$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: b7DaY6KQ67hSFljcus4x7Cc9/jeV2XegTKvgd3n6NzQ= Subject key identifier: 9C:1C:36:3C:38:12:54:9C:7B:13:B1:D8:11:A0:AC:15:9B:3C:EE:80 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: D2 Signing time: Sat 19 Jul 2025 05:51:26 +0000 Manifest this update: Sat 19 Jul 2025 05:51:25 +0000 Manifest next update: Sat 26 Jul 2025 05:51:25 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: +yoklxMkzo2nRllESbxR/+GFqHf+0EYmYrrxb2SFYzE=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Jul 19 05:51:25 2025 GMT Not After : Jul 26 05:51:25 2025 GMT Subject: CN=687b325d-2ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:13:bd:c8:95:52:0f:8e:87:7d:d7:27:6e: c7:4b:84:6e:18:83:8f:48:23:9f:5e:62:7a:b7:ff: 07:0f:6d:0b:e2:00:28:fa:e4:da:b9:f4:03:94:78: f7:3a:ed:23:40:95:3c:59:fa:7d:9e:36:bb:73:b0: f2:70:a6:32:13:f2:05:e5:d6:2a:c0:9d:40:a6:64: cc:e6:58:21:d0:38:28:f6:08:c6:a8:93:d4:c9:3d: 7c:bf:d3:2a:1c:f2:d6:72:57:2c:56:2c:36:08:fb: 14:70:c0:f7:83:32:46:59:98:73:2e:c4:bd:1f:d3: 15:a7:33:2d:a2:00:28:d5:ba:53:62:ee:ea:81:5c: a7:31:ae:8e:c3:4d:1e:b0:21:9e:ce:05:67:a1:41: 8e:8e:f6:c4:f5:f2:55:c4:60:81:66:c9:dc:5d:ae: 8b:0e:f3:a1:e7:dc:33:2e:58:5a:bd:61:7c:85:79: 8c:bb:dc:59:25:d5:6f:9c:39:47:5b:da:00:57:44: b1:45:d7:2e:73:0a:bb:73:ae:9a:9f:b9:a9:b2:0a: 35:4c:34:e6:ab:cf:92:7c:df:7d:81:88:eb:05:dc: dc:a2:20:07:cc:29:39:57:dc:25:c3:ed:e2:83:eb: d1:e3:c5:61:3f:78:ba:b9:00:14:17:e1:95:27:9a: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1C:36:3C:38:12:54:9C:7B:13:B1:D8:11:A0:AC:15:9B:3C:EE:80 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:38:aa:61:14:99:93:c2:ae:cf:a5:b6:a7:af:ff:73:d4:2a: 3a:ed:92:67:5b:25:74:3c:7c:b3:90:20:68:96:59:e4:e9:e3: 38:8e:ea:81:04:3e:6f:5d:ce:1c:3f:86:72:dd:54:c9:b4:d5: bb:23:6f:77:03:57:5a:62:19:47:d6:ee:39:86:1e:d9:c2:1f: fa:4b:1c:07:1c:f9:6d:b9:6a:9e:70:04:10:8d:f9:b4:f8:47: 55:9b:06:d7:72:10:5b:d9:29:1e:d7:9d:5d:16:6b:94:5c:34: f7:6e:89:49:e1:ff:24:32:07:82:ba:d7:10:78:7f:b2:ee:a8: 67:fc:85:bb:72:04:4b:ca:61:2f:ec:cd:1c:c0:2b:19:70:32: fc:d3:c1:ca:ae:b1:51:f8:03:38:db:ba:51:0f:b2:84:8f:64: 0e:76:bb:2b:5f:fc:51:45:22:a5:7f:fd:e6:a8:23:aa:ad:cf: 6d:49:b9:9f:43:96:ac:c7:27:44:92:78:9a:4a:60:0b:df:72: 90:0e:89:25:cd:4e:c0:62:6d:96:be:83:54:36:40:cd:35:2a: f5:52:8d:f1:80:ec:e4:56:0b:06:43:b6:65:77:de:b1:a5:83: 4e:c5:b8:67:90:f4:cc:fd:70:f3:07:1d:a9:7d:df:5b:6b:2d: 80:c1:54:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwNzE5MDU1MTI1WhcNMjUwNzI2MDU1MTI1WjAYMRYwFAYD VQQDEw02ODdiMzI1ZC0yZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmkTvciVUg+Oh33XJ27HS4RuGIOPSCOfXmJ6t/8HD20L4gAo+uTaufQDlHj3 Ou0jQJU8Wfp9nja7c7DycKYyE/IF5dYqwJ1ApmTM5lgh0Dgo9gjGqJPUyT18v9Mq HPLWclcsViw2CPsUcMD3gzJGWZhzLsS9H9MVpzMtogAo1bpTYu7qgVynMa6Ow00e sCGezgVnoUGOjvbE9fJVxGCBZsncXa6LDvOh59wzLlhavWF8hXmMu9xZJdVvnDlH W9oAV0SxRdcucwq7c66an7mpsgo1TDTmq8+SfN99gYjrBdzcoiAHzCk5V9wlw+3i g+vR48VhP3i6uQAUF+GVJ5rs+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwcNjw4 ElScexOx2BGgrBWbPO6AMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWOKphFJmTwq7Ppbanr/9z1Co67ZJnWyV0PHyzkCBollnk6eM4juqB BD5vXc4cP4Zy3VTJtNW7I293A1daYhlH1u45hh7Zwh/6SxwHHPltuWqecAQQjfm0 +EdVmwbXchBb2Ske151dFmuUXDT3bolJ4f8kMgeCutcQeH+y7qhn/IW7cgRLymEv 7M0cwCsZcDL808HKrrFR+AM427pRD7KEj2QOdrsrX/xRRSKlf/3mqCOqrc9tSbmf Q5asxydEkniaSmAL33KQDoklzU7AYm2WvoNUNkDNNSr1Uo3xgOzkVgsGQ7Zld96x pYNOxbhnkPTM/XDzBx2pfd9bay2AwVTy -----END CERTIFICATE-----Generated at Sun Jul 20 14:30:58 2025 by rpki-client