$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: 0NJQ100h6SbvIzkGbXX0AUb3nuQJmO/lSHi+u8M1Ivc= Subject key identifier: 5A:3C:7A:38:B9:5D:B2:2A:90:8F:3F:05:0A:03:2D:35:24:B3:E5:28 Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: A3 Signing time: Sat 23 Aug 2025 06:26:03 +0000 Manifest this update: Sat 23 Aug 2025 06:26:02 +0000 Manifest next update: Sat 30 Aug 2025 06:26:02 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: x5Cq2a4UpMNqyGpKHepHhHH12aCopKLi2Mx5X6KXgns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Aug 23 06:26:02 2025 GMT Not After : Aug 30 06:26:02 2025 GMT Subject: CN=68a95efb-3a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:1e:5b:ba:90:b0:b5:44:c6:ee:ee:4d:77: 6b:54:02:7f:54:2d:93:55:d1:c8:35:73:7e:ef:4d: 80:29:72:e8:6d:61:2e:32:8a:ed:6a:95:9e:f2:ff: db:24:ae:ee:d5:b5:1d:19:20:f9:73:fb:64:7e:c4: 7b:91:2d:72:1f:b7:4e:21:06:7f:2d:b5:ce:93:36: ce:f2:a5:f7:6c:96:b0:04:4b:65:ce:93:a8:14:1c: 81:b8:05:30:f9:bc:21:87:2d:cb:ba:ea:9c:bc:3c: ec:ae:c9:65:7c:77:be:64:5f:6e:3b:38:28:14:c0: 76:71:e1:da:7e:84:cf:c0:d6:f0:85:44:eb:6a:25: ec:a3:94:27:65:71:64:3b:52:b2:66:79:90:d1:b1: fc:c3:2e:6b:af:ab:29:df:62:0e:43:f5:69:c2:1e: 75:eb:df:89:40:df:e1:ad:ed:b4:31:78:fd:4f:46: c5:a6:b6:fe:2b:5c:75:e9:4d:77:a7:62:73:2b:ab: b8:76:f0:8b:ba:2d:0e:40:af:1c:7a:0d:72:73:93: f0:44:b4:c4:64:77:a1:65:78:6b:46:b2:85:d3:66: 82:06:ee:78:99:b5:e4:93:cd:61:17:5f:a7:09:fd: f1:74:eb:cf:0a:08:62:e5:7a:85:05:f3:4b:5d:4e: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:7A:38:B9:5D:B2:2A:90:8F:3F:05:0A:03:2D:35:24:B3:E5:28 X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:37:0f:3f:67:d3:b2:b7:85:d4:bb:25:4d:1c:a0:c3:d8: 58:22:60:00:70:ce:47:df:c4:aa:63:cb:bb:06:fe:ee:aa:74: 3a:80:58:1c:8b:f3:08:59:d2:3b:2a:64:3e:7d:89:1a:c8:c2: 83:b3:0b:8b:9c:6d:4f:38:4c:71:dc:43:3e:94:85:b6:7a:eb: f2:7c:e4:f7:fa:5b:f8:d5:1a:12:2b:3b:d8:43:2f:65:80:b0: 54:ff:e3:31:1d:69:57:c7:32:bf:f1:56:b3:ee:fb:7e:de:cd: c4:f6:b8:69:b9:a7:27:bf:1c:1e:cd:9d:8c:56:54:f7:82:45: de:74:4d:65:5f:94:6d:3d:db:b6:38:f4:f7:19:bc:43:5c:a6: ce:82:30:bf:43:b8:b6:aa:a5:39:e5:f6:9d:85:c1:d0:be:e4: fb:f9:4a:58:bf:b1:a4:4f:22:46:5c:8e:a3:f4:de:72:dc:cd: 55:35:b4:81:46:d9:db:71:f6:a1:78:18:e0:33:e5:82:37:d3: 56:eb:6b:81:cf:85:91:35:5f:0b:20:7b:ef:f6:31:c8:45:1c: 91:3b:3f:3c:98:75:1b:f1:77:b0:44:76:ba:32:bc:02:64:d8: 6a:ca:5c:5c:9f:a8:f9:10:2d:10:fc:ca:6f:5d:c7:7f:05:24: 14:6a:dd:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKDg3OTJERTM5OUNGNjMxOTNEREMyOUQzMEZCRjBBNTgx RTAyNEYwMDMwHhcNMjUwODIzMDYyNjAyWhcNMjUwODMwMDYyNjAyWjAYMRYwFAYD VQQDEw02OGE5NWVmYi0zYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjgeW7qQsLVExu7uTXdrVAJ/VC2TVdHINXN+702AKXLobWEuMortapWe8v/b JK7u1bUdGSD5c/tkfsR7kS1yH7dOIQZ/LbXOkzbO8qX3bJawBEtlzpOoFByBuAUw +bwhhy3LuuqcvDzsrsllfHe+ZF9uOzgoFMB2ceHafoTPwNbwhUTraiXso5QnZXFk O1KyZnmQ0bH8wy5rr6sp32IOQ/Vpwh5169+JQN/hre20MXj9T0bFprb+K1x16U13 p2JzK6u4dvCLui0OQK8ceg1yc5PwRLTEZHehZXhrRrKF02aCBu54mbXkk81hF1+n Cf3xdOvPCghi5XqFBfNLXU4KvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo8eji5 XbIqkI8/BQoDLTUks+UoMB8GA1UdIwQYMBaAFIeS3jmc9jGT3cKdMPvwpYHgJPAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy9BM0RENkI5QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1aUGR3cDB3LV9DbGdlQWs4 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy9BM0RENkI5QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1a UGR3cDB3LV9DbGdlQWs4QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYTcPP2fTsreF1LslTRygw9hYImAAcM5H38SqY8u7Bv7uqnQ6gFgc i/MIWdI7KmQ+fYkayMKDswuLnG1POExx3EM+lIW2euvyfOT3+lv41RoSKzvYQy9l gLBU/+MxHWlXxzK/8Vaz7vt+3s3E9rhpuacnvxwezZ2MVlT3gkXedE1lX5RtPdu2 OPT3GbxDXKbOgjC/Q7i2qqU55fadhcHQvuT7+UpYv7GkTyJGXI6j9N5y3M1VNbSB RtnbcfaheBjgM+WCN9NW62uBz4WRNV8LIHvv9jHIRRyROz88mHUb8XewRHa6MrwC ZNhqylxcn6j5EC0Q/MpvXcd/BSQUat02 -----END CERTIFICATE-----Generated at Sun Aug 24 03:01:02 2025 by rpki-client