$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft File: j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json) Hash identifier: wUmvPufKPVKIXeO9gPFXxH8qv6thPJW4K0VuP+uGVKg= Subject key identifier: BC:28:D5:DA:0A:E4:45:30:F1:D2:F4:12:CB:E4:36:CB:11:AF:C5:50 Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 Certificate issuer: /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft Manifest number: 33 Signing time: Sat 23 Aug 2025 07:51:48 +0000 Manifest this update: Sat 23 Aug 2025 07:51:48 +0000 Manifest next update: Sat 30 Aug 2025 07:51:48 +0000 Files and hashes: 1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: mTnmrpPw3jT58LWdFU/TbRASFcU6BwHmrLLSbeLA8UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641 Validity Not Before: Aug 23 07:51:48 2025 GMT Not After : Aug 30 07:51:48 2025 GMT Subject: CN=68a97314-c3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:19:f6:11:af:2e:4d:07:0c:4e:02:ca:6b: 46:67:22:01:b2:70:83:a1:81:dc:12:e2:6f:c0:77: f4:b5:5d:dd:a6:b7:69:06:dd:50:71:22:86:0c:02: 06:e6:be:5e:ca:4f:01:1f:46:95:e2:b0:cc:b9:da: 01:5f:d3:f0:2f:42:c1:26:01:d7:21:36:68:0e:5d: ac:72:1d:a1:94:77:7b:e2:b4:f7:5d:34:55:bf:94: 1e:f3:12:d3:ac:33:5d:b6:0d:b0:ee:b6:24:a0:21: ed:40:63:f1:50:3a:96:07:7f:e1:4d:18:be:73:d5: 00:10:b9:88:0d:71:2f:0a:41:e6:cd:48:3f:cc:d1: 17:65:cc:b3:a9:22:52:1d:af:4a:47:2f:22:76:f5: f0:e0:4b:02:5c:1c:7e:0e:72:43:af:9f:4d:bc:15: 5b:b8:a8:85:30:15:3b:1a:97:56:fc:f4:68:51:2f: 50:2f:c8:80:0f:53:95:4d:1b:9a:e3:29:bd:7f:9d: d5:ad:d9:d0:51:dc:f1:4b:c8:f2:02:68:27:a1:5f: 5a:88:77:10:b3:43:72:d0:f3:a2:d0:4c:d6:5f:84: 61:66:f1:95:8d:f9:12:e5:1a:06:42:33:97:8d:64: dc:67:2d:49:f3:cc:92:3d:ce:5f:e8:d6:02:65:15: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:28:D5:DA:0A:E4:45:30:F1:D2:F4:12:CB:E4:36:CB:11:AF:C5:50 X509v3 Authority Key Identifier: keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:eb:d5:62:01:1d:46:a3:e5:cc:06:39:d2:fa:ae:1a:bf:ee: d7:c5:86:a1:cc:1b:df:64:c3:c1:0b:35:1e:b7:23:2b:91:c6: 90:ea:d2:b2:af:47:17:f0:22:2f:6f:90:55:a0:7a:c3:7d:c8: ed:5d:11:00:14:33:b5:1d:be:29:6b:9b:86:65:07:28:8b:1a: ec:e5:42:8a:f1:47:eb:d1:db:25:3d:60:f2:10:8e:c5:d9:eb: 18:60:4d:12:c9:d9:7d:a8:2c:6b:58:56:df:68:3b:63:d5:f1: 90:2a:6f:db:c3:3b:5d:d0:a4:ed:f6:9d:9a:a9:63:89:9d:f7: 98:48:f3:f4:1c:c6:6e:41:9a:28:1b:44:9c:78:df:9d:d3:ab: 1d:29:b3:da:5d:9b:4d:6d:04:17:90:ea:61:dc:2e:56:0b:4a: aa:97:e0:98:f8:f9:7f:32:ed:d9:6b:4b:65:f0:49:2f:91:77: dc:73:8c:5b:40:70:e4:9d:3b:82:6a:f4:90:32:b1:17:76:3d: 8b:ab:22:28:2e:ff:7b:dd:f1:5d:26:77:67:82:ef:95:ca:9a: d7:62:14:d3:1a:d4:ed:07:fd:2b:75:da:e7:3c:fd:ab:3c:49: 4c:7f:17:4a:f5:a0:9f:f5:47:e8:be:54:41:cd:6e:1e:45:1e: ee:49:91:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoOEZBQTlCRDlEQUY2NzQ0REM5OUQwMDVCMDI0QTJCREJG MTAwNzY0MTAeFw0yNTA4MjMwNzUxNDhaFw0yNTA4MzAwNzUxNDhaMBgxFjAUBgNV BAMTDTY4YTk3MzE0LWMzYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTzBn2Ea8uTQcMTgLKa0ZnIgGycIOhgdwS4m/Ad/S1Xd2mt2kG3VBxIoYMAgbm vl7KTwEfRpXisMy52gFf0/AvQsEmAdchNmgOXaxyHaGUd3vitPddNFW/lB7zEtOs M122DbDutiSgIe1AY/FQOpYHf+FNGL5z1QAQuYgNcS8KQebNSD/M0RdlzLOpIlId r0pHLyJ29fDgSwJcHH4OckOvn028FVu4qIUwFTsal1b89GhRL1AvyIAPU5VNG5rj Kb1/ndWt2dBR3PFLyPICaCehX1qIdxCzQ3LQ86LQTNZfhGFm8ZWN+RLlGgZCM5eN ZNxnLUnzzJI9zl/o1gJlFXgxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvCjV2grk RTDx0vQSy+Q2yxGvxVAwHwYDVR0jBBgwFoAUj6qb2dr2dE3JnQBbAkor2/EAdkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwL0E4ODYxNUVFMzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUzSm5RQmJBa29yMl9FQWRr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZxYjJkcjJkRTNKblFCYkFrb3IyX0VBZGtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwL0E4ODYxNUVFMzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUz Sm5RQmJBa29yMl9FQWRrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHr1WIBHUaj5cwGOdL6rhq/7tfFhqHMG99kw8ELNR63IyuRxpDq0rKv RxfwIi9vkFWgesN9yO1dEQAUM7Udvilrm4ZlByiLGuzlQorxR+vR2yU9YPIQjsXZ 6xhgTRLJ2X2oLGtYVt9oO2PV8ZAqb9vDO13QpO32nZqpY4md95hI8/Qcxm5Bmigb RJx4353Tqx0ps9pdm01tBBeQ6mHcLlYLSqqX4Jj4+X8y7dlrS2XwSS+Rd9xzjFtA cOSdO4Jq9JAysRd2PYurIigu/3vd8V0md2eC75XKmtdiFNMa1O0H/St12uc8/as8 SUx/F0r1oJ/1R+i+VEHNbh5FHu5Jkc4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:19 2025 by rpki-client