$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: Z4YLNPIcHJpdvjX3OYnWE8GjJa+JmWs7pPORvDtfa8U= Subject key identifier: A0:61:ED:D2:A9:DB:CF:28:51:33:60:F3:35:BF:E5:39:C6:E7:61:8A Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 35 Signing time: Wed 03 Sep 2025 08:20:14 +0000 Manifest this update: Wed 03 Sep 2025 08:20:13 +0000 Manifest next update: Wed 10 Sep 2025 08:20:13 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: CHe7rmUvPMQMaZE+nabMMrrwoPjXSyoA9u/aUAxLLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Sep 3 08:20:13 2025 GMT Not After : Sep 10 08:20:13 2025 GMT Subject: CN=68b7fa3d-55ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:0c:28:24:04:94:74:41:87:c8:95:c2:03: 04:73:31:9c:f5:1e:41:29:1d:6d:57:84:81:d4:82: b4:be:77:3c:fd:ff:96:44:95:58:74:fb:18:99:c1: 2a:44:9a:59:85:4a:a9:65:7c:0f:63:29:f8:f4:2f: 58:d9:89:2f:e9:88:19:88:fe:34:e1:80:ac:b9:cc: cc:e8:81:7e:5a:57:09:c7:d4:8f:2b:73:6b:45:2d: 21:99:ee:c9:b8:44:f9:25:1a:6a:6f:af:b6:2d:c4: 31:a4:1f:a8:1e:3f:dc:71:24:99:28:28:04:db:9c: c3:92:59:1d:0e:58:ee:13:6a:ad:ce:56:2a:0a:5b: 60:b8:9d:f7:fd:83:a3:13:28:36:55:ba:a9:f2:dd: cc:26:a3:a6:04:96:7a:36:9e:50:3b:61:d4:5d:e2: 55:30:e4:cb:3c:35:52:96:e7:1f:21:df:79:75:6e: 31:a7:5a:ac:75:41:7d:11:df:a8:c3:6b:45:09:4e: 6a:fd:69:5e:cb:56:ac:4f:71:cf:c9:24:85:e7:c6: be:81:54:d7:25:ad:34:e0:0c:10:07:5d:5e:aa:00: 52:6c:cc:9d:71:df:f5:54:63:6c:4e:72:c7:6d:30: 53:6a:38:0d:6b:f9:09:a1:44:69:e8:4c:db:43:1a: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:ED:D2:A9:DB:CF:28:51:33:60:F3:35:BF:E5:39:C6:E7:61:8A X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4d:9f:63:0d:75:92:d0:1a:dd:1a:a5:75:3a:4f:c8:2d:00: 79:37:4a:65:a4:2a:9c:38:76:70:2f:81:e8:3a:f3:1c:90:a9: d5:9f:2f:86:81:bd:d6:3a:48:b9:6b:31:d9:86:10:44:1f:c1: 5d:54:71:fd:9d:ee:99:66:4d:23:6d:d6:dd:8c:62:de:e5:d6: 5e:0e:10:d8:85:2d:a4:30:61:66:07:c2:40:60:9e:e0:7d:7a: 39:ad:83:ca:d3:55:91:f5:ab:60:0e:33:1f:dc:33:55:8b:c0: 5c:17:b7:f5:88:9d:ea:76:19:8e:3a:54:c9:66:b7:04:28:04: 7c:2c:b3:85:8f:82:40:82:34:85:f4:03:d8:78:3e:f4:6c:d1: e6:6c:89:90:52:2c:90:ee:81:18:40:41:f5:81:47:81:4e:ed: 5c:19:21:92:9d:09:73:b1:75:10:8f:13:70:ca:2d:c7:ad:ee: 5b:a1:07:a1:ac:04:5d:48:9e:45:2e:8c:55:65:7d:9e:64:a2: 91:77:ca:64:f7:b8:f4:9a:62:96:2e:5e:44:9a:66:40:1c:b2: 70:c7:65:24:06:4c:02:a5:ee:46:c6:e7:e6:97:da:91:b0:07: c5:ac:37:57:25:fe:34:fa:00:7f:49:7c:9c:ba:79:b4:57:84: 27:04:ef:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTA5MDMwODIwMTNaFw0yNTA5MTAwODIwMTNaMBgxFjAUBgNV BAMTDTY4YjdmYTNkLTU1ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxvgwoJASUdEGHyJXCAwRzMZz1HkEpHW1XhIHUgrS+dzz9/5ZElVh0+xiZwSpE mlmFSqllfA9jKfj0L1jZiS/piBmI/jThgKy5zMzogX5aVwnH1I8rc2tFLSGZ7sm4 RPklGmpvr7YtxDGkH6geP9xxJJkoKATbnMOSWR0OWO4Taq3OVioKW2C4nff9g6MT KDZVuqny3cwmo6YElno2nlA7YdRd4lUw5Ms8NVKW5x8h33l1bjGnWqx1QX0R36jD a0UJTmr9aV7LVqxPcc/JJIXnxr6BVNclrTTgDBAHXV6qAFJszJ1x3/VUY2xOcsdt MFNqOA1r+QmhRGnoTNtDGmMbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoGHt0qnb zyhRM2DzNb/lOcbnYYowHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBNn2MNdZLQGt0apXU6T8gtAHk3SmWkKpw4dnAvgeg68xyQqdWfL4aB vdY6SLlrMdmGEEQfwV1Ucf2d7plmTSNt1t2MYt7l1l4OENiFLaQwYWYHwkBgnuB9 ejmtg8rTVZH1q2AOMx/cM1WLwFwXt/WInep2GY46VMlmtwQoBHwss4WPgkCCNIX0 A9h4PvRs0eZsiZBSLJDugRhAQfWBR4FO7VwZIZKdCXOxdRCPE3DKLcet7luhB6Gs BF1InkUujFVlfZ5kopF3ymT3uPSaYpYuXkSaZkAcsnDHZSQGTAKl7kbG5+aX2pGw B8WsN1cl/jT6AH9JfJy6ebRXhCcE74s= -----END CERTIFICATE-----Generated at Thu Sep 4 15:52:55 2025 by rpki-client