$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: K3BnC1ieJGUA/2/RsfPX6qmGYRJ4hw6DX66sjVq9j18= Subject key identifier: 2F:46:DD:AD:FE:A8:22:BE:CD:C9:F8:49:09:97:DA:E2:53:93:44:5A Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 34A1 Signing time: Fri 18 Jul 2025 14:34:05 +0000 Manifest this update: Fri 18 Jul 2025 14:34:05 +0000 Manifest next update: Fri 25 Jul 2025 14:34:05 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: Ue6UlKii6w8Uf8/FXAaxU1I+ED/nQVhMbdv83CzIYuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Jul 18 14:34:05 2025 GMT Not After : Jul 25 14:34:05 2025 GMT Subject: CN=687a5b5d-a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:2f:46:9d:f2:a7:1e:ff:ec:d1:93:a4:90: 6e:52:75:61:57:c8:05:16:a3:26:eb:a8:b0:f7:fd: 9c:bd:bf:ad:68:7f:d9:62:51:19:e5:ca:c0:45:1a: 90:ba:eb:10:e2:8b:6e:e4:48:33:50:c3:c3:b5:ad: 12:90:47:10:c9:a7:d4:a5:41:d9:cd:30:6f:e6:64: 57:fc:60:08:b1:9a:dd:e0:b3:36:ab:17:63:7e:0d: 9e:70:a0:25:e0:c3:e6:c4:2b:57:ca:33:7a:80:08: 36:9d:a1:60:e3:10:f9:c8:ec:03:06:a0:41:0d:df: ae:37:33:6d:a3:df:f1:8a:30:dc:3a:82:45:0a:18: cd:06:ab:80:cc:66:a1:e8:12:76:f8:67:89:27:2a: 51:78:16:de:dc:e2:8d:99:1c:0a:69:4b:84:54:2b: 61:1c:f5:b2:4b:ea:17:34:79:54:f0:2e:34:c8:0e: 52:de:d7:a2:fb:ad:81:65:96:c7:a4:30:6c:45:f7: d6:2d:e2:a2:43:e8:e0:da:b4:b4:60:70:d6:9c:18: 79:ce:e1:d7:d0:95:64:44:29:9b:97:4b:b2:c2:05: 27:64:89:c2:3e:87:5d:a8:00:49:92:15:b8:19:36: 34:1c:5a:f1:20:6e:a0:73:68:dd:52:24:40:7d:e2: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:DD:AD:FE:A8:22:BE:CD:C9:F8:49:09:97:DA:E2:53:93:44:5A X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ea:f1:be:47:17:60:c9:67:b9:5e:46:23:be:c2:ba:7c:88: 06:24:62:74:f3:b8:cc:a5:de:f6:e2:ed:97:1d:4c:f8:54:8f: 27:31:15:39:c1:57:ec:73:a3:0a:29:69:9d:38:c7:33:c4:a7: ed:7b:68:f4:23:1c:d1:1b:aa:0d:ae:a4:c2:73:c1:62:0d:73: 11:cf:d8:c7:4f:02:31:14:df:f5:84:88:92:2c:60:47:e8:30: ab:3c:43:97:b7:d8:32:6f:f1:9e:76:b4:8f:27:93:41:13:63: 1a:cc:86:77:a9:66:bd:20:ab:93:77:81:f3:79:b8:0b:9d:d6: ba:0d:12:9a:de:d3:fa:be:94:a3:14:14:9f:f3:31:23:b5:24: 13:68:f1:dc:0d:9e:7b:d5:f7:56:d9:95:53:09:b5:b8:61:d7: 99:57:56:f6:65:dc:23:17:9b:06:7f:27:31:39:f4:c8:20:6a: 3c:09:19:1e:39:68:ab:b8:84:91:e0:b4:c8:4a:f9:d7:37:02: 99:4b:06:34:32:d8:3c:ca:ef:82:8e:1a:12:4a:39:29:80:c1: 29:46:fb:32:bc:64:b9:c6:20:3e:1b:19:07:ea:2d:81:76:10: c4:e7:5d:6a:4f:1a:66:09:09:31:23:e1:e1:09:10:84:43:25: a6:15:39:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUwNzE4MTQzNDA1WhcNMjUwNzI1MTQzNDA1WjAYMRYwFAYD VQQDEw02ODdhNWI1ZC1hN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2YvRp3ypx7/7NGTpJBuUnVhV8gFFqMm66iw9/2cvb+taH/ZYlEZ5crARRqQ uusQ4otu5EgzUMPDta0SkEcQyafUpUHZzTBv5mRX/GAIsZrd4LM2qxdjfg2ecKAl 4MPmxCtXyjN6gAg2naFg4xD5yOwDBqBBDd+uNzNto9/xijDcOoJFChjNBquAzGah 6BJ2+GeJJypReBbe3OKNmRwKaUuEVCthHPWyS+oXNHlU8C40yA5S3tei+62BZZbH pDBsRffWLeKiQ+jg2rS0YHDWnBh5zuHX0JVkRCmbl0uywgUnZInCPoddqABJkhW4 GTY0HFrxIG6gc2jdUiRAfeJHTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9G3a3+ qCK+zcn4SQmX2uJTk0RaMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS6vG+RxdgyWe5XkYjvsK6fIgGJGJ087jMpd724u2XHUz4VI8nMRU5 wVfsc6MKKWmdOMczxKfte2j0IxzRG6oNrqTCc8FiDXMRz9jHTwIxFN/1hIiSLGBH 6DCrPEOXt9gyb/GedrSPJ5NBE2MazIZ3qWa9IKuTd4HzebgLnda6DRKa3tP6vpSj FBSf8zEjtSQTaPHcDZ571fdW2ZVTCbW4YdeZV1b2ZdwjF5sGfycxOfTIIGo8CRke OWiruISR4LTISvnXNwKZSwY0Mtg8yu+CjhoSSjkpgMEpRvsyvGS5xiA+GxkH6i2B dhDE511qTxpmCQkxI+HhCRCEQyWmFTlI -----END CERTIFICATE-----Generated at Sun Jul 20 02:02:58 2025 by rpki-client