$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: yg+8vtv6kM2bcQMKETSWLI5s7QvEUHGcSwRP62Fjqdw= Subject key identifier: 74:04:FA:67:39:C0:0B:49:98:32:65:20:BC:C1:89:7D:42:3B:0F:BB Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 34AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 34AD Signing time: Fri 22 Aug 2025 15:10:45 +0000 Manifest this update: Fri 22 Aug 2025 15:10:44 +0000 Manifest next update: Fri 29 Aug 2025 15:10:44 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: TmlJWuvI15xcD1nv9aSTqwhjNIQrsLZ6dJzMvNkmvm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Aug 22 15:10:44 2025 GMT Not After : Aug 29 15:10:44 2025 GMT Subject: CN=68a88874-bb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:10:2a:04:95:0d:e5:df:75:05:b5:af:3d: 15:d3:86:ff:94:b6:a0:a0:31:58:05:84:f0:4b:c1: f2:75:85:34:14:d3:bb:99:5d:24:52:1c:cf:e9:f2: 82:1d:a7:aa:79:ec:06:0e:d9:21:bd:45:89:0f:a0: 69:65:78:39:50:88:db:e3:76:e3:6e:2f:bb:fb:cb: 6f:40:80:2f:cd:c8:3c:4a:15:ee:d6:96:5e:95:a1: e0:a6:d1:64:18:76:f1:a6:17:9a:62:58:2a:cf:46: dc:df:cf:7e:6d:c2:59:57:73:08:94:88:05:02:01: 8c:aa:1d:31:1f:32:c7:58:b9:34:b3:f4:75:10:3a: 7d:62:4a:81:ad:c3:2f:96:14:87:34:e7:0a:f1:e1: ea:09:3a:b5:fe:49:82:00:0c:ac:c5:06:f6:68:69: d1:dc:2c:82:e1:6a:5a:74:bb:e9:60:82:f5:5c:9e: a0:cd:3e:7c:db:e0:57:c6:51:31:4e:6b:6b:7b:af: 90:a0:b0:12:95:ba:26:03:00:21:29:6b:62:43:7a: 1e:21:da:85:2e:21:6a:b2:3c:f6:b0:01:fb:44:fd: 4a:70:63:9c:1d:cc:48:48:52:13:6a:7a:56:72:9d: 54:eb:f4:7c:e8:24:14:8f:da:fc:5b:79:88:85:fd: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:FA:67:39:C0:0B:49:98:32:65:20:BC:C1:89:7D:42:3B:0F:BB X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7f:88:6a:e5:56:19:18:95:8e:99:c9:b0:3e:4b:3e:0c:8e: 13:c5:29:98:9a:22:5a:f4:7b:a3:24:ad:bf:de:2a:4d:a8:1b: 51:33:37:00:c1:e3:3a:d7:c6:f1:8e:27:df:5a:93:df:a7:1a: d1:14:80:0b:48:e3:68:41:a7:bf:16:72:b2:7c:7b:73:a7:cc: 92:6e:6f:07:08:b6:fe:ca:f1:19:3c:92:5b:2d:58:9e:d5:21: e0:32:9d:48:4d:a3:d2:86:36:82:73:a9:7a:f9:c1:7c:30:2b: 33:76:c6:58:a8:b2:ed:af:3d:dc:0f:2b:b8:d3:be:5b:c0:78: 03:fa:21:35:00:36:73:b7:cb:bb:b4:6b:a0:d6:b1:a9:bb:f1: 42:82:74:ad:b4:7e:ec:f0:6e:28:db:fb:26:54:f5:08:70:6c: 63:89:c7:92:42:e9:fd:05:b4:0d:2a:ad:54:4a:9c:6c:ce:bc: 1d:db:d2:94:ed:cf:1c:07:86:23:de:20:cd:a8:e0:ed:33:5d: 0f:26:4e:1b:be:58:69:1f:a2:bc:41:8c:6c:2c:08:b9:a9:f3: 4b:9c:8c:0e:4f:dc:37:8d:dd:a9:ca:eb:a4:24:14:6d:9d:a3: 3f:a7:63:18:41:18:16:9a:68:17:d8:64:91:c2:29:62:a0:e8: 57:f0:8b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwODIyMTUxMDQ0WhcNMjUwODI5MTUxMDQ0WjAYMRYwFAYD VQQDEw02OGE4ODg3NC1iYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscoQKgSVDeXfdQW1rz0V04b/lLagoDFYBYTwS8HydYU0FNO7mV0kUhzP6fKC HaeqeewGDtkhvUWJD6BpZXg5UIjb43bjbi+7+8tvQIAvzcg8ShXu1pZelaHgptFk GHbxpheaYlgqz0bc389+bcJZV3MIlIgFAgGMqh0xHzLHWLk0s/R1EDp9YkqBrcMv lhSHNOcK8eHqCTq1/kmCAAysxQb2aGnR3CyC4WpadLvpYIL1XJ6gzT582+BXxlEx Tmtre6+QoLASlbomAwAhKWtiQ3oeIdqFLiFqsjz2sAH7RP1KcGOcHcxISFITanpW cp1U6/R86CQUj9r8W3mIhf3BwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQE+mc5 wAtJmDJlILzBiX1COw+7MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACf4hq5VYZGJWOmcmwPks+DI4TxSmYmiJa9HujJK2/3ipNqBtRMzcA weM618bxjiffWpPfpxrRFIALSONoQae/FnKyfHtzp8ySbm8HCLb+yvEZPJJbLVie 1SHgMp1ITaPShjaCc6l6+cF8MCszdsZYqLLtrz3cDyu4075bwHgD+iE1ADZzt8u7 tGug1rGpu/FCgnSttH7s8G4o2/smVPUIcGxjiceSQun9BbQNKq1USpxszrwd29KU 7c8cB4Yj3iDNqODtM10PJk4bvlhpH6K8QYxsLAi5qfNLnIwOT9w3jd2pyuukJBRt naM/p2MYQRgWmmgX2GSRwilioOhX8Isk -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:14 2025 by rpki-client