$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: 97ctCjas9/0hXJMR2w71cRXc34MSh8xZ7KMf6iceZ50= Subject key identifier: FA:5A:98:C1:AF:93:C5:66:47:E8:A6:CB:63:8F:A0:0F:30:F6:1B:0B Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: 011D Signing time: Thu 21 Aug 2025 04:54:39 +0000 Manifest this update: Thu 21 Aug 2025 04:54:39 +0000 Manifest next update: Thu 28 Aug 2025 04:54:39 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: Vw09Yw//RTb6srvxAbeo+hx03zKFEy/NI+97i+OfNrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Aug 21 04:54:39 2025 GMT Not After : Aug 28 04:54:39 2025 GMT Subject: CN=68a6a68f-577a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:51:af:73:44:d7:0f:2c:99:e8:00:d5:1a:04: c6:48:9f:3b:60:13:c2:e4:6d:c8:89:1f:70:29:2e: 32:05:37:6c:a2:09:3b:f9:9b:de:86:f4:86:69:69: 22:11:07:37:2f:a5:47:82:3e:3a:e2:df:84:27:28: 5a:76:27:84:ee:af:83:e8:84:66:40:ba:91:42:7d: a7:2c:9a:ed:b2:13:2b:be:11:2e:6b:3c:82:dc:c5: d2:3c:b9:b8:f2:33:d3:f5:6c:4c:28:1d:7d:27:89: 99:db:f3:7f:41:42:1d:1c:c1:50:f3:a5:1e:f3:75: 86:4f:b9:fd:06:1f:a2:f8:d5:0f:86:74:3e:f8:9a: f8:9b:1d:9b:25:aa:0c:64:04:78:7c:ee:e5:70:c0: 10:37:c3:db:9c:e2:5e:c6:84:e0:6b:b9:c7:cb:fa: 9b:89:3f:72:b8:4d:e2:68:29:7c:76:40:9f:e0:4c: 08:cb:a7:50:91:9a:b8:da:07:34:bc:20:7e:23:52: 1b:04:4b:74:ee:9d:a0:d3:b0:f4:d6:8f:3c:af:61: c9:58:7a:fa:a0:43:f8:d1:14:a4:79:f9:0e:a8:0e: b3:14:4a:03:99:6d:c9:44:52:6f:3b:c5:59:a8:a9: f2:7e:ff:32:85:db:ff:e5:2d:e0:fe:68:fc:7f:7d: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:98:C1:AF:93:C5:66:47:E8:A6:CB:63:8F:A0:0F:30:F6:1B:0B X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c2:07:bb:34:55:2e:2c:2c:7b:82:42:0a:8a:b5:7c:2b:06: a9:4c:8d:c0:42:dd:56:ee:a0:f0:6f:f9:67:c3:f2:e4:ca:6f: 5a:d4:f0:39:ab:7e:5c:8b:d3:ed:1d:ba:f4:b9:ed:0e:d2:21: 39:0d:18:54:12:8d:54:b7:36:5b:60:fa:04:7e:1b:36:ea:32: 2a:77:34:da:2c:ce:d1:64:50:01:6b:94:41:1a:51:ca:60:f5: cc:46:9f:48:83:d3:bb:82:88:2b:2e:bb:cc:11:e3:1a:d5:6b: e8:78:7f:2a:ea:5b:46:00:9a:7a:f1:3c:57:04:b6:2e:a2:4b: 0f:67:87:7e:32:9a:df:4f:da:6f:80:10:63:58:14:b1:29:3e: b6:bc:88:61:f9:d5:a5:8f:5e:8e:58:c5:aa:66:65:6e:21:69: 9f:b9:8d:f2:90:70:d9:66:0f:48:96:b9:98:73:23:ba:bd:80: dc:1e:b4:c7:03:49:1a:4b:2c:95:25:0f:62:c9:1d:20:42:64: 06:80:aa:4e:79:2e:29:66:96:c1:64:ea:d9:13:19:39:ab:36: 29:b8:59:c0:80:f9:ae:fc:31:aa:29:01:38:fd:b6:29:7a:ae: f0:d4:0d:6f:55:45:c2:c5:55:6b:39:ef:44:59:e0:7e:6f:93: 66:f2:5b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwODIxMDQ1NDM5WhcNMjUwODI4MDQ1NDM5WjAYMRYwFAYD VQQDEw02OGE2YTY4Zi01NzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lGvc0TXDyyZ6ADVGgTGSJ87YBPC5G3IiR9wKS4yBTdsogk7+ZvehvSGaWki EQc3L6VHgj464t+EJyhadieE7q+D6IRmQLqRQn2nLJrtshMrvhEuazyC3MXSPLm4 8jPT9WxMKB19J4mZ2/N/QUIdHMFQ86Ue83WGT7n9Bh+i+NUPhnQ++Jr4mx2bJaoM ZAR4fO7lcMAQN8PbnOJexoTga7nHy/qbiT9yuE3iaCl8dkCf4EwIy6dQkZq42gc0 vCB+I1IbBEt07p2g07D01o88r2HJWHr6oEP40RSkefkOqA6zFEoDmW3JRFJvO8VZ qKnyfv8yhdv/5S3g/mj8f324CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpamMGv k8VmR+imy2OPoA8w9hsLMB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgwge7NFUuLCx7gkIKirV8KwapTI3AQt1W7qDwb/lnw/Lkym9a1PA5 q35ci9PtHbr0ue0O0iE5DRhUEo1UtzZbYPoEfhs26jIqdzTaLM7RZFABa5RBGlHK YPXMRp9Ig9O7gogrLrvMEeMa1WvoeH8q6ltGAJp68TxXBLYuoksPZ4d+MprfT9pv gBBjWBSxKT62vIhh+dWlj16OWMWqZmVuIWmfuY3ykHDZZg9IlrmYcyO6vYDcHrTH A0kaSyyVJQ9iyR0gQmQGgKpOeS4pZpbBZOrZExk5qzYpuFnAgPmu/DGqKQE4/bYp eq7w1A1vVUXCxVVrOe9EWeB+b5Nm8lss -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:12 2025 by rpki-client