$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json) Hash identifier: czhcRs3lVRRw1B6kGvl+8IIDXOXPxWvp0WEnDjlxH24= Subject key identifier: 76:25:41:D9:42:44:A9:69:75:CD:F1:16:73:39:DC:E2:04:CE:FA:BD Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft Manifest number: 34B0 Signing time: Fri 22 Aug 2025 15:04:00 +0000 Manifest this update: Fri 22 Aug 2025 15:04:00 +0000 Manifest next update: Fri 29 Aug 2025 15:04:00 +0000 Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: TLREumTs84sabQ1eyTROpOARuEH+/P0/Sihfr1aBVAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111EE2, serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Validity Not Before: Aug 22 15:04:00 2025 GMT Not After : Aug 29 15:04:00 2025 GMT Subject: CN=68a886e0-68e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:10:2f:99:44:6f:62:c7:c3:70:f8:a0:5f: 11:b6:8f:12:2b:a8:cc:75:7c:47:4f:f2:e1:b4:f1: 82:ab:8f:fc:b6:40:4b:f7:a3:7c:ba:cf:ef:63:10: 02:f2:b9:be:bc:c8:e4:9f:30:67:b4:cf:72:bf:20: 37:01:f8:19:60:3a:57:4c:78:a6:34:d3:c8:a2:b7: b9:30:ee:a0:84:48:9f:f8:2f:8c:ba:0b:78:44:d3: 8f:7c:fc:90:62:6a:ee:0f:de:04:b0:dd:b5:12:f9: 1f:37:2f:82:47:cf:06:ff:76:bf:cf:72:bf:f6:ad: 36:fe:ed:47:2c:40:44:e7:4a:7a:eb:ed:0e:a6:62: bb:49:72:d0:db:0a:79:30:02:a1:22:2d:56:ac:87: 19:2f:31:18:38:88:2f:54:52:6a:60:16:49:5c:f5: 53:3f:d3:c6:62:90:ad:b0:81:f5:e7:52:55:89:58: b4:e9:dc:0a:cd:2a:f3:ca:0e:1d:a1:f1:1d:1b:9c: 7c:db:8b:e5:7f:fe:72:c4:55:08:11:e0:13:3f:11: 6e:2d:0b:ed:99:2a:b8:48:d6:b9:9d:10:b8:40:03: a9:6a:5c:42:96:2b:a4:8d:ef:ba:ce:a7:2b:cb:59: ff:54:bf:a5:a6:db:fa:76:51:c0:e7:a6:5f:be:70: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:41:D9:42:44:A9:69:75:CD:F1:16:73:39:DC:E2:04:CE:FA:BD X509v3 Authority Key Identifier: keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:08:f5:f1:69:f4:0f:48:14:67:d1:d3:68:7f:92:40:d0:98: 27:3e:1a:5d:d2:97:26:73:86:77:31:65:37:0c:af:fd:8d:af: 65:ed:80:4e:30:bd:9d:06:74:1f:4f:c2:6a:50:0d:26:be:ba: ca:7f:c1:72:b1:6c:65:94:fb:92:c4:d6:fd:11:54:0b:39:0a: 28:2d:e8:d5:3d:b2:bf:27:de:c0:a8:39:3c:4c:93:ab:30:48: 4a:fe:68:dd:73:7f:8d:4f:66:9e:f5:b4:6b:a0:33:11:87:58: a2:dc:9c:b5:55:a0:3a:5e:97:69:37:ef:fc:94:e8:63:d7:d2: 6f:2f:23:57:07:79:5a:b3:ea:f7:5d:b2:b6:36:bb:54:4a:04: fa:3f:aa:51:cb:4c:87:92:63:b4:36:1b:1d:b0:a6:1c:b2:37: b8:58:88:6a:9e:a4:db:6b:f2:85:ec:08:02:f1:19:e5:61:b0: 81:20:21:48:3e:dc:87:8b:6d:2a:41:50:8d:f9:b0:48:96:4c: 98:87:9f:b8:f1:d0:ef:21:c4:81:b0:12:c0:c7:36:be:5d:17: e6:c6:d7:f2:aa:88:a3:6c:de:96:ba:2a:59:38:82:b8:c1:50: e0:d4:2d:42:cc:0f:72:7f:e2:c6:f7:47:ea:4f:00:94:ee:dc: 6e:cd:23:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRTIxMTAvBgNVBAUTKDJGRUM0NEFGQzMzMURGOEE1QTYzQTJGNTg0MUU4MDlE OTdCMkY3RDAwHhcNMjUwODIyMTUwNDAwWhcNMjUwODI5MTUwNDAwWjAYMRYwFAYD VQQDEw02OGE4ODZlMC02OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd0QL5lEb2LHw3D4oF8Rto8SK6jMdXxHT/LhtPGCq4/8tkBL96N8us/vYxAC 8rm+vMjknzBntM9yvyA3AfgZYDpXTHimNNPIore5MO6ghEif+C+Mugt4RNOPfPyQ YmruD94EsN21EvkfNy+CR88G/3a/z3K/9q02/u1HLEBE50p66+0OpmK7SXLQ2wp5 MAKhIi1WrIcZLzEYOIgvVFJqYBZJXPVTP9PGYpCtsIH151JViVi06dwKzSrzyg4d ofEdG5x824vlf/5yxFUIEeATPxFuLQvtmSq4SNa5nRC4QAOpalxCliukje+6zqcr y1n/VL+lptv6dlHA56ZfvnD+rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYlQdlC RKlpdc3xFnM53OIEzvq9MB8GA1UdIwQYMBaAFC/sRK/DMd+KWmOi9YQegJ2XsvfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVFMi80MjBGNjMwQTFE OUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0cGFZNkwxaEI2QW5aZXk5 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wteEVyOE14MzRwYVk2TDFoQjZBblpleTk5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVFMi80MjBGNjMwQTFEOUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0 cGFZNkwxaEI2QW5aZXk5OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABCPXxafQPSBRn0dNof5JA0JgnPhpd0pcmc4Z3MWU3DK/9ja9l7YBO ML2dBnQfT8JqUA0mvrrKf8FysWxllPuSxNb9EVQLOQooLejVPbK/J97AqDk8TJOr MEhK/mjdc3+NT2ae9bRroDMRh1ii3Jy1VaA6XpdpN+/8lOhj19JvLyNXB3las+r3 XbK2NrtUSgT6P6pRy0yHkmO0NhsdsKYcsje4WIhqnqTba/KF7AgC8RnlYbCBICFI PtyHi20qQVCN+bBIlkyYh5+48dDvIcSBsBLAxza+XRfmxtfyqoijbN6WuipZOIK4 wVDg1C1CzA9yf+LG90fqTwCU7txuzSPC -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:30 2025 by rpki-client