$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: /B8s1FhGLZBpUF4kr+nmTxG67jBDu+vR6cES/PXDJo8= Subject key identifier: B9:2D:58:4E:14:30:79:52:38:31:04:B2:96:B1:12:57:FD:A6:0F:4D Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0C72 Signing time: Fri 18 Jul 2025 20:57:32 +0000 Manifest this update: Fri 18 Jul 2025 20:57:32 +0000 Manifest next update: Fri 25 Jul 2025 20:57:32 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: /Jrm20Id7NKuyLwsFOjRyM7EpQaBnpyxs7a60xVlDo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Jul 18 20:57:32 2025 GMT Not After : Jul 25 20:57:32 2025 GMT Subject: CN=687ab53c-488b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:fb:3d:da:31:fc:43:af:a3:43:ef:e7:69: 01:bd:bc:91:a3:03:2e:1f:d6:e9:48:73:7c:88:1a: 81:35:58:87:d7:37:54:9f:2d:0e:c0:1e:a4:7f:bb: 87:0d:d1:75:31:1a:ad:52:f5:7a:33:d1:56:68:ab: bf:f3:ae:00:a8:1f:1f:45:1d:89:df:af:05:66:f8: 6a:2e:46:2e:dc:85:b7:eb:38:8e:c2:57:ab:a1:b8: df:e5:5d:d7:29:bc:3f:de:f0:06:bc:bf:b4:c7:d2: 29:67:a1:a7:50:93:40:a3:9f:3d:d7:4f:25:33:6b: 9b:6b:5a:fc:d8:7b:39:7f:7f:2b:74:dc:4c:1f:f2: 5f:db:38:c0:5c:b2:c1:66:ee:6b:da:4f:de:bd:98: 7e:ef:94:d3:1c:ff:fc:40:2a:f3:24:81:8f:16:26: 1c:40:fd:7a:64:15:5f:0b:8a:42:2c:b5:54:c0:fb: 97:45:72:fb:cc:f8:01:73:a8:9f:e0:42:6d:8b:11: fd:1d:b7:d3:a8:84:f7:db:bd:bd:10:da:ac:3d:55: 2f:81:0f:a1:2a:f3:12:73:ae:db:2a:45:01:2c:5d: 1c:1a:b4:f9:ad:15:7b:a7:db:d9:99:55:0b:8a:3b: 8c:a9:82:61:4e:c1:56:56:f8:de:b0:c1:3a:60:06: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2D:58:4E:14:30:79:52:38:31:04:B2:96:B1:12:57:FD:A6:0F:4D X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:88:1f:32:3c:62:be:87:26:a4:ab:fe:85:c1:7c:f5:a2:35: d3:32:2a:5d:7f:25:42:25:3b:60:90:5e:9a:e9:92:0b:6d:cc: 20:68:ce:f4:c5:8f:1e:07:39:a3:ab:33:10:db:6d:b4:d3:79: 4f:ee:ba:36:c6:71:80:02:10:34:66:ef:7f:c2:bb:c2:28:19: 2e:e7:c0:5d:b0:bf:11:97:2c:4e:9f:75:d4:6b:eb:66:f6:2d: fc:90:9b:8b:05:60:27:77:3c:84:ce:ae:cb:13:3a:8f:0c:fe: 56:28:50:8f:9a:4e:d7:d9:d8:5d:db:06:59:4c:1c:0f:06:95: e5:fa:48:12:10:69:08:b8:89:4b:81:ad:de:78:56:94:63:a4: e4:54:74:94:70:27:b2:13:af:75:43:56:03:2f:32:4f:ac:f3: 64:8e:aa:4a:9d:79:66:49:cc:4e:89:02:36:d2:c9:e0:ab:3e: 55:a2:22:78:68:8b:1b:f7:fc:a7:3c:c4:77:e5:ee:17:53:de: f4:f3:81:bb:43:ea:7f:31:63:4a:cf:b6:40:c6:4e:37:24:7c: 84:b3:67:c2:c4:42:04:ec:8f:05:43:36:51:93:01:99:49:1b: 53:dc:1e:41:7b:48:73:43:ea:fa:c9:b2:6f:cb:17:82:d4:99: f0:46:73:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjUwNzE4MjA1NzMyWhcNMjUwNzI1MjA1NzMyWjAYMRYwFAYD VQQDEw02ODdhYjUzYy00ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Vj7Pdox/EOvo0Pv52kBvbyRowMuH9bpSHN8iBqBNViH1zdUny0OwB6kf7uH DdF1MRqtUvV6M9FWaKu/864AqB8fRR2J368FZvhqLkYu3IW36ziOwlerobjf5V3X Kbw/3vAGvL+0x9IpZ6GnUJNAo589108lM2uba1r82Hs5f38rdNxMH/Jf2zjAXLLB Zu5r2k/evZh+75TTHP/8QCrzJIGPFiYcQP16ZBVfC4pCLLVUwPuXRXL7zPgBc6if 4EJtixH9HbfTqIT32729ENqsPVUvgQ+hKvMSc67bKkUBLF0cGrT5rRV7p9vZmVUL ijuMqYJhTsFWVvjesME6YAZSBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLktWE4U MHlSODEEspaxElf9pg9NMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjiB8yPGK+hyakq/6FwXz1ojXTMipdfyVCJTtgkF6a6ZILbcwgaM70 xY8eBzmjqzMQ222003lP7ro2xnGAAhA0Zu9/wrvCKBku58BdsL8RlyxOn3XUa+tm 9i38kJuLBWAndzyEzq7LEzqPDP5WKFCPmk7X2dhd2wZZTBwPBpXl+kgSEGkIuIlL ga3eeFaUY6TkVHSUcCeyE691Q1YDLzJPrPNkjqpKnXlmScxOiQI20sngqz5VoiJ4 aIsb9/ynPMR35e4XU97084G7Q+p/MWNKz7ZAxk43JHyEs2fCxEIE7I8FQzZRkwGZ SRtT3B5Be0hzQ+r6ybJvyxeC1JnwRnPQ -----END CERTIFICATE-----Generated at Sun Jul 20 01:56:11 2025 by rpki-client