$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: Y+7G+mhLFxt+HFtiQzR7FYgve55SKtatbEYaRayxf+o= Subject key identifier: 48:B3:3D:86:80:F7:44:35:31:2D:53:BD:85:C8:22:58:56:B9:8E:A6 Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 34AF Signing time: Sun 24 Aug 2025 14:35:19 +0000 Manifest this update: Sun 24 Aug 2025 14:35:19 +0000 Manifest next update: Sun 31 Aug 2025 14:35:19 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: n6gS2zbYCdN/fREJnUSuA1FvQqqqL/X6rWRVsx85+Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: Aug 24 14:35:19 2025 GMT Not After : Aug 31 14:35:19 2025 GMT Subject: CN=68ab2327-3e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:38:d1:f4:8a:83:a7:c1:05:1c:6f:57:85: c4:ec:9d:3d:3d:66:cb:d5:67:1e:3a:d3:41:d4:59: 2c:80:dd:d6:32:df:f5:82:bd:5b:25:00:11:9d:7a: cd:9a:89:2e:6e:24:7f:2b:55:44:48:99:b3:1f:f9: bf:6b:a2:98:5f:0d:e3:11:66:f1:82:f8:f7:f6:3f: 44:6b:60:c6:00:04:5a:0a:b4:50:7f:0e:35:f7:54: 9f:31:d9:21:57:d1:68:24:ad:28:ee:42:70:ed:b8: 7b:90:1c:f4:5e:35:0a:c3:42:d9:81:cc:b3:cc:6a: 33:3d:4e:ae:36:bb:41:ef:58:a2:ff:ef:6a:5a:a7: 4d:69:e2:d0:13:29:ec:7d:1b:46:be:e4:05:e8:ff: 9e:13:01:9f:7c:80:5e:f9:22:5e:35:85:54:bc:07: bd:96:5e:aa:b9:38:3b:cd:4b:d7:6a:0b:0f:b5:ec: d8:5a:84:38:18:72:47:a1:23:a0:4f:22:db:23:39: c6:28:7c:a9:4d:db:1c:38:7e:d0:f7:1a:bc:24:81: c9:4b:b5:bf:09:62:8a:62:83:10:2a:96:3d:c3:d2: d5:6a:c7:dc:cb:59:2e:92:94:08:5e:a8:d4:8a:af: 33:75:4c:30:ed:84:81:dc:3f:87:40:e4:b8:71:88: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B3:3D:86:80:F7:44:35:31:2D:53:BD:85:C8:22:58:56:B9:8E:A6 X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:2e:58:c2:09:c2:44:73:67:a1:3b:26:71:ab:a2:82:cf:19: a6:c6:0c:1d:e4:25:12:2c:82:ec:1a:c6:52:7e:1f:a6:23:3f: 3a:39:d6:d0:b5:4a:b9:1c:c1:67:96:72:1a:db:74:b4:2e:f4: 85:c7:5a:42:8f:ef:e8:50:fe:a8:d8:45:37:8c:8c:f7:bc:25: e7:e3:eb:3a:7b:0f:fc:31:a5:52:9e:38:ee:21:6f:de:7d:7a: 62:f4:6f:65:d8:5a:67:39:f6:69:0a:29:d2:fc:ce:57:61:cb: 91:1d:5c:ad:73:a8:ca:d2:e1:bb:bd:79:c2:98:30:14:82:41: e3:48:de:99:90:22:91:07:f2:41:ce:a8:a6:63:fc:a2:07:72: a1:1d:b7:64:ce:ef:ad:9d:66:a9:b6:f8:5e:76:f3:19:6f:f8: 10:16:4c:3a:b2:6d:a3:8e:63:57:51:17:2e:15:1e:5e:fa:e4: 82:bb:2d:6a:4a:a5:9c:88:14:4f:69:d8:b8:5c:e9:82:d3:66: 35:2f:3b:ab:6c:9a:76:b0:91:78:39:cd:29:82:66:da:f9:d3: a6:d8:d0:d7:27:c5:4f:3f:bb:77:a8:86:1d:86:ad:24:ce:b3: 3f:56:38:56:c4:d3:67:80:b3:be:1e:1c:03:1e:b9:97:43:58: 36:e7:e6:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjUwODI0MTQzNTE5WhcNMjUwODMxMTQzNTE5WjAYMRYwFAYD VQQDEw02OGFiMjMyNy0zZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uI40fSKg6fBBRxvV4XE7J09PWbL1WceOtNB1FksgN3WMt/1gr1bJQARnXrN mokubiR/K1VESJmzH/m/a6KYXw3jEWbxgvj39j9Ea2DGAARaCrRQfw4191SfMdkh V9FoJK0o7kJw7bh7kBz0XjUKw0LZgcyzzGozPU6uNrtB71ii/+9qWqdNaeLQEyns fRtGvuQF6P+eEwGffIBe+SJeNYVUvAe9ll6quTg7zUvXagsPtezYWoQ4GHJHoSOg TyLbIznGKHypTdscOH7Q9xq8JIHJS7W/CWKKYoMQKpY9w9LVasfcy1kukpQIXqjU iq8zdUww7YSB3D+HQOS4cYiwmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEizPYaA 90Q1MS1TvYXIIlhWuY6mMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmLljCCcJEc2ehOyZxq6KCzxmmxgwd5CUSLILsGsZSfh+mIz86OdbQ tUq5HMFnlnIa23S0LvSFx1pCj+/oUP6o2EU3jIz3vCXn4+s6ew/8MaVSnjjuIW/e fXpi9G9l2FpnOfZpCinS/M5XYcuRHVytc6jK0uG7vXnCmDAUgkHjSN6ZkCKRB/JB zqimY/yiB3KhHbdkzu+tnWaptvhedvMZb/gQFkw6sm2jjmNXURcuFR5e+uSCuy1q SqWciBRPadi4XOmC02Y1LzurbJp2sJF4Oc0pgmba+dOm2NDXJ8VPP7t3qIYdhq0k zrM/VjhWxNNngLO+HhwDHrmXQ1g25+ZR -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:08 2025 by rpki-client