$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: gZyrbWFDFcGk9Gj9Lfvfq+IWTD/bRam3U1pM3wCuGy0= Subject key identifier: 4D:0A:66:D6:F9:9C:C7:FF:61:9A:54:4A:55:37:42:C3:BF:32:2D:4A Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:14:11 +0000 Manifest this update: Sat 19 Jul 2025 07:14:10 +0000 Manifest next update: Sat 26 Jul 2025 07:14:10 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: x4WmfeCL1dPyyl5aDMUEAWOFxCFj/UPj7uDmPwhcUog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Jul 19 07:14:10 2025 GMT Not After : Jul 26 07:14:10 2025 GMT Subject: CN=687b45c3-267c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:1c:c8:d6:a8:dd:a9:6d:ac:a4:01:81:d4: 1c:c8:53:cd:6d:b3:ed:73:dd:c7:2b:51:21:a5:92: aa:ad:63:b2:5f:c3:ee:4d:4d:1c:48:90:31:fd:2f: 5e:ca:0e:24:e7:13:84:db:4f:d0:a6:a8:25:81:1a: 0e:a2:77:b9:bf:7d:cf:99:ae:8d:a2:cb:c2:52:1f: b5:02:15:7f:67:38:a1:3d:8b:1c:ea:1e:4c:32:22: 4b:97:32:75:83:6c:bd:82:3a:65:87:4b:1c:be:2f: 57:31:8e:c7:be:8c:84:8d:e7:a9:51:67:ff:fa:27: 16:7c:92:1e:a4:83:74:73:08:8d:5e:63:d5:74:20: 02:0d:e4:73:16:09:6c:82:71:f6:01:df:f7:44:a2: 18:5b:51:b2:57:4f:a1:79:34:3c:a2:b0:d4:c6:53: e0:4d:a3:a1:3b:1a:18:c3:7e:ed:3e:de:f7:61:e5: 29:5d:7f:cd:14:83:18:ac:44:84:1f:89:41:ac:a1: 3b:e6:03:be:15:31:2e:0c:9d:3d:3c:3d:bf:e5:ed: 8e:2f:13:1b:46:c1:37:71:ea:ba:e6:69:64:39:76: 37:bd:06:05:b1:5c:62:11:8d:11:f7:32:fb:56:8a: 39:e0:8a:63:55:09:aa:af:54:06:60:b5:07:42:1a: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:66:D6:F9:9C:C7:FF:61:9A:54:4A:55:37:42:C3:BF:32:2D:4A X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:39:ba:8b:cf:3a:f7:b6:cf:b0:71:4d:c0:58:c8:ee:79: 81:34:53:14:44:44:e5:2f:5d:9e:57:69:7b:b6:fe:6c:d5:30: 28:78:c9:79:76:b5:c2:f9:e3:ab:a5:a8:85:9e:fd:e8:67:77: c0:6f:a4:d2:c1:69:08:98:49:cc:05:8b:45:ed:7b:f1:29:d2: 31:6d:4f:b4:8e:26:e4:07:86:80:05:ac:9d:93:02:81:d6:6a: 81:f7:f4:52:71:34:82:12:8e:88:9e:dd:a1:94:27:fc:f2:9f: 63:00:a8:37:00:c9:09:31:3a:d0:d6:ec:f5:9f:e5:4c:9d:4b: 66:6d:48:72:18:9c:3d:d0:d9:e7:56:9a:12:03:05:05:fa:fe: 1a:45:42:88:bc:8f:a7:90:49:ba:71:e9:50:48:cd:bd:8a:5f: 8d:e2:c2:94:aa:62:20:dd:f1:58:24:c3:51:76:11:98:7c:ab: 4e:f0:2e:ad:fa:04:03:c2:3a:2c:c6:8f:72:06:6f:2f:d5:b0: 43:47:3f:80:42:dc:ea:06:3d:22:22:a0:12:89:b7:12:df:88: 5a:21:45:bf:d6:31:13:7c:3b:91:3a:3b:47:24:96:97:b0:d4: 6d:16:26:c9:79:8f:49:93:ca:d5:5c:c3:55:8c:7c:79:78:9d: 83:f7:53:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTA3MTkwNzE0MTBaFw0yNTA3MjYwNzE0MTBaMBgxFjAUBgNV BAMTDTY4N2I0NWMzLTI2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKUhzI1qjdqW2spAGB1BzIU81ts+1z3ccrUSGlkqqtY7Jfw+5NTRxIkDH9L17K DiTnE4TbT9CmqCWBGg6id7m/fc+Zro2iy8JSH7UCFX9nOKE9ixzqHkwyIkuXMnWD bL2COmWHSxy+L1cxjse+jISN56lRZ//6JxZ8kh6kg3RzCI1eY9V0IAIN5HMWCWyC cfYB3/dEohhbUbJXT6F5NDyisNTGU+BNo6E7GhjDfu0+3vdh5Sldf80UgxisRIQf iUGsoTvmA74VMS4MnT08Pb/l7Y4vExtGwTdx6rrmaWQ5dje9BgWxXGIRjRH3MvtW ijngimNVCaqvVAZgtQdCGgdfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTQpm1vmc x/9hmlRKVTdCw78yLUowHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJsObqLzzr3ts+wcU3AWMjueYE0UxREROUvXZ5XaXu2/mzVMCh4yXl2 tcL546ulqIWe/ehnd8BvpNLBaQiYScwFi0Xte/Ep0jFtT7SOJuQHhoAFrJ2TAoHW aoH39FJxNIISjoie3aGUJ/zyn2MAqDcAyQkxOtDW7PWf5UydS2ZtSHIYnD3Q2edW mhIDBQX6/hpFQoi8j6eQSbpx6VBIzb2KX43iwpSqYiDd8Vgkw1F2EZh8q07wLq36 BAPCOizGj3IGby/VsENHP4BC3OoGPSIioBKJtxLfiFohRb/WMRN8O5E6O0cklpew 1G0WJsl5j0mTytVcw1WMfHl4nYP3Uzg= -----END CERTIFICATE-----Generated at Mon Jul 21 05:45:17 2025 by rpki-client