$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: D9VmtrLph2TB1isDQcsg5OaULYl8oMmi7qaxYs/fdeg= Subject key identifier: 15:4A:4E:8F:51:67:E7:64:09:65:CC:51:F5:52:17:76:67:9A:01:88 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 34B1 Signing time: Sun 24 Aug 2025 14:38:50 +0000 Manifest this update: Sun 24 Aug 2025 14:38:49 +0000 Manifest next update: Sun 31 Aug 2025 14:38:49 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: vskNJST5iwJ+INnExP4OCa9HIqjg99WFhFdPF9+fVFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Aug 24 14:38:49 2025 GMT Not After : Aug 31 14:38:49 2025 GMT Subject: CN=68ab23f9-9b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:67:50:3d:7a:55:52:3c:93:85:d8:8e:fc: b8:64:4d:c5:d0:d0:dd:99:51:58:bf:d4:34:f3:69: 7d:71:1d:62:c6:2e:b9:e9:aa:98:48:b1:8b:2e:63: 85:2f:44:0b:a4:b4:ec:5b:9d:ff:31:4c:d0:18:e0: e8:e7:20:98:89:99:17:76:c0:27:cf:c3:b6:ec:a8: 25:2d:d8:40:97:31:9a:ed:6d:81:39:ed:7c:2a:6d: 65:7d:63:b4:3e:90:67:09:1a:a6:47:d1:74:1a:d0: 94:ea:2d:65:36:08:ce:b9:99:c7:80:e3:bf:25:07: 9a:fb:2c:3d:2c:09:26:0c:a0:13:b7:1a:ad:7c:3d: 28:a0:c8:88:64:4f:66:e6:ee:12:de:d7:d7:e8:04: 0f:27:69:cc:c4:79:c5:5f:6b:7d:a1:10:c2:ed:d7: 7c:bb:70:9b:f4:3a:bb:4d:e4:6f:aa:79:00:fd:00: f8:fc:cf:77:6c:d0:cc:29:d4:e2:07:e7:4a:c5:7f: 08:b7:ec:fd:5d:47:5e:70:a9:3f:6d:c0:62:28:8f: fb:e6:d9:d7:84:16:62:14:80:97:c6:d4:df:56:c2: ef:4e:c1:3c:84:5b:b2:54:3d:c2:bc:e8:ad:94:ac: fe:d2:28:cc:71:b1:82:83:88:ce:78:2e:f7:95:57: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:4E:8F:51:67:E7:64:09:65:CC:51:F5:52:17:76:67:9A:01:88 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b9:de:21:77:73:e3:86:d3:40:fe:1d:7c:87:b1:86:bf:21: 40:4a:73:e0:75:a2:42:67:8a:d7:7a:f9:0d:f8:7c:06:e5:9d: 72:13:d9:55:af:46:c7:37:51:82:01:57:56:9a:73:b4:4a:98: 52:0b:74:64:0d:4c:ac:3c:06:45:f8:95:b1:15:83:d9:e0:ca: da:21:de:f8:84:45:82:3f:1b:68:9d:9d:00:df:4a:59:e9:9e: 6e:e5:23:79:15:4d:c0:17:52:21:96:a2:e2:fe:a1:58:85:b7: d7:19:a0:d9:6d:66:8a:c2:75:96:8f:c4:9b:d9:2b:34:dd:9f: 7b:2c:f1:db:7d:e4:3b:81:2d:81:3d:e0:0b:46:f7:e2:c4:24: 1c:9a:5d:eb:63:1f:2d:ac:e0:fe:b7:cb:00:fc:8f:82:e6:5a: 05:b4:8c:28:d0:9e:f5:c5:a8:37:7c:7e:87:9e:24:02:fa:34: 4e:32:f4:1f:68:a1:28:6b:c0:fd:fa:6c:bf:ec:9c:79:45:a4: 95:92:02:a7:91:28:ab:95:f2:b8:77:92:56:da:90:64:26:6a: ba:7e:71:81:5b:c3:61:67:7d:9f:8e:2c:38:11:30:33:a9:2d: cf:44:dc:2f:c3:b5:79:ab:65:14:0c:83:49:00:25:8c:a2:31: 98:8e:af:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwODI0MTQzODQ5WhcNMjUwODMxMTQzODQ5WjAYMRYwFAYD VQQDEw02OGFiMjNmOS05Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4dnUD16VVI8k4XYjvy4ZE3F0NDdmVFYv9Q082l9cR1ixi656aqYSLGLLmOF L0QLpLTsW53/MUzQGODo5yCYiZkXdsAnz8O27KglLdhAlzGa7W2BOe18Km1lfWO0 PpBnCRqmR9F0GtCU6i1lNgjOuZnHgOO/JQea+yw9LAkmDKATtxqtfD0ooMiIZE9m 5u4S3tfX6AQPJ2nMxHnFX2t9oRDC7dd8u3Cb9Dq7TeRvqnkA/QD4/M93bNDMKdTi B+dKxX8It+z9XUdecKk/bcBiKI/75tnXhBZiFICXxtTfVsLvTsE8hFuyVD3CvOit lKz+0ijMcbGCg4jOeC73lVflvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVKTo9R Z+dkCWXMUfVSF3ZnmgGIMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPud4hd3PjhtNA/h18h7GGvyFASnPgdaJCZ4rXevkN+HwG5Z1yE9lV r0bHN1GCAVdWmnO0SphSC3RkDUysPAZF+JWxFYPZ4MraId74hEWCPxtonZ0A30pZ 6Z5u5SN5FU3AF1IhlqLi/qFYhbfXGaDZbWaKwnWWj8Sb2Ss03Z97LPHbfeQ7gS2B PeALRvfixCQcml3rYx8trOD+t8sA/I+C5loFtIwo0J71xag3fH6HniQC+jROMvQf aKEoa8D9+my/7Jx5RaSVkgKnkSirlfK4d5JW2pBkJmq6fnGBW8NhZ32fjiw4ETAz qS3PRNwvw7V5q2UUDINJACWMojGYjq+5 -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:03 2025 by rpki-client