$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: W4pk2GPqHwF9MznVosK+4+21/SiazJlNO7gSIY489jQ= Subject key identifier: AD:00:13:0A:20:B9:AF:C2:EC:C1:80:6E:26:27:81:F4:FC:77:A2:5B Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 22 Signing time: Sat 19 Jul 2025 08:05:19 +0000 Manifest this update: Sat 19 Jul 2025 08:05:19 +0000 Manifest next update: Sat 26 Jul 2025 08:05:19 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: VAF+ORfah007sl0ZOqlzwMTRSMdy7T6/5wiPIc1bDVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Jul 19 08:05:19 2025 GMT Not After : Jul 26 08:05:19 2025 GMT Subject: CN=687b51bf-fedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:71:27:4e:92:2e:5f:34:81:77:d2:be:17: 40:ef:d9:a6:3d:dd:fd:35:04:ed:74:1d:2b:1f:fe: 49:7f:9b:57:89:0f:3c:9d:ea:a7:98:a1:bc:97:b3: 8f:6a:48:92:3b:61:a0:92:1c:df:b1:8b:8a:01:ed: 98:4a:66:27:07:a5:90:88:d6:0c:f5:cc:1f:fc:bb: 90:7e:83:41:86:8c:eb:d0:d7:60:e4:77:7e:b5:54: 8f:61:e9:75:d7:39:91:d6:76:1f:8d:2a:b0:bf:1f: 1c:d1:0d:08:66:67:36:da:2a:c2:60:62:ec:09:e4: 11:59:ec:a0:bc:20:bd:44:70:a1:ec:13:b2:b4:3e: 2a:09:fc:0f:f9:e5:3a:2e:0a:f3:6d:cd:62:0d:71: e7:73:a8:f2:8b:f0:ef:b9:6f:00:11:de:8a:c1:d0: f9:47:03:6a:37:2f:3d:be:bd:2f:2d:e7:93:49:b4: 16:17:4f:58:58:3d:15:3c:bc:ee:37:f1:77:59:92: d4:14:0b:ee:e7:e0:0c:86:43:c5:13:a9:6b:8a:52: 63:89:39:66:ff:e1:54:c9:06:94:6f:2c:e9:20:8d: 2f:a0:69:20:36:36:92:df:aa:49:c4:17:a6:0e:d9: 68:0c:55:71:18:c1:66:74:a8:1b:e4:2b:f8:07:7b: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:00:13:0A:20:B9:AF:C2:EC:C1:80:6E:26:27:81:F4:FC:77:A2:5B X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a7:f1:77:25:b7:e3:86:ce:81:46:96:51:69:1c:76:7f:b7: 4e:59:a5:9f:aa:18:4c:66:43:f4:c6:09:02:82:b8:88:60:38: a6:17:be:7d:e2:42:43:46:c7:97:2f:ae:c5:5c:37:ea:0e:3f: 89:c4:ce:36:d1:6c:69:a6:04:8c:8c:77:9e:b9:19:9c:6e:b1: 4f:ab:be:ce:cb:7f:31:c1:1b:06:e3:55:ad:50:83:e1:ab:43: a8:51:be:12:fc:86:c1:12:ed:3d:08:f6:80:ce:ae:97:39:17: 9e:4c:d1:19:2d:c9:71:07:f1:03:58:26:e3:f8:de:52:25:a9: 94:b1:c4:4a:33:8b:b9:79:ee:98:00:dc:24:15:7e:30:b3:80: 2a:c7:d4:34:23:03:cc:4d:9f:3a:68:20:10:0f:b4:a5:4a:12: 7e:66:8a:96:b9:94:e1:9b:97:7f:55:93:f0:26:6b:24:d6:ea: 61:f0:fe:f3:be:e9:af:a6:d8:79:65:20:73:0a:7f:00:62:de: 32:59:2c:b4:20:cb:72:b2:52:70:51:9d:3f:ac:31:a0:4d:18: ae:cd:c7:94:8b:b8:04:3a:1e:6f:15:03:e7:9f:82:29:85:a6: 24:f4:13:ed:ac:e2:ed:70:65:b1:2c:c3:a1:1d:40:0e:aa:bf: e6:85:a7:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA3MTkwODA1MTlaFw0yNTA3MjYwODA1MTlaMBgxFjAUBgNV BAMTDTY4N2I1MWJmLWZlZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDILHEnTpIuXzSBd9K+F0Dv2aY93f01BO10HSsf/kl/m1eJDzyd6qeYobyXs49q SJI7YaCSHN+xi4oB7ZhKZicHpZCI1gz1zB/8u5B+g0GGjOvQ12Dkd361VI9h6XXX OZHWdh+NKrC/HxzRDQhmZzbaKsJgYuwJ5BFZ7KC8IL1EcKHsE7K0PioJ/A/55Tou CvNtzWINcedzqPKL8O+5bwAR3orB0PlHA2o3Lz2+vS8t55NJtBYXT1hYPRU8vO43 8XdZktQUC+7n4AyGQ8UTqWuKUmOJOWb/4VTJBpRvLOkgjS+gaSA2NpLfqknEF6YO 2WgMVXEYwWZ0qBvkK/gHew7HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrQATCiC5 r8LswYBuJieB9Px3olswHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmn8Xclt+OGzoFGllFpHHZ/t05ZpZ+qGExmQ/TGCQKCuIhgOKYXvn3i QkNGx5cvrsVcN+oOP4nEzjbRbGmmBIyMd565GZxusU+rvs7LfzHBGwbjVa1Qg+Gr Q6hRvhL8hsES7T0I9oDOrpc5F55M0RktyXEH8QNYJuP43lIlqZSxxEozi7l57pgA 3CQVfjCzgCrH1DQjA8xNnzpoIBAPtKVKEn5mipa5lOGbl39Vk/AmayTW6mHw/vO+ 6a+m2HllIHMKfwBi3jJZLLQgy3KyUnBRnT+sMaBNGK7Nx5SLuAQ6Hm8VA+efgimF piT0E+2s4u1wZbEsw6EdQA6qv+aFpws= -----END CERTIFICATE-----Generated at Sun Jul 20 07:55:34 2025 by rpki-client