$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json) Hash identifier: uUiJq3PgfZ1EoIsIH/t26/+vB9d2xNymq8ybT4XoiCk= Subject key identifier: 13:22:6B:BE:2A:BD:C0:8E:56:93:5F:F7:4B:B1:F4:57:14:D9:BA:AC Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft Manifest number: 0494 Signing time: Fri 05 Sep 2025 00:17:50 +0000 Manifest this update: Fri 05 Sep 2025 00:17:50 +0000 Manifest next update: Fri 12 Sep 2025 00:17:50 +0000 Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: ZI4W1QNic3MOTVABvrqhqrM4bTrbSLzpXyIRB8TSLJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Validity Not Before: Sep 5 00:17:50 2025 GMT Not After : Sep 12 00:17:50 2025 GMT Subject: CN=68ba2c2e-9828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:69:ad:8d:f5:ae:53:8e:2a:90:ce:e8:ae: 10:44:7e:3d:57:78:e2:fa:1b:54:fc:8d:eb:27:3a: d4:74:e0:d4:43:8e:ab:73:04:8b:c7:a2:e6:a5:09: bf:b8:54:93:4f:75:ec:ed:35:4b:ae:69:0f:fb:de: 39:87:1d:15:d1:19:15:83:73:0f:c2:12:3d:67:5a: 82:14:a5:6d:e8:ad:ae:f8:0b:91:7b:80:86:e1:a7: 37:8f:08:39:1d:4c:9a:48:f5:e5:fb:fd:ff:82:2e: 43:6d:98:17:a2:c7:81:4a:f9:d7:9d:a6:61:4a:cc: 54:ff:1f:9c:2f:3a:0d:a7:12:04:b6:b8:19:c9:db: 4d:7e:0e:ae:5b:08:06:6c:b8:0c:40:fe:1c:37:49: b8:e2:29:03:0b:55:d8:85:96:13:9d:fb:61:2e:b9: 0f:5d:d8:97:20:bb:3a:3e:b4:c6:ba:f8:28:3c:d7: ad:04:3b:10:64:8d:21:a0:79:71:f9:18:d8:9c:0f: 6d:d2:ac:7a:32:cb:99:95:f9:76:19:4f:c7:18:af: c2:f4:fd:d5:86:dd:10:55:af:89:fc:9e:4d:05:ad: 1e:ee:ed:06:48:b3:b2:6e:cb:37:75:37:06:2a:7a: 74:f0:2f:3e:69:d6:69:a0:a6:f2:b2:3c:94:24:e9: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:6B:BE:2A:BD:C0:8E:56:93:5F:F7:4B:B1:F4:57:14:D9:BA:AC X509v3 Authority Key Identifier: keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:52:39:7f:8c:9d:b0:89:ba:3c:2b:9e:42:52:9c:01:6d:03: 20:f0:62:db:d8:c7:3a:01:95:5b:67:7a:d6:b4:4f:44:2a:99: bf:a9:35:d6:21:77:cd:82:27:2e:2b:b9:de:e2:03:b0:10:a7: 8b:d0:b0:f7:15:64:eb:8b:91:14:72:14:22:c1:6a:09:5b:05: 94:74:7d:b4:f8:c8:f8:4e:67:bf:37:ed:4b:fa:bd:ec:c5:a6: 6f:7c:c8:77:22:31:b7:44:95:18:dc:18:d6:33:81:4e:9d:91: 3c:1c:15:77:a6:03:46:3d:3b:34:1c:eb:b3:9f:b1:f0:42:ba: 1c:3f:2c:5c:c8:83:39:70:ed:a9:8d:35:5e:3f:14:01:d4:71: cb:2c:fd:7b:b9:3d:fe:7f:69:a9:4f:f9:75:10:d5:d8:62:b6: cb:99:82:b8:07:7b:b9:3a:f2:77:6a:08:c4:9c:75:69:1f:2e: 78:5d:63:e0:e6:2e:31:ec:2b:a0:b5:3f:1f:36:0b:4a:fd:af: 44:1a:d8:34:4a:5b:69:e7:53:f0:5b:ad:d6:d1:42:24:c2:82: 41:12:54:9c:54:6e:49:c6:6f:c0:d4:e1:e9:bf:d2:10:17:c8: 10:8e:54:25:9b:b0:bc:81:2e:b7:72:83:91:47:ee:50:15:84: 58:89:e4:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy OEQ0NTNFRkMwHhcNMjUwOTA1MDAxNzUwWhcNMjUwOTEyMDAxNzUwWjAYMRYwFAYD VQQDEw02OGJhMmMyZS05ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXpprY31rlOOKpDO6K4QRH49V3ji+htU/I3rJzrUdODUQ46rcwSLx6LmpQm/ uFSTT3Xs7TVLrmkP+945hx0V0RkVg3MPwhI9Z1qCFKVt6K2u+AuRe4CG4ac3jwg5 HUyaSPXl+/3/gi5DbZgXoseBSvnXnaZhSsxU/x+cLzoNpxIEtrgZydtNfg6uWwgG bLgMQP4cN0m44ikDC1XYhZYTnfthLrkPXdiXILs6PrTGuvgoPNetBDsQZI0hoHlx +RjYnA9t0qx6MsuZlfl2GU/HGK/C9P3Vht0QVa+J/J5NBa0e7u0GSLOybss3dTcG Knp08C8+adZpoKbysjyUJOk+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMia74q vcCOVpNf90ux9FcU2bqsMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi bGZIa0hfdlM2OElvMUZQdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaUjl/jJ2wibo8K55CUpwBbQMg8GLb2Mc6AZVbZ3rWtE9EKpm/qTXW IXfNgicuK7ne4gOwEKeL0LD3FWTri5EUchQiwWoJWwWUdH20+Mj4Tme/N+1L+r3s xaZvfMh3IjG3RJUY3BjWM4FOnZE8HBV3pgNGPTs0HOuzn7HwQrocPyxcyIM5cO2p jTVePxQB1HHLLP17uT3+f2mpT/l1ENXYYrbLmYK4B3u5OvJ3agjEnHVpHy54XWPg 5i4x7CugtT8fNgtK/a9EGtg0Sltp51PwW63W0UIkwoJBElScVG5Jxm/A1OHpv9IQ F8gQjlQlm7C8gS63coORR+5QFYRYieSN -----END CERTIFICATE-----Generated at Sat Sep 6 22:52:50 2025 by rpki-client