$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: q3wlvYQckcCoHKwPEyWOOtehGp+IyQIMP4qI/HPBRpo= Subject key identifier: 9E:B9:B3:72:09:9B:C5:16:CC:DF:8D:D1:F1:2C:C0:F5:53:16:DE:21 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 12A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 4763 Signing time: Sun 20 Jul 2025 14:21:22 +0000 Manifest this update: Sun 20 Jul 2025 14:21:21 +0000 Manifest next update: Sun 27 Jul 2025 14:21:21 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: POX3qoPkb21AOnhZWhwlNiX3p90YpXCDdL/CfDUWr7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4776 (0x12a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Jul 20 14:21:21 2025 GMT Not After : Jul 27 14:21:21 2025 GMT Subject: CN=687cfb61-2d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:b2:43:c9:1e:3c:23:ca:49:fb:08:73:9a: 10:92:db:34:03:0a:f8:d1:9d:6f:87:2c:95:3b:2f: 13:ce:98:9e:64:67:c3:74:fe:ca:c8:66:bf:4f:db: 67:44:c9:f3:af:a8:ef:40:09:a0:ac:c0:df:6c:cc: 91:c6:e8:bc:45:57:f5:e6:35:d5:d0:8d:e5:e0:12: d8:f5:1e:6c:0e:8b:e6:00:9e:8e:99:ac:56:e3:b6: e5:be:a5:e3:c6:37:d6:2c:cd:7f:b6:92:49:26:49: d1:69:13:d4:07:67:f4:51:5a:3e:4f:80:e6:8c:46: 02:06:75:85:aa:4d:c3:72:c3:e2:9c:01:4d:b2:37: 53:a4:1c:c2:66:ab:93:a7:80:16:bb:f5:d9:58:95: 71:02:e1:b3:5b:d1:98:b6:79:8a:51:3b:7d:50:3f: 19:dd:8f:29:fe:06:0e:a9:62:d1:15:ea:63:19:b5: 5b:76:f2:93:f4:27:c1:36:f2:c0:14:7f:97:87:02: 0d:47:c0:48:a6:82:86:67:1c:b1:5f:dd:72:6c:3d: e0:1c:93:5a:62:00:93:3e:a6:8a:b4:ce:6a:5d:c8: 58:3d:b2:ae:7c:3e:23:71:5b:5c:d0:20:3f:c4:fa: 03:a0:47:f7:61:fe:b5:55:e4:87:7f:1e:d4:40:d1: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B9:B3:72:09:9B:C5:16:CC:DF:8D:D1:F1:2C:C0:F5:53:16:DE:21 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a4:9a:87:77:f8:7a:12:d1:35:91:05:48:89:4f:ac:eb:8b: 3b:d9:20:8d:46:be:aa:50:43:97:41:07:d9:f1:bc:bb:b9:bc: 37:9d:47:2c:25:28:9d:27:e5:16:4b:06:98:1a:33:92:d9:3d: 34:74:37:7c:fa:52:1c:93:14:eb:9a:10:ab:a5:c5:0d:3a:92: a3:15:86:c8:7f:00:4e:07:14:fd:d3:3c:bf:b8:fa:82:77:ee: 2a:94:1b:70:7b:1b:b8:99:7f:b3:a0:e2:42:15:d5:cf:05:b4: fd:3e:d6:68:d6:5c:38:06:9c:eb:eb:fe:d0:6e:f0:a9:85:3c: 64:6a:ac:23:f1:38:bd:76:f3:f1:45:29:aa:4a:a8:7f:b5:c1: 25:dd:76:9c:17:e2:4b:b7:e0:d0:8d:0a:37:ea:e4:c4:b8:54: eb:20:eb:d8:5d:5c:91:46:bd:67:2f:1a:ba:fd:11:0c:37:49: 9c:76:09:6e:68:d7:46:22:63:33:ca:d3:9d:e6:79:6e:09:2f: 10:88:89:35:24:fd:58:45:48:f2:b0:c6:49:d0:26:93:6a:c7: 4b:55:0f:a1:ff:9c:36:3a:c2:39:75:3f:8a:2b:7d:d8:f7:3e: 3a:0e:08:61:d8:49:6e:7e:55:09:4c:49:49:ef:87:83:0f:e1: 2a:87:88:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwNzIwMTQyMTIxWhcNMjUwNzI3MTQyMTIxWjAYMRYwFAYD VQQDEw02ODdjZmI2MS0yZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTqyQ8kePCPKSfsIc5oQkts0Awr40Z1vhyyVOy8TzpieZGfDdP7KyGa/T9tn RMnzr6jvQAmgrMDfbMyRxui8RVf15jXV0I3l4BLY9R5sDovmAJ6OmaxW47blvqXj xjfWLM1/tpJJJknRaRPUB2f0UVo+T4DmjEYCBnWFqk3DcsPinAFNsjdTpBzCZquT p4AWu/XZWJVxAuGzW9GYtnmKUTt9UD8Z3Y8p/gYOqWLRFepjGbVbdvKT9CfBNvLA FH+XhwINR8BIpoKGZxyxX91ybD3gHJNaYgCTPqaKtM5qXchYPbKufD4jcVtc0CA/ xPoDoEf3Yf61VeSHfx7UQNHcSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ65s3IJ m8UWzN+N0fEswPVTFt4hMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAApJqHd/h6EtE1kQVIiU+s64s72SCNRr6qUEOXQQfZ8by7ubw3nUcs JSidJ+UWSwaYGjOS2T00dDd8+lIckxTrmhCrpcUNOpKjFYbIfwBOBxT90zy/uPqC d+4qlBtwexu4mX+zoOJCFdXPBbT9PtZo1lw4Bpzr6/7QbvCphTxkaqwj8Ti9dvPx RSmqSqh/tcEl3XacF+JLt+DQjQo36uTEuFTrIOvYXVyRRr1nLxq6/REMN0mcdglu aNdGImMzytOd5nluCS8QiIk1JP1YRUjysMZJ0CaTasdLVQ+h/5w2OsI5dT+KK33Y 9z46Dghh2EluflUJTElJ74eDD+Eqh4hj -----END CERTIFICATE-----Generated at Sun Jul 20 20:37:47 2025 by rpki-client