$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft File: B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json) Hash identifier: ybO4Ekcgmhrc/ZWKcBK50+BjQBuJTI+D7i6w3Xop6No= Subject key identifier: 57:4D:D2:CA:D1:71:38:D8:3F:EE:CC:C0:B6:E1:20:6A:76:08:08:F7 Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 Certificate issuer: /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:28:38 +0000 Manifest this update: Sat 23 Aug 2025 06:28:38 +0000 Manifest next update: Sat 30 Aug 2025 06:28:38 +0000 Files and hashes: 1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: BRZmt5RcKHf4W/RU8X4tbGXKwQlxtCjq/+ZeyQvRl0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Validity Not Before: Aug 23 06:28:38 2025 GMT Not After : Aug 30 06:28:38 2025 GMT Subject: CN=68a95f96-44ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:51:39:92:67:e1:b1:43:ea:88:05:e1:64:c1: 0f:4a:af:fb:10:3c:7e:33:2a:35:52:b9:3c:c6:58: 8f:ba:4f:a4:35:24:2a:a7:79:3f:20:b1:f7:bf:2a: 24:e5:39:a0:b8:7c:6f:0e:5f:40:51:3a:70:e4:90: 6b:66:82:81:39:78:5d:ea:4e:6e:20:bf:2e:e5:7d: 98:5c:6d:00:e1:ec:a8:1d:2f:23:95:e5:e3:51:ae: 49:4f:08:c1:d4:da:ca:90:e2:6c:6f:8e:c7:af:73: 0d:79:22:f5:36:61:42:19:e5:7d:81:89:70:f6:f6: 32:99:ff:ba:81:ac:39:f0:8e:e9:ae:26:56:8c:9e: 38:b5:31:59:6c:5d:11:39:fd:e0:31:70:17:dd:ce: 4c:b0:89:5b:27:33:51:f7:77:3c:f1:0c:ca:56:f0: ca:cd:1b:81:11:11:ff:43:6c:da:08:16:94:61:22: 0c:f9:f7:43:99:e5:1c:c9:92:e9:4a:b9:20:3f:b9: 80:48:9b:47:48:bd:ba:7a:8c:0f:b4:3e:35:05:e4: 03:23:07:7b:1f:67:db:f2:ef:a7:c4:58:65:39:66: 46:0d:67:1b:90:37:8d:e6:97:2c:aa:fa:90:de:64: c9:0e:53:1c:70:22:07:44:49:ae:4c:f4:a6:8d:fc: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4D:D2:CA:D1:71:38:D8:3F:EE:CC:C0:B6:E1:20:6A:76:08:08:F7 X509v3 Authority Key Identifier: keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f6:22:7c:c3:ee:17:13:65:19:e7:cb:4e:c7:25:0f:90:00: 87:5f:73:1d:b1:c7:f5:69:4e:51:32:45:49:60:30:77:5f:df: 47:0e:c3:81:cb:f8:65:79:8d:5e:ae:f4:23:a0:56:ca:de:3e: 0a:92:d9:01:a9:b4:42:2a:30:3b:8d:ae:79:c1:a3:53:b3:16: 6f:33:18:37:97:a5:2f:5d:a7:c8:f6:09:78:98:2b:ab:63:c5: 5a:86:f0:25:3d:ad:4b:33:7a:4b:5a:02:ce:47:2b:e6:2b:ef: 2e:aa:50:af:0b:07:10:ba:c7:32:2c:f5:f1:1d:eb:7e:d9:23: e0:04:34:82:4b:a3:15:88:ec:45:8b:76:f0:6d:42:7c:4e:97: 91:b6:5a:4b:44:2d:18:2e:69:90:5f:0e:33:9b:76:e9:8a:44: 03:d4:62:17:fa:6b:6e:d8:58:4b:03:ff:e5:08:4f:de:12:cd: 44:73:49:65:4d:19:e4:16:96:a1:0b:1a:08:bb:f3:fc:50:e1: b2:fb:ab:d2:f5:28:17:d4:95:41:bc:7a:a6:60:2f:37:22:63: ee:b9:4f:9b:69:34:cf:c4:82:48:1b:2f:03:80:0b:d8:12:e3: 61:82:fe:88:02:f4:45:81:80:b9:fe:06:aa:20:a3:59:f5:ba: fe:11:44:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDA3QjI1RjdFNjVDQjYyNzEwOEIwRDk0QzE4RjdGNTc5 RDMzNDc4MTgwHhcNMjUwODIzMDYyODM4WhcNMjUwODMwMDYyODM4WjAYMRYwFAYD VQQDEw02OGE5NWY5Ni00NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9VE5kmfhsUPqiAXhZMEPSq/7EDx+Myo1Urk8xliPuk+kNSQqp3k/ILH3vyok 5TmguHxvDl9AUTpw5JBrZoKBOXhd6k5uIL8u5X2YXG0A4eyoHS8jleXjUa5JTwjB 1NrKkOJsb47Hr3MNeSL1NmFCGeV9gYlw9vYymf+6gaw58I7priZWjJ44tTFZbF0R Of3gMXAX3c5MsIlbJzNR93c88QzKVvDKzRuBERH/Q2zaCBaUYSIM+fdDmeUcyZLp SrkgP7mASJtHSL26eowPtD41BeQDIwd7H2fb8u+nxFhlOWZGDWcbkDeN5pcsqvqQ 3mTJDlMccCIHREmuTPSmjfwsuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdN0srR cTjYP+7MwLbhIGp2CAj3MB8GA1UdIwQYMBaAFAeyX35ly2JxCLDZTBj39XnTNHgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GQTUyREVDMjhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFluRUlzTmxNR1BmMWVkTTBl QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GQTUyREVDMjhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFlu RUlzTmxNR1BmMWVkTTBlQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU9iJ8w+4XE2UZ58tOxyUPkACHX3Mdscf1aU5RMkVJYDB3X99HDsOB y/hleY1ervQjoFbK3j4KktkBqbRCKjA7ja55waNTsxZvMxg3l6UvXafI9gl4mCur Y8VahvAlPa1LM3pLWgLORyvmK+8uqlCvCwcQuscyLPXxHet+2SPgBDSCS6MViOxF i3bwbUJ8TpeRtlpLRC0YLmmQXw4zm3bpikQD1GIX+mtu2FhLA//lCE/eEs1Ec0ll TRnkFpahCxoIu/P8UOGy+6vS9SgX1JVBvHqmYC83ImPuuU+baTTPxIJIGy8DgAvY EuNhgv6IAvRFgYC5/gaqIKNZ9br+EUT1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:54 2025 by rpki-client