$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: f/lYH/QDwR2JMzTfOOoP1mbsFo4aYzLDOtK/Gb2tlyw= Subject key identifier: D9:10:D8:60:D9:C1:A9:63:01:79:9D:47:5B:20:78:F6:D2:AC:02:E3 Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 03BA Signing time: Thu 21 Aug 2025 00:49:59 +0000 Manifest this update: Thu 21 Aug 2025 00:49:58 +0000 Manifest next update: Thu 28 Aug 2025 00:49:58 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: juMVEF9IqoCdUJcGlxOZYkmTn5UaYYbMnXbqCUdn0CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: Aug 21 00:49:58 2025 GMT Not After : Aug 28 00:49:58 2025 GMT Subject: CN=68a66d36-8217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:9f:73:d6:2b:c5:d4:85:9d:a2:85:57:84: 19:f5:dc:68:63:97:18:1b:19:f2:c2:7f:f9:bd:9d: b2:5d:2f:ee:a4:60:77:1d:ef:78:db:a5:ce:be:80: 39:7a:8e:39:b4:68:07:22:6f:ae:0f:58:fe:ab:d8: 51:53:73:aa:6a:d1:fc:66:27:a0:d7:8e:43:b2:4a: eb:56:a3:33:21:ea:1c:7e:c7:5e:a0:d6:34:11:0f: 81:e8:7b:d4:32:bf:22:32:cd:da:ec:ff:d6:70:41: 56:31:aa:4b:35:da:87:78:6b:50:c2:58:d1:e3:15: dc:1e:46:87:0b:f2:bd:c8:08:72:dc:2f:47:ea:ad: 40:27:f5:22:c7:d2:4d:74:8b:b9:df:b1:63:9b:64: b0:ac:fc:47:31:fa:d1:fb:5b:1f:e1:91:a3:32:ff: 36:ce:70:49:a3:8a:46:c5:e1:9f:b1:49:58:d7:2e: 70:bb:0f:35:38:95:57:76:6e:09:08:22:35:14:ce: e5:b7:a2:96:e7:3a:f9:d5:8c:55:d5:b9:84:53:c1: 2e:8a:21:aa:6d:41:06:72:21:4f:f2:fa:00:5b:0a: 52:71:74:cf:ee:15:d7:51:c9:d2:4a:32:d9:8b:2d: 9f:e7:68:63:03:7e:57:b1:1b:26:10:b6:b4:21:76: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:10:D8:60:D9:C1:A9:63:01:79:9D:47:5B:20:78:F6:D2:AC:02:E3 X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:7f:9e:4e:c3:ca:9c:95:68:cc:a3:ac:8c:3b:8d:80:75: b7:84:0d:5f:21:89:c7:da:35:cb:b2:f1:49:67:43:77:76:4e: 2c:7e:d9:a9:29:f4:8c:18:49:ef:e3:93:6c:23:0b:b2:b5:9d: fa:6e:20:95:65:86:d4:a4:31:cd:a8:58:89:52:5f:d4:da:4c: 16:0a:67:ab:3e:cf:cb:39:a7:0a:90:1e:05:e7:f9:d6:69:e3: e6:c2:43:7c:03:27:7a:09:c8:06:11:c0:3a:0d:8d:06:84:10: bf:91:50:ad:74:76:a7:91:d1:15:cc:9b:5e:eb:51:bf:d7:b2: ec:8e:a4:07:74:54:37:84:3c:02:75:84:6f:cf:8b:26:56:ba: 97:d8:78:4e:f5:2b:0d:37:c3:f1:82:45:ac:27:ce:51:13:b1: 8b:ec:ee:87:53:50:97:a9:67:76:7b:e5:97:0b:e8:4c:41:40: df:47:d5:58:4f:18:c3:ea:01:e9:e0:b5:e2:a4:a8:28:69:5d: b5:3a:1d:3a:6c:4c:4b:2c:11:f1:2f:6f:57:2b:6d:b4:6b:a4: 9a:a1:4e:c9:c5:5f:b5:97:ec:6f:54:35:59:ca:c0:ba:50:0d: 13:d9:b1:5b:0d:95:09:73:96:39:09:ee:d5:07:91:5b:61:2c: 83:59:f5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjUwODIxMDA0OTU4WhcNMjUwODI4MDA0OTU4WjAYMRYwFAYD VQQDEw02OGE2NmQzNi04MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+2fc9YrxdSFnaKFV4QZ9dxoY5cYGxnywn/5vZ2yXS/upGB3He9426XOvoA5 eo45tGgHIm+uD1j+q9hRU3OqatH8Zieg145DskrrVqMzIeocfsdeoNY0EQ+B6HvU Mr8iMs3a7P/WcEFWMapLNdqHeGtQwljR4xXcHkaHC/K9yAhy3C9H6q1AJ/Uix9JN dIu537Fjm2SwrPxHMfrR+1sf4ZGjMv82znBJo4pGxeGfsUlY1y5wuw81OJVXdm4J CCI1FM7lt6KW5zr51YxV1bmEU8EuiiGqbUEGciFP8voAWwpScXTP7hXXUcnSSjLZ iy2f52hjA35XsRsmELa0IXZInwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkQ2GDZ waljAXmdR1sgePbSrALjMB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNb3+eTsPKnJVozKOsjDuNgHW3hA1fIYnH2jXLsvFJZ0N3dk4sftmp KfSMGEnv45NsIwuytZ36biCVZYbUpDHNqFiJUl/U2kwWCmerPs/LOacKkB4F5/nW aePmwkN8Ayd6CcgGEcA6DY0GhBC/kVCtdHankdEVzJte61G/17LsjqQHdFQ3hDwC dYRvz4smVrqX2HhO9SsNN8PxgkWsJ85RE7GL7O6HU1CXqWd2e+WXC+hMQUDfR9VY TxjD6gHp4LXipKgoaV21Oh06bExLLBHxL29XK220a6SaoU7JxV+1l+xvVDVZysC6 UA0T2bFbDZUJc5Y5Ce7VB5FbYSyDWfUI -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:47 2025 by rpki-client