$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: h/i4Fc3oMdWUX5zi80ig1aKTZiVUnY4E5sOGnqGCURQ= Subject key identifier: 79:C5:61:4F:C3:88:71:E4:22:D9:C3:76:4F:EC:02:31:20:A7:43:8D Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 0279 Signing time: Sat 23 Aug 2025 01:57:30 +0000 Manifest this update: Sat 23 Aug 2025 01:57:30 +0000 Manifest next update: Sat 30 Aug 2025 01:57:30 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: XVcbicHssqSunihEVLaC5EHf4RA33TYaIOhKuPdWEZM=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Aug 23 01:57:30 2025 GMT Not After : Aug 30 01:57:30 2025 GMT Subject: CN=68a9200a-770a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:f1:8f:83:5a:f0:ee:5b:2f:6d:d6:12:9e: c4:d1:c3:e1:2b:09:4b:32:10:f5:52:99:f1:36:8d: 94:85:fb:8b:48:df:6a:b2:75:1c:3e:ff:07:4f:ac: 9a:65:a2:a3:ed:95:b0:31:96:c0:76:36:86:f9:e6: 27:a0:6d:8a:0e:13:66:1a:73:6e:61:0c:3e:54:0d: f6:4f:9b:e8:6d:8b:6e:2d:cd:5a:d1:3d:08:ff:c7: dc:13:6a:73:2d:b3:07:82:b9:ef:68:f0:60:69:a6: 94:75:a9:30:3d:b3:98:93:5a:4d:7b:0b:95:19:0a: a8:44:03:c0:e4:82:06:ec:7e:3a:32:39:9c:f6:6c: be:b6:2a:9c:1d:64:fd:8f:68:16:0b:86:1f:71:77: 21:8b:46:61:81:b7:5b:e1:ea:5f:20:ef:94:13:1d: 9a:70:28:ef:74:76:6a:b1:6f:75:79:c9:4c:9f:4c: 28:65:8a:62:dd:a6:57:1e:67:b7:d2:e8:74:dc:d0: 5a:49:9a:d2:3e:25:0a:b2:c2:79:ea:4c:bb:79:75: 03:22:7d:9d:f2:3b:67:fe:34:fd:d0:99:cc:a3:34: bb:bd:6d:90:7f:df:93:a1:f6:1f:36:8e:8a:58:9c: 84:44:84:35:1e:2d:13:df:a9:2f:c2:d6:28:e1:4d: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C5:61:4F:C3:88:71:E4:22:D9:C3:76:4F:EC:02:31:20:A7:43:8D X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3c:77:a2:51:a2:49:ae:de:64:48:fa:3d:73:53:be:10:39: e8:c4:81:fb:10:0e:c0:d9:2f:a8:59:d2:be:14:ca:2e:9f:da: e3:d4:c9:65:3b:4f:73:a0:93:74:cc:e8:6e:dd:4e:81:aa:11: 00:2d:8e:a4:4c:70:62:43:55:4e:2f:42:d7:87:ba:26:cc:02: 46:f3:20:7c:5d:a0:4d:49:68:c0:25:1d:f6:d4:64:59:9a:87: f1:c8:9f:2e:75:db:7d:20:92:68:3d:cc:b4:c0:f1:b5:2e:55: 37:33:60:fe:87:a0:30:9b:53:54:99:74:39:ac:2e:d0:b3:f7: 68:99:77:eb:d3:00:52:7c:fb:2f:bc:a7:50:c4:d1:be:32:90: 31:14:f6:97:95:fe:6c:3d:e7:31:6c:f4:97:14:ae:75:f6:00: 2b:8d:bb:45:88:8b:60:82:37:83:a0:2a:2d:a0:3d:3e:69:b1: 6e:e8:cd:b0:49:8d:69:1c:e8:ac:9c:b6:09:c9:e3:01:51:e2: 30:54:30:62:da:56:e9:22:0e:7a:5f:2a:c6:d6:2b:09:6d:d9: 63:67:66:5c:17:3b:dd:45:55:ae:63:71:98:91:8c:92:11:e0: 41:c2:72:73:97:65:54:d0:fc:50:08:52:e3:c8:4c:34:09:15: 29:fa:22:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUwODIzMDE1NzMwWhcNMjUwODMwMDE1NzMwWjAYMRYwFAYD VQQDEw02OGE5MjAwYS03NzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi7xj4Na8O5bL23WEp7E0cPhKwlLMhD1UpnxNo2UhfuLSN9qsnUcPv8HT6ya ZaKj7ZWwMZbAdjaG+eYnoG2KDhNmGnNuYQw+VA32T5vobYtuLc1a0T0I/8fcE2pz LbMHgrnvaPBgaaaUdakwPbOYk1pNewuVGQqoRAPA5IIG7H46Mjmc9my+tiqcHWT9 j2gWC4YfcXchi0Zhgbdb4epfIO+UEx2acCjvdHZqsW91eclMn0woZYpi3aZXHme3 0uh03NBaSZrSPiUKssJ56ky7eXUDIn2d8jtn/jT90JnMozS7vW2Qf9+TofYfNo6K WJyERIQ1Hi0T36kvwtYo4U1NpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnFYU/D iHHkItnDdk/sAjEgp0ONMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpPHeiUaJJrt5kSPo9c1O+EDnoxIH7EA7A2S+oWdK+FMoun9rj1Mll O09zoJN0zOhu3U6BqhEALY6kTHBiQ1VOL0LXh7omzAJG8yB8XaBNSWjAJR321GRZ mofxyJ8uddt9IJJoPcy0wPG1LlU3M2D+h6Awm1NUmXQ5rC7Qs/domXfr0wBSfPsv vKdQxNG+MpAxFPaXlf5sPecxbPSXFK519gArjbtFiItggjeDoCotoD0+abFu6M2w SY1pHOisnLYJyeMBUeIwVDBi2lbpIg56XyrG1isJbdljZ2ZcFzvdRVWuY3GYkYyS EeBBwnJzl2VU0PxQCFLjyEw0CRUp+iK0 -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:28 2025 by rpki-client