$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: IMO0uEkC4nJVkD0m5esH7KSzr/EkZ8iGMaRKJ6/m2Gk= Subject key identifier: 8B:1F:FC:31:25:05:3A:66:44:E7:12:E8:41:3E:F2:8C:D7:11:23:1E Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:43:08 +0000 Manifest this update: Fri 22 Aug 2025 14:43:07 +0000 Manifest next update: Fri 29 Aug 2025 14:43:07 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: umEg0BCBA4nu2fwnu6xEgOUnCcYkJuVnuJao2PKGwTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Aug 22 14:43:07 2025 GMT Not After : Aug 29 14:43:07 2025 GMT Subject: CN=68a881fc-102d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:bc:28:13:1a:93:ce:26:fd:03:ce:60:c5: 55:27:46:12:d5:07:b2:10:0f:19:cb:5b:ea:78:38: de:b7:c4:e6:54:7f:c0:ce:8c:ac:15:c4:e3:0a:65: ba:57:56:e8:f9:f6:2c:eb:80:19:3a:26:0e:2c:6a: e7:1d:d0:de:67:e4:ef:13:2b:31:b5:32:ca:78:83: 21:10:36:05:1f:f2:04:e3:c9:0a:73:be:4b:20:e4: a3:cf:cd:e1:72:58:8f:f4:71:af:6a:ba:2c:cd:4f: b5:72:33:72:30:57:5c:1c:c8:ba:3d:f3:34:20:72: 0b:80:98:b2:11:0d:07:4c:63:dc:e9:9e:ec:d8:6f: 1c:14:2a:ee:b2:51:4e:08:f6:18:af:6e:cf:b8:c2: cf:d0:10:62:0d:ee:c5:c5:fb:19:9f:b5:46:d6:c5: fd:51:44:bb:fc:c9:4f:a3:10:12:35:bc:69:ac:bd: a4:bd:6e:03:79:17:5d:8f:24:4f:8a:e4:7f:3e:84: 3a:2d:85:66:fe:95:d3:70:75:77:34:6b:27:ea:9c: 51:ae:0f:e5:ce:83:ca:78:40:b0:bf:b0:b8:30:1c: 4e:c9:91:29:21:fb:38:ec:7d:42:f5:3c:33:be:d2: cf:15:cd:5f:d0:88:2d:9c:5b:2d:95:6f:8c:6c:c3: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1F:FC:31:25:05:3A:66:44:E7:12:E8:41:3E:F2:8C:D7:11:23:1E X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:29:b5:03:cd:28:4d:00:a3:46:84:54:e2:2b:d7:4c:91:2b: 2e:07:bf:cc:d0:dd:81:74:29:e2:c1:32:1e:cd:fd:5f:90:cf: ec:d4:0f:b8:f0:64:10:44:bb:b2:38:a5:5c:99:49:ea:a8:a0: 83:ca:86:2f:60:3b:4d:90:a9:ca:1d:67:0c:b9:de:7a:41:dc: 75:a4:bf:ad:3d:cd:78:70:24:6d:24:05:39:69:58:fb:72:65: 56:4b:2a:3f:75:3b:ad:a9:0c:90:82:71:c4:1e:dc:57:94:4e: 75:43:46:cb:ad:c2:6a:0e:f5:1a:0f:9a:fa:87:11:99:5a:d1: d9:de:f6:dc:82:30:17:cb:96:1c:82:c8:7e:e4:06:5c:c2:69: d4:91:29:5e:f9:3e:47:1a:39:ae:f9:93:f6:8a:75:f3:c2:d1: 52:ef:5d:a3:1b:d0:06:e8:f3:e3:82:c8:2d:55:8f:cc:95:90: 7e:79:81:db:e8:45:f7:bb:09:3c:0d:54:84:35:11:f6:42:cb: 46:4b:96:b1:3e:43:38:aa:70:db:ac:ac:4b:bd:62:b6:89:d4: 4c:33:0b:b4:47:5c:fa:1b:60:43:c4:60:e0:5a:82:74:37:c8: 7e:2c:9b:7e:d5:d5:a1:68:eb:10:4a:a8:bf:83:c3:fa:34:91: 4b:05:50:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjUwODIyMTQ0MzA3WhcNMjUwODI5MTQ0MzA3WjAYMRYwFAYD VQQDEw02OGE4ODFmYy0xMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsC8KBMak84m/QPOYMVVJ0YS1QeyEA8Zy1vqeDjet8TmVH/AzoysFcTjCmW6 V1bo+fYs64AZOiYOLGrnHdDeZ+TvEysxtTLKeIMhEDYFH/IE48kKc75LIOSjz83h cliP9HGvaroszU+1cjNyMFdcHMi6PfM0IHILgJiyEQ0HTGPc6Z7s2G8cFCruslFO CPYYr27PuMLP0BBiDe7FxfsZn7VG1sX9UUS7/MlPoxASNbxprL2kvW4DeRddjyRP iuR/PoQ6LYVm/pXTcHV3NGsn6pxRrg/lzoPKeECwv7C4MBxOyZEpIfs47H1C9Twz vtLPFc1f0IgtnFstlW+MbMMuowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsf/DEl BTpmROcS6EE+8ozXESMeMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzKbUDzShNAKNGhFTiK9dMkSsuB7/M0N2BdCniwTIezf1fkM/s1A+4 8GQQRLuyOKVcmUnqqKCDyoYvYDtNkKnKHWcMud56Qdx1pL+tPc14cCRtJAU5aVj7 cmVWSyo/dTutqQyQgnHEHtxXlE51Q0bLrcJqDvUaD5r6hxGZWtHZ3vbcgjAXy5Yc gsh+5AZcwmnUkSle+T5HGjmu+ZP2inXzwtFS712jG9AG6PPjgsgtVY/MlZB+eYHb 6EX3uwk8DVSENRH2QstGS5axPkM4qnDbrKxLvWK2idRMMwu0R1z6G2BDxGDgWoJ0 N8h+LJt+1dWhaOsQSqi/g8P6NJFLBVBt -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:25 2025 by rpki-client