$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json) Hash identifier: pQff8XZPautBvQVal6ABUo4oKDh5AfvZboWLyVQIVnI= Subject key identifier: 3C:36:16:AF:CF:CF:65:80:0C:90:EC:D2:61:E0:91:33:24:B4:D8:D1 Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft Manifest number: CD Signing time: Mon 21 Jul 2025 05:48:00 +0000 Manifest this update: Mon 21 Jul 2025 05:47:59 +0000 Manifest next update: Mon 28 Jul 2025 05:47:59 +0000 Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: uWSOkzjpMnjcwXX7L+EaUi+sohhD1nhRVvROG+JlU28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Validity Not Before: Jul 21 05:47:59 2025 GMT Not After : Jul 28 05:47:59 2025 GMT Subject: CN=687dd490-e2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:31:83:72:9d:e6:c6:1d:dc:bb:91:c0:a3: e8:03:c0:e0:90:b0:1b:66:c7:c9:f8:33:54:62:d3: bb:fd:07:71:29:8d:7d:41:e8:57:73:9e:73:d3:50: 6d:b4:cc:02:a2:0a:61:d6:2f:de:fa:ca:98:53:fd: 69:ae:b1:6f:d3:16:b4:4f:bc:c5:f4:18:68:d8:87: 9e:11:ec:81:db:f6:8a:0a:d5:e3:c8:34:38:79:1c: db:c4:90:a2:6f:49:95:49:b8:10:f2:49:25:d6:b2: 9b:1b:57:1f:df:2e:60:12:88:00:be:1f:dd:91:2b: a1:f4:a7:03:a2:c0:f7:ed:9a:dc:34:01:1f:e5:0c: bc:92:41:b0:9e:08:eb:05:7e:9e:a6:e4:25:e2:01: 15:4a:7f:29:58:c5:00:aa:ed:f5:76:9d:42:46:c5: df:89:fe:60:5e:ce:e9:d5:23:f0:fb:00:a9:e5:b6: c2:4e:c9:79:ce:1d:8e:ba:9c:03:f3:b5:fd:0d:fb: d3:25:50:44:d0:c4:78:f0:26:ce:6d:f8:8c:05:e5: da:2a:6a:8d:0f:0f:96:ae:0d:1d:9f:b0:f9:63:cd: 8d:e7:8a:67:f2:f1:a8:ce:52:ee:15:41:b8:65:84: 48:16:c7:ec:8c:eb:a2:70:f7:0a:29:c5:9e:3e:10: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:36:16:AF:CF:CF:65:80:0C:90:EC:D2:61:E0:91:33:24:B4:D8:D1 X509v3 Authority Key Identifier: keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:92:fe:4c:7c:38:4a:b9:19:02:61:d8:47:4f:fe:44:7e: 34:4e:4a:54:2e:42:1a:8e:f1:2c:65:0b:02:6f:c9:00:ae:e8: 32:f5:35:ed:83:a0:b2:58:fc:49:bf:fa:d8:a5:65:38:ab:76: 40:1e:88:79:63:f2:1e:20:14:57:51:b1:82:c1:fc:9a:f3:36: 13:96:10:6d:db:c8:c7:4e:2a:e5:e1:4e:1f:1a:b4:c6:b8:2b: f0:1c:58:5b:2d:4d:28:1e:8a:cd:49:84:cd:7d:a1:38:ba:17: cd:ee:f8:79:c8:50:71:bd:a0:01:3e:8a:6a:84:e6:91:be:3a: 10:f0:28:48:9d:c7:9f:99:c7:e5:0b:ba:a9:3e:7f:7d:b5:9f: da:6d:f8:94:21:81:54:e6:8b:83:c3:ca:7a:46:6e:67:e5:c6: dc:bd:13:6a:72:d6:6d:a4:ba:12:1c:15:69:ea:0c:b3:5f:b1: 5d:15:fe:41:ae:83:8e:c2:01:90:40:04:9a:23:ce:a3:2d:6e: b4:e3:25:53:6d:8b:38:b5:01:b0:a7:2c:1a:d3:a2:ff:50:6c: 10:b8:6c:6c:7b:e5:3e:23:5d:f9:4c:a7:f2:15:1c:63:56:8d: c4:08:14:c0:99:d0:b9:f4:b9:11:ac:02:30:8a:69:6e:c4:a3: bc:db:49:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKEU2NEUwMjE3NzQzNUFFRjFDQkZENjI0RTI2NjdFNjk2 OUFBRkFBRkYwHhcNMjUwNzIxMDU0NzU5WhcNMjUwNzI4MDU0NzU5WjAYMRYwFAYD VQQDEw02ODdkZDQ5MC1lMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFgxg3Kd5sYd3LuRwKPoA8DgkLAbZsfJ+DNUYtO7/QdxKY19QehXc55z01Bt tMwCogph1i/e+sqYU/1prrFv0xa0T7zF9Bho2IeeEeyB2/aKCtXjyDQ4eRzbxJCi b0mVSbgQ8kkl1rKbG1cf3y5gEogAvh/dkSuh9KcDosD37ZrcNAEf5Qy8kkGwngjr BX6epuQl4gEVSn8pWMUAqu31dp1CRsXfif5gXs7p1SPw+wCp5bbCTsl5zh2OupwD 87X9DfvTJVBE0MR48CbObfiMBeXaKmqNDw+Wrg0dn7D5Y82N54pn8vGozlLuFUG4 ZYRIFsfsjOuicPcKKcWePhD3dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw2Fq/P z2WADJDs0mHgkTMktNjRMB8GA1UdIwQYMBaAFOZOAhd0Na7xy/1iTiZn5paar6r/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FRjgxMzdFNDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2SExfV0pPSm1mbWxwcXZx djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrNENGM1ExcnZITF9XSk9KbWZtbHBxdnF2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FRjgxMzdFNDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2 SExfV0pPSm1mbWxwcXZxdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB485L+THw4SrkZAmHYR0/+RH40TkpULkIajvEsZQsCb8kArugy9TXt g6CyWPxJv/rYpWU4q3ZAHoh5Y/IeIBRXUbGCwfya8zYTlhBt28jHTirl4U4fGrTG uCvwHFhbLU0oHorNSYTNfaE4uhfN7vh5yFBxvaABPopqhOaRvjoQ8ChIncefmcfl C7qpPn99tZ/abfiUIYFU5ouDw8p6Rm5n5cbcvRNqctZtpLoSHBVp6gyzX7FdFf5B roOOwgGQQASaI86jLW604yVTbYs4tQGwpywa06L/UGwQuGxse+U+I135TKfyFRxj Vo3ECBTAmdC59LkRrAIwimluxKO820l8 -----END CERTIFICATE-----Generated at Mon Jul 21 06:58:46 2025 by rpki-client