$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json) Hash identifier: zX9/PrEMvdyZZH545BmBfyQjb9QdTnP6udmCMmQb/sw= Subject key identifier: C8:4E:66:B0:E2:95:30:F2:FC:2E:A9:66:B7:93:72:0B:7B:33:68:E6 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft Manifest number: 0644 Signing time: Sun 20 Jul 2025 22:48:40 +0000 Manifest this update: Sun 20 Jul 2025 22:48:40 +0000 Manifest next update: Sun 27 Jul 2025 22:48:40 +0000 Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: Yp4ydOrvQC6LnRVxxo3JFiOogTyH5i16flwE1SPn+IM=) 2: 2F320256981611EB904AF150C4F9AE02.roa (hash: zydBQ6+XzPsP0D5XfuooCO12kFS+89HKhQ6kY0lGz0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Jul 20 22:48:40 2025 GMT Not After : Jul 27 22:48:40 2025 GMT Subject: CN=687d7248-6659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:6f:00:0c:b0:ae:46:bc:da:82:26:6c:ef: 5b:15:6e:a1:41:74:f9:e6:20:44:1b:09:97:bf:97: 49:9b:18:b2:78:60:1b:f1:87:17:6d:eb:7c:9e:8f: a5:c0:91:ce:c4:dc:40:00:e3:53:54:82:52:f4:8d: ef:91:cc:d7:9c:80:70:6d:f3:50:79:f6:55:b1:17: 19:d8:ca:cf:23:0a:74:be:fb:22:9e:6b:b7:7d:63: c5:ee:27:b8:a7:45:d5:30:42:f1:c6:7a:d7:1a:b7: 85:0c:63:1e:25:db:34:72:77:8d:3f:c8:cc:9d:1f: 86:20:e3:f0:16:90:0d:83:89:d8:f5:12:6a:2a:5c: a0:87:dd:f3:20:bb:45:3d:fb:87:74:f0:e3:3b:09: b5:0c:23:42:c7:92:f8:1f:f3:45:f6:11:08:d3:16: c9:d3:f0:99:a4:55:70:aa:ee:8d:4c:b4:4c:dc:d1: 79:7e:dd:7f:86:a5:01:e2:6c:ea:d6:c4:34:d6:42: e7:97:35:e0:5d:d8:45:36:43:32:96:cc:cc:49:a7: 4f:a2:c9:6d:21:d7:ad:63:0c:db:56:2c:38:b5:7d: 99:0b:16:c6:73:9b:00:84:7b:49:c6:71:7c:c2:f0: 63:02:33:9c:f3:9c:98:6c:7d:c7:37:48:28:c9:4f: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4E:66:B0:E2:95:30:F2:FC:2E:A9:66:B7:93:72:0B:7B:33:68:E6 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:87:17:c9:48:c0:e4:fa:7c:54:77:b0:ee:37:5e:d2:06:ff: 31:07:0f:d1:1a:38:4f:01:fa:c0:fa:bc:dc:88:54:8e:77:7b: b1:88:f1:46:e3:2e:d9:17:11:fc:df:e3:a4:55:68:38:f3:3f: fb:2f:44:92:af:cd:8d:89:27:05:95:ed:99:f2:00:10:d6:a8: a9:b8:b6:0e:21:3f:86:8f:5f:eb:c8:f4:4d:47:33:7e:5f:4a: c6:47:ac:9a:ef:37:2d:30:d4:20:c4:5b:93:c8:93:c3:b5:c5: 65:d8:8b:71:aa:79:c5:3d:ef:17:98:c8:35:d1:87:92:4b:08: 21:de:ff:f0:46:cf:3d:6c:fe:7d:35:74:ef:35:4f:03:19:51: d7:3f:9a:28:dd:f9:cd:1f:42:32:ae:08:3c:65:a1:37:32:67: 20:8d:ac:3e:b2:d9:ce:e0:8f:b9:b0:4d:46:84:71:2b:9c:cc: ac:29:ab:fc:bd:c0:44:9d:63:a6:25:78:54:db:22:f8:04:d5: 35:45:d3:a7:85:a5:a6:26:95:d1:cc:e2:0f:f7:33:66:43:75: da:69:4c:b5:bd:69:f1:19:d5:49:52:e3:c5:3a:a3:4e:88:a6: 11:d1:dc:c7:57:a6:68:47:47:32:99:e3:5f:76:c1:9b:b0:12: fb:2f:35:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjUwNzIwMjI0ODQwWhcNMjUwNzI3MjI0ODQwWjAYMRYwFAYD VQQDEw02ODdkNzI0OC02NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NxvAAywrka82oImbO9bFW6hQXT55iBEGwmXv5dJmxiyeGAb8YcXbet8no+l wJHOxNxAAONTVIJS9I3vkczXnIBwbfNQefZVsRcZ2MrPIwp0vvsinmu3fWPF7ie4 p0XVMELxxnrXGreFDGMeJds0cneNP8jMnR+GIOPwFpANg4nY9RJqKlygh93zILtF PfuHdPDjOwm1DCNCx5L4H/NF9hEI0xbJ0/CZpFVwqu6NTLRM3NF5ft1/hqUB4mzq 1sQ01kLnlzXgXdhFNkMylszMSadPosltIdetYwzbViw4tX2ZCxbGc5sAhHtJxnF8 wvBjAjOc85yYbH3HN0goyU/egwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhOZrDi lTDy/C6pZreTcgt7M2jmMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3 emVNNEt6dTJrU1pmbGRNSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDhxfJSMDk+nxUd7DuN17SBv8xBw/RGjhPAfrA+rzciFSOd3uxiPFG 4y7ZFxH83+OkVWg48z/7L0SSr82NiScFle2Z8gAQ1qipuLYOIT+Gj1/ryPRNRzN+ X0rGR6ya7zctMNQgxFuTyJPDtcVl2ItxqnnFPe8XmMg10YeSSwgh3v/wRs89bP59 NXTvNU8DGVHXP5oo3fnNH0Iyrgg8ZaE3Mmcgjaw+stnO4I+5sE1GhHErnMysKav8 vcBEnWOmJXhU2yL4BNU1RdOnhaWmJpXRzOIP9zNmQ3XaaUy1vWnxGdVJUuPFOqNO iKYR0dzHV6ZoR0cymeNfdsGbsBL7LzVL -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:46 2025 by rpki-client