$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: S5sk36ASKrrOyHAMbIuG8CkM4Okb7z7XjK4UxRdO0Kc= Subject key identifier: 1B:85:E7:79:51:3B:1B:B7:FC:AF:E9:F1:19:55:02:BA:98:27:E9:10 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 3C Signing time: Sat 19 Jul 2025 07:49:17 +0000 Manifest this update: Sat 19 Jul 2025 07:49:16 +0000 Manifest next update: Sat 26 Jul 2025 07:49:16 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: njemOXNJjA8HP3XQywdIVpU5JJm9zUReF18Rsc6rpuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Jul 19 07:49:16 2025 GMT Not After : Jul 26 07:49:16 2025 GMT Subject: CN=687b4dfc-a10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:be:9a:40:71:a0:7b:b7:b3:05:aa:e1:52: db:52:d9:43:ae:fc:96:85:3e:93:de:aa:6e:2b:a1: b9:b2:15:16:39:6c:0a:9f:9a:c8:c2:43:29:8a:f4: c1:a8:d0:aa:21:11:73:4c:91:ad:92:de:14:38:9a: 8d:f2:98:bd:9b:65:99:35:fe:4b:33:bf:ba:81:f2: b3:2a:b1:3a:14:e3:8e:c1:cb:47:8f:7e:8a:27:46: d9:8c:80:54:4c:58:8d:88:f7:c6:16:f0:69:d2:c8: 3d:07:f1:af:93:57:17:2a:3d:dd:6d:42:8e:91:83: 75:09:65:4e:01:fb:b0:80:d3:6d:96:ae:74:1c:db: 5e:97:ff:c4:e8:4d:2a:59:f2:a4:7b:25:d7:79:bd: 28:a0:44:b8:d0:92:f5:32:b5:88:3d:09:de:1b:a8: 9e:89:8f:00:1d:89:03:82:5e:a4:52:a8:b4:92:e9: f8:e3:b7:09:3f:87:d8:c1:2e:83:87:7f:3a:be:4a: 8c:11:d4:bb:ea:3f:6f:f4:13:e2:3d:9b:15:e3:cd: 06:f9:95:3b:74:f5:be:eb:bd:25:db:31:1a:ca:1a: 85:62:8a:e3:0d:24:ad:3f:e5:c3:65:89:b5:17:0e: e5:22:96:6e:a3:e6:ef:94:7e:ca:46:27:a2:b6:77: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:85:E7:79:51:3B:1B:B7:FC:AF:E9:F1:19:55:02:BA:98:27:E9:10 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:61:9d:7b:15:f3:94:bf:d0:0d:ab:8b:58:e2:9f:f2:79:7c: 52:cb:e4:b4:5c:3b:8b:4c:2a:5a:d8:86:03:ca:a8:36:e1:3b: 3a:58:96:3a:cc:9d:c4:a8:7a:09:3f:87:d3:26:9e:68:76:6a: 01:5e:db:92:d3:53:d9:16:94:ac:a3:91:f7:78:64:ba:8a:9c: 03:81:44:20:f8:4e:4c:09:2a:b9:23:3f:d4:d2:60:a3:a4:4c: 67:d4:51:6a:56:7e:20:f2:85:1b:83:92:50:72:66:ba:6f:4a: 20:4a:99:28:fc:45:db:39:9b:7d:ca:a0:a7:f0:d9:e4:33:7b: 4f:96:79:12:4a:4c:21:df:06:4a:19:31:f4:af:0e:f8:f3:a2: 59:3f:37:a1:d9:25:d9:9d:c8:c9:36:d6:b7:1e:13:75:07:99: 2b:99:c3:36:cf:bf:40:90:1a:5c:97:34:61:ee:cd:8a:c8:69: 26:48:82:8d:af:be:71:64:22:58:c6:ad:68:5d:e4:55:bc:ed: 1b:19:51:3f:a5:0f:b0:2b:da:61:7d:0f:3f:aa:bf:99:28:b9: e9:b2:76:c5:e3:ea:8b:98:67:d3:0f:b7:c4:88:98:5b:02:d3: 3c:0a:ac:bf:8b:4a:d1:24:d3:37:02:dc:ed:37:30:b6:8a:95: 83:eb:18:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA3MTkwNzQ5MTZaFw0yNTA3MjYwNzQ5MTZaMBgxFjAUBgNV BAMTDTY4N2I0ZGZjLWExMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbJr6aQHGge7ezBarhUttS2UOu/JaFPpPeqm4robmyFRY5bAqfmsjCQymK9MGo 0KohEXNMka2S3hQ4mo3ymL2bZZk1/kszv7qB8rMqsToU447By0ePfoonRtmMgFRM WI2I98YW8GnSyD0H8a+TVxcqPd1tQo6Rg3UJZU4B+7CA022WrnQc216X/8ToTSpZ 8qR7Jdd5vSigRLjQkvUytYg9Cd4bqJ6JjwAdiQOCXqRSqLSS6fjjtwk/h9jBLoOH fzq+SowR1LvqP2/0E+I9mxXjzQb5lTt09b7rvSXbMRrKGoViiuMNJK0/5cNlibUX DuUilm6j5u+UfspGJ6K2d9a/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG4XneVE7 G7f8r+nxGVUCupgn6RAwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGdhnXsV85S/0A2ri1jin/J5fFLL5LRcO4tMKlrYhgPKqDbhOzpYljrM ncSoegk/h9Mmnmh2agFe25LTU9kWlKyjkfd4ZLqKnAOBRCD4TkwJKrkjP9TSYKOk TGfUUWpWfiDyhRuDklByZrpvSiBKmSj8Rds5m33KoKfw2eQze0+WeRJKTCHfBkoZ MfSvDvjzolk/N6HZJdmdyMk21rceE3UHmSuZwzbPv0CQGlyXNGHuzYrIaSZIgo2v vnFkIljGrWhd5FW87RsZUT+lD7Ar2mF9Dz+qv5kouemydsXj6ouYZ9MPt8SImFsC 0zwKrL+LStEk0zcC3O03MLaKlYPrGGs= -----END CERTIFICATE-----Generated at Mon Jul 21 07:02:21 2025 by rpki-client