$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: lIoqn8KO8Yal3LHW+x7du0AnVwzv/ZYFKeptcgAC3tc= Subject key identifier: 4E:C6:BB:5D:F2:E0:11:EF:C2:EE:6A:44:03:71:B0:52:9B:07:13:15 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 84 Signing time: Fri 19 Sep 2025 07:19:09 +0000 Manifest this update: Fri 19 Sep 2025 07:19:08 +0000 Manifest next update: Fri 26 Sep 2025 07:19:08 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: cjvZlpEbWgvHu3ZTAbNRiwlHqsH+MCqDhYdpZEIbAR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Sep 19 07:19:08 2025 GMT Not After : Sep 26 07:19:08 2025 GMT Subject: CN=68cd03ed-93e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:04:54:03:f9:e2:d7:90:dc:15:6e:67:51: c1:c9:c5:3a:58:79:f0:48:5d:12:27:cb:f1:dd:86: 11:9f:39:7a:5c:3f:10:2f:07:b8:a2:07:ff:03:19: b0:7f:aa:1b:cb:7d:11:35:ab:97:be:e0:82:c8:be: a9:d6:77:02:72:4a:ad:b4:0b:8a:6f:5f:b7:ac:dd: 83:f8:79:c5:e0:e4:8f:74:ab:49:b5:84:ca:aa:62: 6e:91:c4:08:05:30:14:4e:62:fd:0a:bf:e8:7b:56: ec:65:39:ae:a8:38:4f:59:ba:8c:df:d3:40:4c:e3: ff:67:03:9c:50:12:bf:53:63:8b:9f:1e:3f:1e:78: 39:d5:32:65:52:dd:23:08:66:12:0c:dd:0a:3b:bc: ad:ea:40:ce:56:5f:73:07:4f:57:a0:e1:b9:4a:2b: 59:ff:bb:76:03:1d:ad:20:71:58:87:1e:c7:d2:cd: 03:7a:bc:a9:3a:21:48:01:64:5c:7b:ca:b1:be:4d: a3:b4:0e:92:00:41:49:cb:32:86:3d:2b:e2:70:25: 9b:63:6e:a5:4d:4f:a8:e9:6f:f0:92:d1:f5:e6:36: eb:4e:19:d8:bc:fa:9b:58:b0:3c:c0:e9:fa:86:68: bd:4b:5f:35:1b:db:c2:59:18:e4:c3:6e:f8:a7:fd: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C6:BB:5D:F2:E0:11:EF:C2:EE:6A:44:03:71:B0:52:9B:07:13:15 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:bd:6c:45:46:ae:e8:4f:b6:35:89:96:5d:1e:c5:a5:c6:e5: b8:29:c1:79:92:00:a6:44:59:da:7d:5d:4c:fa:03:62:31:b4: ab:e9:4d:4d:4b:bc:02:5e:80:18:3c:82:ef:4a:70:c8:31:86: 48:78:da:69:fe:ba:a9:e0:1e:46:c2:4a:2e:44:da:38:ea:e5: 9a:39:18:39:06:ba:4b:3f:64:4f:83:60:9d:23:fe:af:1c:1c: 96:22:c0:d2:ca:0b:ec:42:24:70:0f:6c:68:40:bb:db:84:9d: 3a:8f:90:f1:43:59:af:05:e3:b2:5c:9b:f4:cf:f4:ff:fd:e5: f2:58:73:47:9e:46:e0:09:fa:0c:cb:62:df:fe:a5:e7:01:87: cf:ec:ca:09:2f:08:2d:53:c1:b5:1e:a6:30:94:64:84:c7:cb: 62:9e:81:28:36:87:b6:25:6e:d1:1f:0a:97:0a:83:d0:57:86: 9e:a1:ce:f1:c9:6d:66:56:24:e8:a7:43:71:09:d2:69:65:59: 69:f3:54:46:5b:a0:13:3f:01:3e:fe:04:46:01:ad:af:48:82: 91:9c:22:91:5b:f6:81:9b:80:7e:31:fb:44:fd:50:34:20:45: c6:3f:e2:ea:ad:c9:d4:3b:d7:bd:f6:92:78:f4:de:0d:0b:ff: a3:eb:96:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjUwOTE5MDcxOTA4WhcNMjUwOTI2MDcxOTA4WjAYMRYwFAYD VQQDEw02OGNkMDNlZC05M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxoEVAP54teQ3BVuZ1HBycU6WHnwSF0SJ8vx3YYRnzl6XD8QLwe4ogf/Axmw f6oby30RNauXvuCCyL6p1ncCckqttAuKb1+3rN2D+HnF4OSPdKtJtYTKqmJukcQI BTAUTmL9Cr/oe1bsZTmuqDhPWbqM39NATOP/ZwOcUBK/U2OLnx4/Hng51TJlUt0j CGYSDN0KO7yt6kDOVl9zB09XoOG5SitZ/7t2Ax2tIHFYhx7H0s0DerypOiFIAWRc e8qxvk2jtA6SAEFJyzKGPSvicCWbY26lTU+o6W/wktH15jbrThnYvPqbWLA8wOn6 hmi9S181G9vCWRjkw274p/1cPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7Gu13y 4BHvwu5qRANxsFKbBxMVMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHvWxFRq7oT7Y1iZZdHsWlxuW4KcF5kgCmRFnafV1M+gNiMbSr6U1N S7wCXoAYPILvSnDIMYZIeNpp/rqp4B5GwkouRNo46uWaORg5BrpLP2RPg2CdI/6v HByWIsDSygvsQiRwD2xoQLvbhJ06j5DxQ1mvBeOyXJv0z/T//eXyWHNHnkbgCfoM y2Lf/qXnAYfP7MoJLwgtU8G1HqYwlGSEx8tinoEoNoe2JW7RHwqXCoPQV4aeoc7x yW1mViTop0NxCdJpZVlp81RGW6ATPwE+/gRGAa2vSIKRnCKRW/aBm4B+MftE/VA0 IEXGP+LqrcnUO9e99pJ49N4NC/+j65YM -----END CERTIFICATE-----Generated at Sat Sep 20 09:05:00 2025 by rpki-client