:87:29:60:7a:87: 8b:83:a5:6b:60:ea:b5:a0:9b:3b:07:52:4a:15:47:ee:82:47: 4c:c4:a7:43:60:0d:af:bd:be:cb:8f:b5:df:a6:7a:72:06:d6: e0:26:91:57:ac:40:ff:a3:30:dc:7d:e7:b4:ce:df:bb:30:9c: 51:2e:fe:02:12:cc:a6:8c:fc:59:53:ee:c5:ba:fe:c4:83:90: ca:ec:95:33:69:5f:4b:3f:8e:04:10:58:0d:9f:05:41:c5:83: c5:f4:13:e8:fc:55:90:fb:a1:5f:c3:96:02:c3:22:68:49:d9: f8:74:15:97:d1:93:91:77:4f:f7:8d:85:ee:01:6e:36:c0:22: c4:49:ac:34:b9:3a:23:2c:3a:58:3a:06:ea:9c:93:ce:7e:4c: dd:aa:24:43:0c:81:e8:2b:03:ea:60:a3:fc:49:ca:74:6e:23: b1:7c:5e:17:bb:f3:a5:83:40:a2:58:a5:cd:ae:35:87:76:ed: 83:5a:53:57:96:88:32:51:65:70:9c:37:f8:8a:85:14:86:8b: e5:29:94:1e:d5:71:08:ba:2c:6a:d8:08:97:7c:22:a7:a9:58: 18:b5:1e:24:97:5b:c5:00:73:95:6d:52:c3:02:aa:89:c9:fe: 93:35:18:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUwNzE5MDY0MDA5WhcNMjUwNzI2MDY0MDA5WjAYMRYwFAYD VQQDEw02ODdiM2RjOS05MmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3V1UtBwFMvevI7Dy3AVMPHNAVvuEn3gJl97u7Wk1sZpTEJRe9aKD/kWB2/FQ DDwbpZ+Qsmcn1/dKI5CVJXX0CC6WuMB1pRTMG0znK4XYP+pV6/ZqRKT9QcPM86sy albxR1EB/8QuamT/8GNFNDTs45yFVJpj6L98zO0vqLJI48GaDlAAIVawo86/USFI MeZOx5vS9RC2BkhMLHHbQ5DVPSBH0fNsUlRlowA9jWZls8IMcnu18QpRdsEr5Kob Fh+q3prqTxVU594XD1rFR03pgvadvzFovfFxYrevJ8fPnhiUb58/qsCtnrpJWDbu fYfD0rdIz8Oi3u70n+yULBv6WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSfF4np BgJoElhfwHxVm97fznHgMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ3ttyrEmcZJBtalQyhylgeoeLg6VrYOq1oJs7B1JKFUfugkdMxKdD YA2vvb7Lj7XfpnpyBtbgJpFXrED/ozDcfee0zt+7MJxRLv4CEsymjPxZU+7Fuv7E g5DK7JUzaV9LP44EEFgNnwVBxYPF9BPo/FWQ+6Ffw5YCwyJoSdn4dBWX0ZORd0/3 jYXuAW42wCLESaw0uTojLDpYOgbqnJPOfkzdqiRDDIHoKwPqYKP8Scp0biOxfF4X u/Olg0CiWKXNrjWHdu2DWlNXlogyUWVwnDf4ioUUhovlKZQe1XEIuixq2AiXfCKn qVgYtR4kl1vFAHOVbVLDAqqJyf6TNRgY -----END CERTIFICATE-----Generated at Sat Jul 19 18:58:16 2025 by rpki-client