$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json) Hash identifier: mG3k9Z0C/xcK+CutnVKiJnE+cF31fmyCxNgrivb6HqY= Subject key identifier: DF:A1:6A:6A:78:18:1B:20:72:E9:B0:7B:2A:0D:50:74:12:88:C6:96 Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft Manifest number: 99 Signing time: Fri 19 Sep 2025 07:03:35 +0000 Manifest this update: Fri 19 Sep 2025 07:03:34 +0000 Manifest next update: Fri 26 Sep 2025 07:03:34 +0000 Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: KGcmrZETIN7t7R9lRezNNdHvPSFeEVp5yCzGFRQa/z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Validity Not Before: Sep 19 07:03:34 2025 GMT Not After : Sep 26 07:03:34 2025 GMT Subject: CN=68cd0047-d2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:d2:50:31:bf:8f:d9:d5:17:7c:3e:a5:25: 9b:68:e7:fb:6e:e9:c6:83:e9:90:40:c1:2e:0e:43: 43:93:4c:ec:4d:be:d1:e9:ae:f5:ea:a1:a6:25:f6: 7b:a8:3e:9e:e8:ac:53:5e:60:c7:b2:96:24:ee:b6: 0d:1a:16:1d:63:c8:9a:71:22:24:64:b2:fb:8a:b4: ad:d5:e7:80:5a:3c:b1:e6:30:67:c8:08:64:cd:a4: 69:83:d4:4d:84:38:97:d1:5e:dc:7d:d7:ef:df:48: 74:4e:e8:4b:97:ff:80:d0:fe:6b:09:c0:cc:22:88: 17:8f:0c:dd:ea:73:69:09:e9:19:fa:57:14:ca:4d: 73:7e:ea:64:aa:93:23:23:a6:b6:5a:bc:47:86:d8: 80:c6:b5:22:0b:dd:8a:c7:d2:58:14:7a:a7:bb:9c: 08:a9:a0:95:3d:e3:78:cb:36:bc:fa:21:45:59:4b: ea:0e:ca:27:88:2a:1e:96:a7:d3:4e:fd:7e:d8:c6: aa:f1:53:5b:7d:39:f8:20:c4:d8:15:a4:85:b8:de: 75:ae:ed:3a:c6:c1:5d:e3:6f:c3:68:84:32:fe:a9: b0:66:22:18:1a:a6:15:5d:89:a5:85:4e:6a:4e:20: 3c:3e:e5:13:4f:89:ac:42:71:88:9b:88:32:02:7d: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A1:6A:6A:78:18:1B:20:72:E9:B0:7B:2A:0D:50:74:12:88:C6:96 X509v3 Authority Key Identifier: keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:38:af:3d:60:01:35:ef:73:34:f0:85:e4:11:fe:36:a3:5b: b5:09:42:41:a9:35:4a:57:4e:37:8c:3d:cd:2f:1b:02:28:eb: f3:72:e4:23:e0:c9:c0:81:ef:25:17:29:11:f8:6e:00:68:00: 28:6e:7d:7f:11:69:4c:a0:74:ac:60:70:78:0c:e1:40:c5:d6: 02:ba:fc:62:32:22:91:9e:5d:c6:8f:e1:6a:4f:ca:5a:af:19: bd:5e:da:59:dc:5b:d3:5a:b8:b5:b1:46:4f:70:9f:be:cb:86: 5d:56:dd:a8:7b:ca:d9:22:ce:df:b8:ce:f9:12:17:9f:76:cf: 7e:07:2f:59:51:e2:ef:3e:d9:33:e1:b7:21:86:ae:9a:2b:02: c1:95:5f:48:f1:42:01:c0:14:70:c6:50:13:c5:a0:07:0b:91: c0:ec:2e:3d:4d:66:9f:26:0e:1e:84:fe:d2:69:53:ea:6a:c2: 69:70:bc:04:63:e2:ec:16:6b:9a:4f:90:e8:e8:2f:9a:c1:f7: ae:b6:44:56:be:58:e4:96:e0:57:96:7e:72:37:88:5c:09:e0: 58:a0:eb:ed:f2:51:d2:ab:ad:d5:d2:1a:fb:7e:14:30:6b:f1: 0d:f1:c2:03:71:04:16:5a:aa:06:57:14:60:b9:62:d5:94:c5: 0c:94:f7:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFDNzMxMTAvBgNVBAUTKEVCODk4N0M1MjBBRkVDREMyNEY0MUM4NkZDNkJBREQz QzE2RkE2MkEwHhcNMjUwOTE5MDcwMzM0WhcNMjUwOTI2MDcwMzM0WjAYMRYwFAYD VQQDEw02OGNkMDA0Ny1kMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V3SUDG/j9nVF3w+pSWbaOf7bunGg+mQQMEuDkNDk0zsTb7R6a716qGmJfZ7 qD6e6KxTXmDHspYk7rYNGhYdY8iacSIkZLL7irSt1eeAWjyx5jBnyAhkzaRpg9RN hDiX0V7cfdfv30h0TuhLl/+A0P5rCcDMIogXjwzd6nNpCekZ+lcUyk1zfupkqpMj I6a2WrxHhtiAxrUiC92Kx9JYFHqnu5wIqaCVPeN4yza8+iFFWUvqDsoniCoelqfT Tv1+2Maq8VNbfTn4IMTYFaSFuN51ru06xsFd42/DaIQy/qmwZiIYGqYVXYmlhU5q TiA8PuUTT4msQnGIm4gyAn0DXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+hamp4 GBsgcumweyoNUHQSiMaWMB8GA1UdIwQYMBaAFOuJh8Ugr+zcJPQchvxrrdPBb6Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM3My9DNDkxQkE0RUFD MEQxMUVGOTg3OTkyNkVDNEY5QUUwMi82NG1IeFNDdjdOd2s5QnlHX0d1dDA4RnZw aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0bUh4U0N2N053azlCeUdfR3V0MDhGdnBpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUM3My9DNDkxQkE0RUFDMEQxMUVGOTg3OTkyNkVDNEY5QUUwMi82NG1IeFNDdjdO d2s5QnlHX0d1dDA4RnZwaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/OK89YAE173M08IXkEf42o1u1CUJBqTVKV043jD3NLxsCKOvzcuQj 4MnAge8lFykR+G4AaAAobn1/EWlMoHSsYHB4DOFAxdYCuvxiMiKRnl3Gj+FqT8pa rxm9XtpZ3FvTWri1sUZPcJ++y4ZdVt2oe8rZIs7fuM75Ehefds9+By9ZUeLvPtkz 4bchhq6aKwLBlV9I8UIBwBRwxlATxaAHC5HA7C49TWafJg4ehP7SaVPqasJpcLwE Y+LsFmuaT5Do6C+awfeutkRWvljkluBXln5yN4hcCeBYoOvt8lHSq63V0hr7fhQw a/EN8cIDcQQWWqoGVxRguWLVlMUMlPc8 -----END CERTIFICATE-----Generated at Fri Sep 19 09:08:12 2025 by rpki-client