$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: 235NtOzkrhpHbp1vEoFV2FuRl7mw2ivcUhgW/KKTt3s= Subject key identifier: 2A:23:D7:D0:61:B0:98:47:FC:9A:10:97:59:1E:51:22:87:BD:B8:45 Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: 83 Signing time: Mon 21 Jul 2025 06:49:06 +0000 Manifest this update: Mon 21 Jul 2025 06:49:06 +0000 Manifest next update: Mon 28 Jul 2025 06:49:06 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: eMwA6LawlKfSqNbq9fOjfMvR+xjgNNG7rVd9JfjRmjk=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: +tAlw28NvGVDo5cCezaQKFVIMHfW8hqdMwBD9HYIeLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Jul 21 06:49:06 2025 GMT Not After : Jul 28 06:49:06 2025 GMT Subject: CN=687de2e2-6d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:45:c2:6e:11:0c:ab:0a:89:3a:69:b4:97: 98:2a:43:66:1c:42:15:a7:54:73:32:05:b4:24:54: 0b:da:3c:c4:9d:7d:a9:bf:00:ef:33:38:e7:7c:44: 27:5f:6c:72:04:cc:7d:eb:18:92:23:71:0f:4a:0e: 97:4e:b2:6f:7c:3c:fa:6a:8a:e9:e8:51:d6:ea:53: 42:34:88:84:c6:91:88:ad:b1:2e:e1:56:38:93:63: 1c:b8:db:86:79:72:45:5d:05:7f:88:6d:df:95:58: 90:9d:da:75:90:72:5f:0e:79:ed:c3:e2:70:60:eb: 62:fc:18:d4:08:af:a8:fc:02:aa:2c:2f:95:9a:49: 83:a8:e8:cb:02:16:2e:da:28:c3:88:d7:e0:18:05: 6f:0d:db:2f:ca:3a:91:f0:31:d9:d2:b5:3d:8b:64: b1:30:d3:19:b9:66:ac:fa:14:c8:38:48:d8:39:48: a6:43:f2:40:9d:e5:05:91:35:f6:09:4e:5c:dc:f3: c9:f6:37:a2:3d:de:17:37:e9:f0:7b:d8:83:73:aa: 4d:6d:1c:6e:0f:07:53:e8:62:45:77:ed:40:ce:f5: ab:57:52:49:93:cd:10:f3:ad:b6:05:d8:5f:37:6c: dc:26:83:75:d3:9d:d1:4c:a2:85:7d:f5:97:ba:0c: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:23:D7:D0:61:B0:98:47:FC:9A:10:97:59:1E:51:22:87:BD:B8:45 X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:da:77:f4:2d:94:b4:67:aa:f6:19:31:ff:13:2f:0b:7d:47: d0:c4:f9:56:4c:66:c7:f2:11:fc:bd:bd:7a:05:ee:70:4e:0c: a9:44:7c:19:bf:7d:8f:41:f3:88:a9:4f:4b:d0:c1:68:74:fb: 9d:65:91:0d:4e:9f:b9:bb:9d:f7:9c:1f:10:2a:2e:ea:80:74: fe:b5:a4:b0:75:94:4e:7f:74:4a:10:f4:55:83:5e:60:a5:ec: 8d:b8:ed:2d:11:26:88:f0:86:78:51:6d:82:1e:33:3a:ad:ce: 0d:ba:f4:ab:d0:84:29:f5:e7:2b:30:ce:37:fe:7d:18:8c:10: 1d:34:19:4f:dc:a5:a2:6d:42:23:c1:5f:fa:ab:f6:80:6c:4e: 56:a8:75:1a:64:6c:c0:6c:0f:7c:ae:d0:f7:d8:d5:62:c0:f6: 4b:4f:58:fd:4d:f3:ad:ec:9c:1e:8c:ba:31:1b:91:21:cf:83: 32:c9:b5:6d:e7:26:61:da:68:40:a1:5c:c1:8c:35:76:2b:8a: c6:59:d4:a9:35:c6:78:c7:b4:e4:d4:9c:dc:9e:fc:91:77:01: e8:ce:5b:c3:9a:d8:42:2f:d2:ab:70:8a:0c:02:91:f5:c4:f4: 37:d3:96:d7:e7:25:eb:a5:c2:d0:92:8a:62:2f:c7:86:9a:48: dd:cf:a1:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG QTQ3NTIxMTMwHhcNMjUwNzIxMDY0OTA2WhcNMjUwNzI4MDY0OTA2WjAYMRYwFAYD VQQDEw02ODdkZTJlMi02ZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyRFwm4RDKsKiTpptJeYKkNmHEIVp1RzMgW0JFQL2jzEnX2pvwDvMzjnfEQn X2xyBMx96xiSI3EPSg6XTrJvfDz6aorp6FHW6lNCNIiExpGIrbEu4VY4k2McuNuG eXJFXQV/iG3flViQndp1kHJfDnntw+JwYOti/BjUCK+o/AKqLC+VmkmDqOjLAhYu 2ijDiNfgGAVvDdsvyjqR8DHZ0rU9i2SxMNMZuWas+hTIOEjYOUimQ/JAneUFkTX2 CU5c3PPJ9jeiPd4XN+nwe9iDc6pNbRxuDwdT6GJFd+1AzvWrV1JJk80Q8622Bdhf N2zcJoN1053RTKKFffWXugz9xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoj19Bh sJhH/JoQl1keUSKHvbhFMB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6 UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx2nf0LZS0Z6r2GTH/Ey8LfUfQxPlWTGbH8hH8vb16Be5wTgypRHwZ v32PQfOIqU9L0MFodPudZZENTp+5u533nB8QKi7qgHT+taSwdZROf3RKEPRVg15g peyNuO0tESaI8IZ4UW2CHjM6rc4NuvSr0IQp9ecrMM43/n0YjBAdNBlP3KWibUIj wV/6q/aAbE5WqHUaZGzAbA98rtD32NViwPZLT1j9TfOt7JwejLoxG5Ehz4MyybVt 5yZh2mhAoVzBjDV2K4rGWdSpNcZ4x7Tk1JzcnvyRdwHozlvDmthCL9KrcIoMApH1 xPQ305bX5yXrpcLQkopiL8eGmkjdz6GS -----END CERTIFICATE-----Generated at Wed Jul 23 06:27:49 2025 by rpki-client