$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: 6WoyCz4Ti/0d9hOxf6OkiJbqoh/C7Xp/1Jfkv0jxb4Y= Subject key identifier: BE:2B:9B:25:84:75:BF:F8:91:03:AC:D4:FE:55:7F:1C:8D:B6:C4:BC Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 09BB Signing time: Sun 24 Aug 2025 20:35:44 +0000 Manifest this update: Sun 24 Aug 2025 20:35:44 +0000 Manifest next update: Sun 31 Aug 2025 20:35:44 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: MAsiRi7J+0chruHQ21bWZb/Dofv2zUmge+q/n8ltRws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Aug 24 20:35:44 2025 GMT Not After : Aug 31 20:35:44 2025 GMT Subject: CN=68ab77a0-3d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:75:1e:77:c5:35:24:ea:6d:99:97:a4:ac: f7:f8:f3:d8:93:89:b1:45:6e:df:c0:dd:b4:2a:01: 25:1d:6b:bf:3e:b6:00:1c:87:f1:72:48:52:6b:a8: 3a:79:de:93:bf:5e:1d:aa:1d:1b:ea:d5:d9:e5:36: 2c:e3:8b:3f:71:48:e2:6f:d1:74:0d:ee:0a:e6:e7: e7:ec:19:95:ca:e3:e8:7c:13:63:c7:d0:1c:6a:0a: 34:f4:59:c9:ee:50:5c:ba:45:cb:79:0e:2d:46:d7: 65:3c:07:36:69:e2:b3:02:25:29:24:ea:54:ae:d7: 29:ea:a2:5f:bc:d2:82:c0:9d:79:4e:e9:e7:f7:ab: 86:a0:b4:3b:4e:14:ba:96:88:e3:3e:0a:2c:58:7e: 8e:c9:0b:16:e9:7e:c1:76:4f:96:55:4c:5c:5e:49: e8:eb:0d:44:c8:09:75:e4:4e:f4:ed:29:88:89:2d: ea:e6:07:c3:37:15:30:60:d5:05:53:95:a4:d3:a5: 13:d2:d9:73:1d:01:59:c9:a0:95:d8:55:e8:92:63: c3:6e:76:bc:d7:bd:22:43:1a:1a:24:57:7d:a8:e4: 53:e7:8a:5f:32:68:e0:aa:1b:7a:bb:f9:2a:bf:9c: 72:12:53:ff:16:85:f8:4c:5c:ec:ee:c3:0c:73:c3: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2B:9B:25:84:75:BF:F8:91:03:AC:D4:FE:55:7F:1C:8D:B6:C4:BC X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:09:d9:c4:90:2c:49:e8:97:73:ac:eb:15:01:e8:90:5a:58: 7c:f5:fb:56:54:bc:b9:4b:92:f8:cf:eb:ae:09:4a:e3:e3:9a: ac:91:a0:ec:e5:ca:43:3c:4d:66:64:ca:6c:b0:7d:72:5f:f4: f1:a8:5a:5c:11:25:bb:ee:31:7d:cc:a8:f1:1e:1f:c6:e9:4a: 66:41:a6:6d:79:1f:be:dd:95:33:7a:00:46:11:03:e5:04:21: 84:12:75:2a:be:08:96:52:75:0a:c6:a5:bc:a3:3a:7c:3f:e6: b6:05:89:48:f2:25:5d:74:10:f2:1b:fa:a9:f4:40:4e:43:3b: 81:a6:97:45:0d:1b:07:51:b9:23:47:1b:99:1f:6f:bc:b6:c1: ff:84:ea:cd:06:cb:6e:22:15:61:e7:83:00:61:e2:bd:e7:67: db:10:33:21:cb:63:28:6a:e8:8f:0f:b6:d8:46:13:df:38:6f: 59:0f:bb:cf:29:cb:1c:87:0f:f9:3d:33:28:9e:14:ae:8b:2e: 6e:a1:e6:a0:af:f8:30:ac:c9:22:22:a4:4c:28:47:cf:17:17: 94:36:65:df:d6:3d:24:0f:37:96:cc:5e:be:fd:b4:e0:b1:00: 4f:6e:d0:d3:ce:65:c2:34:ef:34:dc:04:c8:b5:32:7d:ca:59: 7a:5e:0b:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwODI0MjAzNTQ0WhcNMjUwODMxMjAzNTQ0WjAYMRYwFAYD VQQDEw02OGFiNzdhMC0zZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9t1HnfFNSTqbZmXpKz3+PPYk4mxRW7fwN20KgElHWu/PrYAHIfxckhSa6g6 ed6Tv14dqh0b6tXZ5TYs44s/cUjib9F0De4K5ufn7BmVyuPofBNjx9Acago09FnJ 7lBcukXLeQ4tRtdlPAc2aeKzAiUpJOpUrtcp6qJfvNKCwJ15Tunn96uGoLQ7ThS6 lojjPgosWH6OyQsW6X7Bdk+WVUxcXkno6w1EyAl15E707SmIiS3q5gfDNxUwYNUF U5Wk06UT0tlzHQFZyaCV2FXokmPDbna8170iQxoaJFd9qORT54pfMmjgqht6u/kq v5xyElP/FoX4TFzs7sMMc8ObIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4rmyWE db/4kQOs1P5VfxyNtsS8MB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVCdnEkCxJ6JdzrOsVAeiQWlh89ftWVLy5S5L4z+uuCUrj45qskaDs 5cpDPE1mZMpssH1yX/TxqFpcESW77jF9zKjxHh/G6UpmQaZteR++3ZUzegBGEQPl BCGEEnUqvgiWUnUKxqW8ozp8P+a2BYlI8iVddBDyG/qp9EBOQzuBppdFDRsHUbkj RxuZH2+8tsH/hOrNBstuIhVh54MAYeK952fbEDMhy2MoauiPD7bYRhPfOG9ZD7vP Kcschw/5PTMonhSuiy5uoeagr/gwrMkiIqRMKEfPFxeUNmXf1j0kDzeWzF6+/bTg sQBPbtDTzmXCNO803ATItTJ9yll6XgvW -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:59 2025 by rpki-client