$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: SpNnxAbmCXtNjU4ZJQqHhBe5HAEHdv4lx0959c0V8wI= Subject key identifier: 54:AA:38:10:A9:AC:9C:D3:74:98:A6:CB:B6:8E:61:BE:ED:11:B9:6D Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 5085 Signing time: Sun 24 Aug 2025 16:22:42 +0000 Manifest this update: Sun 24 Aug 2025 16:22:41 +0000 Manifest next update: Sun 31 Aug 2025 16:22:41 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: r4ARIGRQm1nTV9Bx9yJZiZfNnlkj7h759KeLD5qo+YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: Aug 24 16:22:41 2025 GMT Not After : Aug 31 16:22:41 2025 GMT Subject: CN=68ab3c52-d13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:9f:e4:eb:be:f9:a9:e6:3e:39:f2:92:84: ff:0b:d2:59:91:bd:d7:75:78:70:0b:70:43:30:88: 9a:ed:c7:a4:85:c0:0a:62:0f:8e:cb:9c:46:17:58: e5:2c:63:c7:0a:dc:0b:d0:e5:83:60:93:d8:6b:0a: a8:7e:7a:18:1e:20:9b:af:a3:a4:d2:6a:0e:90:b4: 9f:3a:76:90:e6:d5:e9:d2:6c:f1:57:fe:96:fd:6a: 0a:5e:fb:b7:3e:b1:61:e3:20:d2:17:b1:78:77:e6: e8:5e:ab:fb:23:bd:2e:a1:7a:c4:5d:26:4f:76:a1: ef:49:6f:3b:38:7c:8d:72:43:0f:37:4a:66:01:46: cb:0a:6f:d3:5c:c7:00:70:5d:5f:bd:45:a1:b3:20: 5f:95:67:05:3c:ae:ac:a6:09:07:e8:d7:c7:b6:48: 9d:2b:60:3c:5f:f3:e4:7c:0c:5d:dd:51:07:5a:6f: e7:05:b1:4d:f0:79:f5:6f:82:d8:0f:c8:03:4e:29: 3c:20:ca:6b:23:a0:0f:40:c8:7d:a2:4c:54:9c:58: 80:2b:e5:d4:4d:f3:27:16:f3:19:ff:e5:da:f0:e3: 68:7a:c4:76:3b:0d:d8:64:21:d5:ef:57:df:ae:d2: 4d:53:e1:32:a7:08:f4:d5:9a:0b:c4:a7:d2:6b:a5: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:38:10:A9:AC:9C:D3:74:98:A6:CB:B6:8E:61:BE:ED:11:B9:6D X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:70:5b:38:77:f0:e6:f6:16:35:82:d2:1e:28:96:55:7a:f7: 9c:22:2d:5f:a7:29:28:20:d4:88:b1:ba:61:91:4f:12:29:38: 81:84:b4:5f:02:99:bf:fd:94:4c:25:da:fb:da:30:34:d8:55: 10:16:16:be:0e:38:05:8e:8f:d3:30:cb:a2:7a:57:95:d5:71: bd:f0:8a:81:11:6a:c8:49:8f:02:cd:b3:c7:6c:0e:d4:5c:43: 89:60:06:16:b1:79:cb:bc:8a:bd:85:ab:02:a7:2a:1c:db:e0: 3e:de:1c:80:10:2b:ec:da:e2:91:83:42:8f:a0:0a:2e:7b:f7: 82:94:01:3b:de:e8:a6:d6:98:1d:f5:3a:fb:f1:3c:a0:a1:e0: 0d:a3:40:5e:6a:9a:3f:2d:e7:88:58:3f:f8:d5:5f:93:84:32: 53:0a:1c:cc:0f:f2:b1:f6:29:11:5f:77:18:94:cf:24:15:70: 0e:80:b5:a5:cb:13:78:d4:95:5c:38:0d:45:84:09:95:2a:12: 18:8a:15:a1:2f:6b:c8:5d:4d:d5:46:b3:91:10:8b:de:72:d2: 46:cf:2d:88:fe:25:63:43:f3:1a:a9:dd:1f:9f:6d:5b:76:eb: 1b:31:a7:e4:4c:a5:c2:1c:3a:c8:ad:e2:bc:2c:7d:a2:d6:43: 43:e1:f3:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjUwODI0MTYyMjQxWhcNMjUwODMxMTYyMjQxWjAYMRYwFAYD VQQDEw02OGFiM2M1Mi1kMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1Of5Ou++anmPjnykoT/C9JZkb3XdXhwC3BDMIia7cekhcAKYg+Oy5xGF1jl LGPHCtwL0OWDYJPYawqofnoYHiCbr6Ok0moOkLSfOnaQ5tXp0mzxV/6W/WoKXvu3 PrFh4yDSF7F4d+boXqv7I70uoXrEXSZPdqHvSW87OHyNckMPN0pmAUbLCm/TXMcA cF1fvUWhsyBflWcFPK6spgkH6NfHtkidK2A8X/PkfAxd3VEHWm/nBbFN8Hn1b4LY D8gDTik8IMprI6APQMh9okxUnFiAK+XUTfMnFvMZ/+Xa8ONoesR2Ow3YZCHV71ff rtJNU+Eypwj01ZoLxKfSa6VufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSqOBCp rJzTdJimy7aOYb7tEbltMB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqcFs4d/Dm9hY1gtIeKJZVevecIi1fpykoINSIsbphkU8SKTiBhLRf Apm//ZRMJdr72jA02FUQFha+DjgFjo/TMMuieleV1XG98IqBEWrISY8CzbPHbA7U XEOJYAYWsXnLvIq9hasCpyoc2+A+3hyAECvs2uKRg0KPoAoue/eClAE73uim1pgd 9Tr78TygoeANo0Beapo/LeeIWD/41V+ThDJTChzMD/Kx9ikRX3cYlM8kFXAOgLWl yxN41JVcOA1FhAmVKhIYihWhL2vIXU3VRrOREIvectJGzy2I/iVjQ/Maqd0fn21b dusbMafkTKXCHDrIreK8LH2i1kND4fP9 -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:52 2025 by rpki-client