$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: Y9XAAAQAoB9vtghe1/I6oYU0dAmywDgQAsKnrn2SdAs= Subject key identifier: 1D:82:19:7D:12:70:67:BB:C2:70:91:E5:EB:A3:DF:11:0E:50:58:CE Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 031C Signing time: Sat 19 Jul 2025 01:34:50 +0000 Manifest this update: Sat 19 Jul 2025 01:34:49 +0000 Manifest next update: Sat 26 Jul 2025 01:34:49 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: jEEshjESbNumCCmF/hciwC18y46jW82ry1OYgFJulMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Jul 19 01:34:49 2025 GMT Not After : Jul 26 01:34:49 2025 GMT Subject: CN=687af639-a9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:61:4a:17:2f:58:46:a3:b3:8e:10:73:4a: 93:cf:8d:7d:6e:ae:f4:5d:8a:d2:45:ef:12:84:04: ce:3f:60:1d:0a:90:77:3d:a6:ed:9d:77:76:9a:55: 28:da:14:21:f6:02:b1:1c:be:d0:b4:a5:5a:2a:64: ce:48:62:1f:5b:2e:89:6c:ec:bc:5c:1e:c6:c8:cb: 90:93:41:83:4d:04:aa:5b:68:fe:98:8b:15:40:76: 88:95:37:0d:57:6e:3c:1a:40:4d:ee:45:c7:83:e7: 43:ba:69:24:c6:26:61:11:3c:c0:cc:9b:20:d3:b4: d6:39:dc:04:7c:fa:07:1d:62:8c:ae:4b:c2:e2:be: f7:33:14:b1:b1:28:c7:5f:f1:ca:8d:27:a7:45:32: db:de:ef:a8:e9:ab:3b:d8:23:ec:48:8a:c2:a1:9e: b0:28:b6:d1:22:5b:16:48:d3:a2:32:69:2c:19:8f: 41:d7:b0:57:23:00:4f:ca:89:58:c9:5d:89:aa:9e: 3d:93:87:60:cd:ce:c2:86:e8:2d:aa:31:8f:d0:07: 47:e0:c5:4e:c4:35:29:33:b0:40:c5:38:39:70:13: ff:29:10:0f:c1:69:2e:ed:90:7b:d3:20:4c:27:1b: 38:dc:5d:27:42:90:c1:bb:0c:a5:f0:44:2c:ea:88: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:82:19:7D:12:70:67:BB:C2:70:91:E5:EB:A3:DF:11:0E:50:58:CE X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:6a:91:d9:c5:aa:68:b5:10:9c:ad:59:5b:bc:50:43:01: 43:fc:63:25:08:d3:9d:0d:d6:88:a4:7c:ef:d4:71:c1:9a:7c: 8a:27:9b:ed:5e:0b:85:eb:54:f0:81:09:20:a0:1d:5b:6d:63: a7:98:8e:9e:b5:68:42:98:2d:f2:37:1d:fa:42:66:bd:a6:3c: 62:e3:b5:fe:29:16:a2:d6:77:f1:b2:9c:30:3a:50:9f:34:7e: d7:f2:cf:ea:06:5e:f2:98:54:67:5b:4e:ec:1c:ab:76:d0:41: 5d:1e:c5:42:82:9f:bb:fc:04:e6:fc:5f:cc:24:05:29:64:a6: d9:e8:d4:b4:98:43:12:ed:d4:63:87:e9:1c:1e:17:a5:9c:dc: d4:f6:3e:d5:4c:d2:57:3c:04:02:79:c9:35:f1:fe:53:90:a5: 4f:0c:54:de:b6:53:99:33:b9:dc:97:52:9f:b3:39:ab:be:b9: 3e:ed:66:7f:56:cf:1a:21:0a:d0:f9:48:a3:23:6f:07:6c:94: eb:4a:f2:c7:e2:0f:37:18:3c:76:18:99:43:1b:32:47:03:b3: 7b:9e:bf:26:d5:31:3e:1b:1f:55:12:80:da:b3:e2:23:2f:b8: 83:2d:d9:7e:f1:4e:89:1a:16:f6:81:06:a5:4c:33:be:76:8d: 1f:12:2d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUwNzE5MDEzNDQ5WhcNMjUwNzI2MDEzNDQ5WjAYMRYwFAYD VQQDEw02ODdhZjYzOS1hOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIRhShcvWEajs44Qc0qTz419bq70XYrSRe8ShATOP2AdCpB3PabtnXd2mlUo 2hQh9gKxHL7QtKVaKmTOSGIfWy6JbOy8XB7GyMuQk0GDTQSqW2j+mIsVQHaIlTcN V248GkBN7kXHg+dDumkkxiZhETzAzJsg07TWOdwEfPoHHWKMrkvC4r73MxSxsSjH X/HKjSenRTLb3u+o6as72CPsSIrCoZ6wKLbRIlsWSNOiMmksGY9B17BXIwBPyolY yV2Jqp49k4dgzc7ChugtqjGP0AdH4MVOxDUpM7BAxTg5cBP/KRAPwWku7ZB70yBM Jxs43F0nQpDBuwyl8EQs6ogxGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2CGX0S cGe7wnCR5euj3xEOUFjOMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQSWqR2cWqaLUQnK1ZW7xQQwFD/GMlCNOdDdaIpHzv1HHBmnyKJ5vt XguF61TwgQkgoB1bbWOnmI6etWhCmC3yNx36Qma9pjxi47X+KRai1nfxspwwOlCf NH7X8s/qBl7ymFRnW07sHKt20EFdHsVCgp+7/ATm/F/MJAUpZKbZ6NS0mEMS7dRj h+kcHhelnNzU9j7VTNJXPAQCeck18f5TkKVPDFTetlOZM7ncl1Kfszmrvrk+7WZ/ Vs8aIQrQ+UijI28HbJTrSvLH4g83GDx2GJlDGzJHA7N7nr8m1TE+Gx9VEoDas+Ij L7iDLdl+8U6JGhb2gQalTDO+do0fEi03 -----END CERTIFICATE-----Generated at Sun Jul 20 02:38:25 2025 by rpki-client