$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: vKtIk5STJF64MLosObBwli7vC99r4tRMJHEL2xB5deg= Subject key identifier: 9E:4D:39:A4:2B:6F:12:54:76:FE:5A:40:B5:FA:8B:47:B0:25:7A:1A Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 024F Signing time: Fri 05 Sep 2025 05:03:20 +0000 Manifest this update: Fri 05 Sep 2025 05:03:19 +0000 Manifest next update: Fri 12 Sep 2025 05:03:19 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: c1W9sGR0kknGba2oFUlVn8tw+uvBoX7tKfBgJW8qZMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Sep 5 05:03:19 2025 GMT Not After : Sep 12 05:03:19 2025 GMT Subject: CN=68ba6f18-a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:dd:51:05:b5:c3:15:50:2e:db:34:b0:4b: fa:07:4c:6c:7b:46:d3:ee:38:d6:ab:e3:23:2f:cb: 9e:f3:ff:ff:5a:e3:9a:41:59:58:f5:6e:b6:54:8f: c3:c6:e5:f3:c8:41:f1:17:d3:d0:53:4f:5c:28:ab: 5e:84:f7:57:af:ba:24:9f:b4:e8:0d:19:28:56:1a: 9b:aa:7c:ae:a5:de:f2:33:63:05:d1:dd:36:67:b8: e5:ef:9c:6c:e4:b4:41:97:55:65:9b:24:d7:59:48: 81:f9:eb:76:9a:f3:ff:cb:f6:9a:8a:9e:54:86:ba: 91:cf:aa:5a:b5:ac:ac:a4:cd:6d:01:39:fd:b4:20: 9d:a6:3c:0e:f9:db:ff:47:eb:42:2f:51:f1:b7:3d: ad:f0:f3:b7:a4:25:9d:7c:c8:54:48:0a:66:b3:17: 8b:c9:ca:fb:83:81:f1:f7:3e:6b:34:3a:bb:48:95: e0:3c:f8:0d:28:df:82:b0:a0:11:9f:fd:6c:e5:87: 34:33:7a:5a:97:25:6b:f2:5e:1a:5c:2a:b3:99:21: 66:ff:fd:00:98:42:f6:59:d8:d2:9d:e7:0a:60:4e: ac:7b:cd:5c:d2:00:38:c9:ef:5c:a7:1e:fa:ba:f8: 95:34:1c:6f:9f:f3:43:8d:70:7b:a9:e9:0a:87:96: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4D:39:A4:2B:6F:12:54:76:FE:5A:40:B5:FA:8B:47:B0:25:7A:1A X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ef:b0:88:a2:3c:44:2a:02:db:9d:70:a3:b5:4a:86:77:e8: 81:36:09:13:36:e2:99:0e:e1:24:e2:6a:11:7e:95:1e:de:a1: 79:b1:98:e6:ef:56:06:79:d8:e6:c1:40:af:f9:6f:72:e8:c1: 21:e9:e3:11:f9:c1:77:4e:a4:f5:80:fd:cc:e3:d7:d7:b7:17: d6:0b:c3:1b:0f:22:e3:b4:db:f9:68:00:2c:4f:fe:40:c3:80: 03:67:66:53:db:d9:15:37:96:0e:e4:2b:4d:1c:62:9e:5a:f3: 6d:2d:de:98:a7:be:d2:54:c7:89:63:69:3a:ec:89:a5:f9:5c: af:52:ee:c2:05:99:2b:f8:b9:f5:62:30:f1:6c:96:86:77:f7: 5d:af:8c:c2:14:db:aa:c2:c1:1a:2d:46:8b:60:7a:84:3b:a3: 59:13:74:c7:62:7c:ac:f3:3b:bc:09:e7:d9:0d:53:00:f8:f5: 0a:0d:06:44:66:27:2f:44:c4:65:53:3f:02:21:4b:37:69:47: 80:96:ae:3e:34:be:84:9d:05:52:67:dd:21:5a:ec:65:05:70: 98:bb:c4:7c:89:d8:c7:cd:7e:60:bc:3c:4c:f2:0b:42:0c:f1: f9:02:b5:a8:06:5e:c1:ae:36:2e:c4:59:7e:2e:e7:ca:56:40: 1a:e3:7b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjUwOTA1MDUwMzE5WhcNMjUwOTEyMDUwMzE5WjAYMRYwFAYD VQQDEw02OGJhNmYxOC1hMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj7dUQW1wxVQLts0sEv6B0xse0bT7jjWq+MjL8ue8///WuOaQVlY9W62VI/D xuXzyEHxF9PQU09cKKtehPdXr7okn7ToDRkoVhqbqnyupd7yM2MF0d02Z7jl75xs 5LRBl1VlmyTXWUiB+et2mvP/y/aaip5UhrqRz6patayspM1tATn9tCCdpjwO+dv/ R+tCL1Hxtz2t8PO3pCWdfMhUSApmsxeLycr7g4Hx9z5rNDq7SJXgPPgNKN+CsKAR n/1s5Yc0M3palyVr8l4aXCqzmSFm//0AmEL2WdjSnecKYE6se81c0gA4ye9cpx76 uviVNBxvn/NDjXB7qekKh5b6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5NOaQr bxJUdv5aQLX6i0ewJXoaMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw77CIojxEKgLbnXCjtUqGd+iBNgkTNuKZDuEk4moRfpUe3qF5sZjm 71YGedjmwUCv+W9y6MEh6eMR+cF3TqT1gP3M49fXtxfWC8MbDyLjtNv5aAAsT/5A w4ADZ2ZT29kVN5YO5CtNHGKeWvNtLd6Yp77SVMeJY2k67Iml+VyvUu7CBZkr+Ln1 YjDxbJaGd/ddr4zCFNuqwsEaLUaLYHqEO6NZE3THYnys8zu8CefZDVMA+PUKDQZE ZicvRMRlUz8CIUs3aUeAlq4+NL6EnQVSZ90hWuxlBXCYu8R8idjHzX5gvDxM8gtC DPH5ArWoBl7BrjYuxFl+LufKVkAa43u4 -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:09 2025 by rpki-client