$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: GnUYkYteJrOK0J/7bToBt1HreuDzclzKBY5vt7dylXk= Subject key identifier: DE:DD:4B:3B:56:0E:A9:B0:CD:BA:4B:E6:A6:A0:1F:D0:C6:FF:AD:61 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 068F Signing time: Wed 20 Aug 2025 22:19:37 +0000 Manifest this update: Wed 20 Aug 2025 22:19:36 +0000 Manifest next update: Wed 27 Aug 2025 22:19:36 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: /M7Z0Kvg0HT8ywQyjy+xT2Mnotl2ouqTFsp5ikbRKWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Aug 20 22:19:36 2025 GMT Not After : Aug 27 22:19:36 2025 GMT Subject: CN=68a649f8-1506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:3d:df:e4:ba:78:55:cf:33:93:5d:70:cb: be:02:22:4d:31:e4:72:bb:f0:0f:c0:07:55:69:77: be:a6:09:c9:b5:93:68:ed:fc:a8:f6:cb:13:d4:5a: 6d:00:b4:7a:df:71:1e:4c:a5:e9:5b:7e:5a:7e:99: d6:c9:1a:8f:19:20:c2:b9:64:3e:75:91:75:dc:bf: dd:61:26:58:40:ad:7e:ea:9d:a2:39:14:e2:7c:21: 9e:fb:e2:c3:40:65:9f:ab:f7:be:ec:5c:e6:ba:69: ef:a2:5a:31:b1:6a:0e:9d:8e:14:79:b9:72:9c:ff: 9c:f6:37:8b:0d:c5:cb:1b:03:95:73:67:de:3e:9d: 2d:26:e1:14:87:c8:24:1d:92:1c:98:c7:44:b1:3e: 20:bd:82:4a:92:b6:fb:4c:a4:df:7d:b1:3f:60:50: 19:6c:96:09:ae:63:73:59:0e:13:f1:5f:47:f4:2c: dc:52:90:77:c1:40:a3:c2:25:96:56:9c:8d:28:24: 54:b2:c6:c1:63:3a:67:14:79:1e:94:30:be:1c:a7: 46:f6:48:b4:6a:66:db:b6:0e:2f:05:56:67:d8:23: a3:76:1a:11:b7:49:6e:42:1a:03:05:eb:dd:17:e6: 8e:9d:27:37:af:be:da:4a:c6:19:35:c9:1c:78:8b: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:4B:3B:56:0E:A9:B0:CD:BA:4B:E6:A6:A0:1F:D0:C6:FF:AD:61 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4a:f8:36:6f:af:36:9e:e6:2f:b6:da:f8:6c:f2:ca:de:78: 23:7b:9c:8b:ba:de:4f:35:9e:d0:20:ff:45:14:f0:24:a6:83: 2f:fb:9a:87:79:9d:b9:ce:da:bd:a0:f4:b3:be:b1:88:c9:dd: 85:e8:77:c7:3b:1b:07:8a:a0:c3:2d:2f:ad:a8:fb:90:96:45: 30:c4:16:e2:2c:fd:55:da:4e:bb:1d:4a:71:77:83:b5:e6:4c: 7f:e5:ab:57:a2:9a:bf:cf:03:15:10:b6:f2:52:c4:a1:be:0a: 82:42:9d:f7:a8:13:1e:d6:d6:ca:2d:77:b4:1f:a8:03:2c:a1: 11:f0:8e:28:42:99:dc:d6:f4:31:1c:d1:f3:96:fd:55:93:db: 1a:47:cf:24:b8:0d:c0:a5:7f:4f:6b:86:03:d9:0b:af:85:75: 70:50:c9:c7:1e:81:4d:be:a2:5a:a4:9e:0d:46:a7:fc:0e:5e: 1a:ed:90:8e:f2:72:12:85:68:b9:6f:58:a1:78:30:a1:47:e1: 4b:e8:77:15:92:ea:a9:18:6c:44:f8:ca:df:fd:c9:3e:9b:03: d7:1e:1f:b0:b3:f1:16:05:fc:c2:36:a5:f5:6f:1c:18:e7:ed: 23:93:d4:05:e1:cb:37:fd:b3:91:2a:21:54:5f:55:98:49:15: c3:40:e5:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUwODIwMjIxOTM2WhcNMjUwODI3MjIxOTM2WjAYMRYwFAYD VQQDEw02OGE2NDlmOC0xNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytA93+S6eFXPM5NdcMu+AiJNMeRyu/APwAdVaXe+pgnJtZNo7fyo9ssT1Fpt ALR633EeTKXpW35afpnWyRqPGSDCuWQ+dZF13L/dYSZYQK1+6p2iORTifCGe++LD QGWfq/e+7FzmumnvoloxsWoOnY4UeblynP+c9jeLDcXLGwOVc2fePp0tJuEUh8gk HZIcmMdEsT4gvYJKkrb7TKTffbE/YFAZbJYJrmNzWQ4T8V9H9CzcUpB3wUCjwiWW VpyNKCRUssbBYzpnFHkelDC+HKdG9ki0ambbtg4vBVZn2COjdhoRt0luQhoDBevd F+aOnSc3r77aSsYZNckceItuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7dSztW DqmwzbpL5qagH9DG/61hMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvSvg2b682nuYvttr4bPLK3ngje5yLut5PNZ7QIP9FFPAkpoMv+5qH eZ25ztq9oPSzvrGIyd2F6HfHOxsHiqDDLS+tqPuQlkUwxBbiLP1V2k67HUpxd4O1 5kx/5atXopq/zwMVELbyUsShvgqCQp33qBMe1tbKLXe0H6gDLKER8I4oQpnc1vQx HNHzlv1Vk9saR88kuA3ApX9Pa4YD2QuvhXVwUMnHHoFNvqJapJ4NRqf8Dl4a7ZCO 8nIShWi5b1iheDChR+FL6HcVkuqpGGxE+Mrf/ck+mwPXHh+ws/EWBfzCNqX1bxwY 5+0jk9QF4cs3/bORKiFUX1WYSRXDQOW8 -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:58 2025 by rpki-client