$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft File: peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json) Hash identifier: UJ2AGCh6+H4KUB+rAQ10nyqxe3TR6tjkrSdCSqfbk3E= Subject key identifier: 36:D8:E0:78:E8:B0:82:E3:04:35:44:11:61:94:12:67:50:2F:B5:8B Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 Certificate issuer: /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft Manifest number: 14B4 Signing time: Fri 22 Aug 2025 18:52:17 +0000 Manifest this update: Fri 22 Aug 2025 18:52:16 +0000 Manifest next update: Fri 29 Aug 2025 18:52:16 +0000 Files and hashes: 1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: pNRLxs9mcyhAOmGCnw9Vaw0Eyz4by68v2OUT7+DBFCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Validity Not Before: Aug 22 18:52:16 2025 GMT Not After : Aug 29 18:52:16 2025 GMT Subject: CN=68a8bc60-5e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:79:ea:b7:40:5b:29:c2:a4:6a:9f:34:0e: e5:cc:26:50:bf:eb:fd:0f:6c:ca:0a:3d:37:84:d3: 41:83:47:30:87:c2:a4:8d:de:52:f8:4a:12:75:cd: 40:d2:70:a7:d7:98:c1:01:d6:ed:b4:19:e8:29:95: 3d:60:00:5f:e3:98:6c:04:c5:eb:b2:a1:e3:dc:c5: e0:c0:a1:e3:76:09:c3:7f:e3:62:ff:1a:c6:30:48: d1:d5:5c:bf:36:4b:40:2f:fe:8e:22:5a:64:34:00: c4:6a:7e:58:44:e0:b1:ac:3d:73:d3:73:ea:1c:d8: d4:1d:53:8b:08:20:24:11:eb:4d:8c:e1:a5:f8:3c: f7:e2:2b:f6:d0:5d:2a:df:ec:43:ab:29:66:47:39: 53:88:fc:96:15:32:21:02:a1:3e:fd:07:84:fc:ec: bf:d9:7e:07:cf:e7:2f:77:9b:dd:98:d2:f4:07:8b: 3d:0c:62:1d:d5:33:34:52:0f:ea:e2:98:c0:37:3b: 2f:57:cd:49:36:34:43:1f:15:bc:47:0f:0b:39:f3: 02:9e:cb:e7:99:0c:11:18:56:46:0f:70:25:f0:95: 0b:9e:6c:11:8b:c6:17:5b:b0:84:bf:44:d6:c0:cc: 1c:7d:ec:fa:01:a6:a9:fe:d5:43:85:85:4f:b0:2b: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:E0:78:E8:B0:82:E3:04:35:44:11:61:94:12:67:50:2F:B5:8B X509v3 Authority Key Identifier: keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d2:4c:e6:8b:e1:6a:83:ce:30:e6:51:42:30:b7:76:9b:20: 21:5b:bd:c7:18:9f:3a:d8:db:73:32:ad:b0:44:0c:e3:c3:96: 95:bf:59:3a:7f:06:9c:55:98:ba:57:ae:ec:40:85:e5:cc:79: a9:76:3e:c2:56:40:af:0e:41:ff:02:29:1c:41:94:7d:1a:8d: b3:dd:89:0e:32:dc:cb:3e:99:e3:13:ae:7d:d8:86:d8:43:73: 1e:db:e8:0c:22:1b:73:b7:5f:fe:9c:40:a2:a5:75:78:a2:59: cb:84:01:03:bb:59:55:82:26:00:38:1a:65:01:9f:a5:8e:a2: 88:49:ad:9a:5f:f1:57:bc:5d:a2:db:7e:59:ea:fc:a7:0a:ea: 77:9f:68:f3:be:f8:6c:a4:68:8e:9f:81:42:35:03:5b:82:2c: 0b:c9:da:52:c7:e7:b9:ac:a5:e6:29:dc:35:aa:a8:77:bc:91: f0:3a:ba:d2:35:8d:2c:da:c0:e7:89:7a:a8:12:71:9e:e8:04: f6:fa:c5:a0:1c:b4:e5:e7:ea:fe:70:22:5b:a9:1c:6c:73:06: 53:30:b7:dd:6c:45:5d:56:4e:ef:57:14:25:2f:46:21:18:f8: 12:8f:5f:ce:c2:97:7a:0f:c8:3c:b2:c3:e5:7c:67:cd:53:d1: dc:d6:e9:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy NDE3OTA5QjEwHhcNMjUwODIyMTg1MjE2WhcNMjUwODI5MTg1MjE2WjAYMRYwFAYD VQQDEw02OGE4YmM2MC01ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3x156rdAWynCpGqfNA7lzCZQv+v9D2zKCj03hNNBg0cwh8Kkjd5S+EoSdc1A 0nCn15jBAdbttBnoKZU9YABf45hsBMXrsqHj3MXgwKHjdgnDf+Ni/xrGMEjR1Vy/ NktAL/6OIlpkNADEan5YROCxrD1z03PqHNjUHVOLCCAkEetNjOGl+Dz34iv20F0q 3+xDqylmRzlTiPyWFTIhAqE+/QeE/Oy/2X4Hz+cvd5vdmNL0B4s9DGId1TM0Ug/q 4pjANzsvV81JNjRDHxW8Rw8LOfMCnsvnmQwRGFZGD3Al8JULnmwRi8YXW7CEv0TW wMwcfez6Aaap/tVDhYVPsCsIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbY4Hjo sILjBDVEEWGUEmdQL7WLMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr0kzmi+Fqg84w5lFCMLd2myAhW73HGJ862NtzMq2wRAzjw5aVv1k6 fwacVZi6V67sQIXlzHmpdj7CVkCvDkH/AikcQZR9Go2z3YkOMtzLPpnjE6592IbY Q3Me2+gMIhtzt1/+nECipXV4olnLhAEDu1lVgiYAOBplAZ+ljqKISa2aX/FXvF2i 235Z6vynCup3n2jzvvhspGiOn4FCNQNbgiwLydpSx+e5rKXmKdw1qqh3vJHwOrrS NY0s2sDniXqoEnGe6AT2+sWgHLTl5+r+cCJbqRxscwZTMLfdbEVdVk7vVxQlL0Yh GPgSj1/Owpd6D8g8ssPlfGfNU9Hc1unL -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:08 2025 by rpki-client