$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: MXX0vr7lSbmnBKpbIu/C++LJKuC1r0+1QMuLf20Qcxw= Subject key identifier: F4:AD:BF:E7:9B:81:A6:43:AA:AE:46:39:CA:76:82:DE:91:EB:2A:6B Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01A4 Signing time: Sat 19 Jul 2025 01:31:53 +0000 Manifest this update: Sat 19 Jul 2025 01:31:53 +0000 Manifest next update: Sat 26 Jul 2025 01:31:53 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: OHKi6Cdq3r/A7MnmfkPh08+aRIQYLOkzeg66Gz9FwE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Jul 19 01:31:53 2025 GMT Not After : Jul 26 01:31:53 2025 GMT Subject: CN=687af589-1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:a3:ea:a0:f8:a7:2b:42:aa:78:55:6f:28: 75:32:5a:1c:bf:29:37:aa:1c:6e:82:ee:5b:ae:18: f8:0a:42:cb:d7:62:69:d6:68:0f:71:0a:47:3d:6f: f3:00:4a:f8:14:3b:49:5f:bd:28:61:b4:cc:02:07: ce:5b:31:01:c1:b8:42:5e:3d:da:e2:dc:5d:7c:44: 0f:37:60:8e:52:9a:3d:14:c5:c3:42:64:78:47:34: 17:4e:75:a0:de:cc:b2:d0:0f:0d:2d:16:0a:04:a8: 57:7d:79:25:c5:bb:02:8c:f3:d1:11:46:b5:61:52: cb:1e:4e:11:87:1c:66:ab:53:dd:f9:60:de:83:ae: bc:2f:22:8e:ce:17:7e:7e:81:47:26:80:ea:cf:0f: 61:c2:72:58:c4:8a:5e:4b:25:89:bf:f9:6d:23:84: 55:ae:d0:aa:8c:3a:0c:c2:07:ea:8c:fa:67:db:92: 7a:57:d7:31:ee:47:f5:1d:79:f4:f9:24:81:50:cb: 6e:fe:7f:1c:01:aa:18:b7:00:b4:fd:30:01:86:e0: c4:fc:b2:a2:be:42:73:2d:6d:56:47:80:08:d3:7f: 44:89:50:ad:ac:97:d8:86:25:60:aa:a6:bb:5e:74: 4d:05:41:43:f6:12:42:e9:14:eb:82:76:fd:3f:9f: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AD:BF:E7:9B:81:A6:43:AA:AE:46:39:CA:76:82:DE:91:EB:2A:6B X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:01:d5:48:86:29:4d:f6:5f:5b:c3:5f:26:da:e5:99:7b:f9: 8f:26:c9:31:64:c4:be:87:b4:69:b6:84:a5:da:b0:5e:ce:9e: b3:d7:6d:3c:da:d4:6f:ea:93:6f:2a:a1:9d:2d:71:31:72:57: 90:fb:9a:fb:61:dc:24:e6:db:84:ec:93:7f:6f:71:36:cf:5a: 46:99:2c:05:4e:1d:39:08:71:3b:03:7f:12:b6:3e:f0:d5:b3: 02:08:45:3d:0c:d6:9f:21:a8:ec:c8:f6:e1:59:d2:e7:06:3e: 4c:d7:bb:89:2f:18:2b:f9:c0:8e:2c:3b:4b:ea:21:14:89:64: 2a:0b:9c:9f:4f:9f:6a:89:91:59:2d:6e:a3:90:25:ed:7f:73: 46:d7:92:82:fb:e2:02:2e:20:15:cd:f3:19:05:78:1f:ba:43: 71:64:46:b7:75:3c:9e:a6:08:16:39:34:ed:48:05:7c:e4:fc: b7:ae:3c:4e:38:cd:82:dc:ca:c6:2a:a7:96:9c:1d:d5:db:dd: e3:95:26:e2:f3:3c:21:dd:00:3a:6f:86:45:ee:2a:21:68:c4: 09:2a:3d:63:76:87:7a:fe:b4:3d:74:5e:97:94:61:15:e1:38: 92:72:a8:56:5b:23:e7:42:c7:47:b7:82:5a:68:91:92:92:68: 2f:ba:f8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUwNzE5MDEzMTUzWhcNMjUwNzI2MDEzMTUzWjAYMRYwFAYD VQQDEw02ODdhZjU4OS0xODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjij6qD4pytCqnhVbyh1Mlocvyk3qhxugu5brhj4CkLL12Jp1mgPcQpHPW/z AEr4FDtJX70oYbTMAgfOWzEBwbhCXj3a4txdfEQPN2COUpo9FMXDQmR4RzQXTnWg 3syy0A8NLRYKBKhXfXklxbsCjPPREUa1YVLLHk4Rhxxmq1Pd+WDeg668LyKOzhd+ foFHJoDqzw9hwnJYxIpeSyWJv/ltI4RVrtCqjDoMwgfqjPpn25J6V9cx7kf1HXn0 +SSBUMtu/n8cAaoYtwC0/TABhuDE/LKivkJzLW1WR4AI039EiVCtrJfYhiVgqqa7 XnRNBUFD9hJC6RTrgnb9P5+fZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPStv+eb gaZDqq5GOcp2gt6R6yprMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2AdVIhilN9l9bw18m2uWZe/mPJskxZMS+h7RptoSl2rBezp6z1208 2tRv6pNvKqGdLXExcleQ+5r7Ydwk5tuE7JN/b3E2z1pGmSwFTh05CHE7A38Stj7w 1bMCCEU9DNafIajsyPbhWdLnBj5M17uJLxgr+cCOLDtL6iEUiWQqC5yfT59qiZFZ LW6jkCXtf3NG15KC++ICLiAVzfMZBXgfukNxZEa3dTyepggWOTTtSAV85Py3rjxO OM2C3MrGKqeWnB3V293jlSbi8zwh3QA6b4ZF7iohaMQJKj1jdod6/rQ9dF6XlGEV 4TiScqhWWyPnQsdHt4JaaJGSkmgvuvjD -----END CERTIFICATE-----Generated at Mon Jul 21 00:27:10 2025 by rpki-client