$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: z6ADsZwFqbgvifzZRHDS3V2/rVPSfs8Um6XOxS1qthw= Subject key identifier: E7:77:4D:A5:73:F0:53:F8:6D:30:E9:02:8E:E5:96:7A:7C:37:59:9E Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E42 Signing time: Tue 22 Jul 2025 18:17:01 +0000 Manifest this update: Tue 22 Jul 2025 18:17:01 +0000 Manifest next update: Tue 29 Jul 2025 18:17:01 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: EgtHFr3dt9vkOFtyMCQhLBbtO0IVAAzNSUDEcLXtLDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Jul 22 18:17:01 2025 GMT Not After : Jul 29 18:17:01 2025 GMT Subject: CN=687fd59d-77aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:83:4d:2e:2e:f2:82:c7:45:1e:7f:8e:a4: 26:f1:bb:d4:ef:05:44:e2:3c:68:ac:22:1c:66:02: 03:f4:6a:66:ec:32:b3:f3:86:63:63:cd:cc:76:17: 50:e8:6d:76:b8:09:46:8f:3d:f8:44:e5:99:ee:ed: 3a:cf:86:57:43:05:d8:4a:79:a2:59:72:e0:0c:9f: ec:7f:16:d0:14:4c:34:59:ba:a7:73:16:ba:34:ae: 25:ed:1c:1b:b0:4a:36:61:43:74:9d:c8:0f:80:19: b2:0a:43:17:ec:cc:98:21:1e:3a:9a:88:ef:e2:50: 67:74:48:45:06:e9:f5:26:2d:ab:81:78:81:29:8e: 6b:8e:f5:53:26:77:0a:32:f4:21:ac:d5:00:29:fa: f6:48:e5:19:71:7e:e3:8a:4f:0e:ce:fc:51:0d:77: 20:92:04:1e:f5:89:00:1f:41:ef:89:2e:33:ef:4e: 49:bc:7a:71:fd:85:25:22:9b:ce:f7:24:eb:be:27: 7e:0f:c2:da:f1:26:ec:57:74:14:78:b0:d4:3f:12: 3e:9f:c2:fe:a1:0d:d5:ab:b9:e5:ea:8b:7e:ff:7b: fb:be:34:d1:4f:61:f3:1b:9b:e5:43:01:cd:cf:1d: bf:4a:25:08:d6:65:5e:87:d2:e7:8c:5d:45:23:d8: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:4D:A5:73:F0:53:F8:6D:30:E9:02:8E:E5:96:7A:7C:37:59:9E X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3b:5c:d1:96:db:96:90:69:ad:67:d9:34:ac:a4:97:44:cb: 0d:fe:84:a7:0f:f8:be:1a:b8:7d:08:5f:18:fd:5d:fb:95:9c: ee:cf:8c:0c:a5:61:40:60:02:a4:9b:6b:85:3a:a5:ae:77:fd: 07:2c:2a:a0:01:0a:6b:eb:6b:dc:3e:8e:2d:bd:de:74:b3:53: 48:df:61:8a:55:0e:8d:04:71:7c:3e:51:89:03:91:4c:5b:ac: 9f:18:fa:ab:ae:3f:02:9a:7d:43:6e:1d:54:c8:c2:bb:47:d8: 3b:14:2b:51:92:7a:87:98:bf:74:5a:0f:a7:ea:3d:1a:0c:fc: 97:78:78:ed:93:6a:78:a2:3f:59:0e:08:8b:bd:7b:43:7f:19: 34:15:2b:95:fb:39:0e:5c:98:ad:bc:f4:8c:61:ad:f7:57:76: a6:3d:53:1a:4f:66:2b:c0:0b:25:d4:03:77:9f:df:90:f1:f8: ad:85:7d:10:8a:00:33:53:4e:31:3c:e3:47:d4:c0:65:55:74: 0c:ea:a8:05:9b:f9:e4:0b:0b:d4:20:71:59:e3:2b:a5:d6:80: 8c:af:7e:9c:46:51:1f:9f:a9:3b:dc:bf:2b:72:9a:b2:03:83: db:7f:9b:d4:7e:d8:d5:23:c7:46:e2:fe:bd:0b:da:4a:f4:28: ff:b2:ab:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwNzIyMTgxNzAxWhcNMjUwNzI5MTgxNzAxWjAYMRYwFAYD VQQDEw02ODdmZDU5ZC03N2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXaDTS4u8oLHRR5/jqQm8bvU7wVE4jxorCIcZgID9Gpm7DKz84ZjY83MdhdQ 6G12uAlGjz34ROWZ7u06z4ZXQwXYSnmiWXLgDJ/sfxbQFEw0Wbqncxa6NK4l7Rwb sEo2YUN0ncgPgBmyCkMX7MyYIR46mojv4lBndEhFBun1Ji2rgXiBKY5rjvVTJncK MvQhrNUAKfr2SOUZcX7jik8OzvxRDXcgkgQe9YkAH0HviS4z705JvHpx/YUlIpvO 9yTrvid+D8La8SbsV3QUeLDUPxI+n8L+oQ3Vq7nl6ot+/3v7vjTRT2HzG5vlQwHN zx2/SiUI1mVeh9LnjF1FI9i2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd3TaVz 8FP4bTDpAo7llnp8N1meMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVO1zRltuWkGmtZ9k0rKSXRMsN/oSnD/i+Grh9CF8Y/V37lZzuz4wM pWFAYAKkm2uFOqWud/0HLCqgAQpr62vcPo4tvd50s1NI32GKVQ6NBHF8PlGJA5FM W6yfGPqrrj8Cmn1Dbh1UyMK7R9g7FCtRknqHmL90Wg+n6j0aDPyXeHjtk2p4oj9Z DgiLvXtDfxk0FSuV+zkOXJitvPSMYa33V3amPVMaT2YrwAsl1AN3n9+Q8fithX0Q igAzU04xPONH1MBlVXQM6qgFm/nkCwvUIHFZ4yul1oCMr36cRlEfn6k73L8rcpqy A4Pbf5vUftjVI8dG4v69C9pK9Cj/sqtQ -----END CERTIFICATE-----Generated at Thu Jul 24 04:59:39 2025 by rpki-client