$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: IKYtdKR9EhV0bxvdBPSW5/hsGa9FgIGiazqFOg7XJb8= Subject key identifier: 2B:0D:CE:6D:60:A0:CA:EE:A0:73:A5:4D:02:A6:24:0D:A9:FD:FF:A2 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0552 Signing time: Fri 22 Aug 2025 23:37:15 +0000 Manifest this update: Fri 22 Aug 2025 23:37:15 +0000 Manifest next update: Fri 29 Aug 2025 23:37:15 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: 2cEzsHdgAKYM03EzOD7ITFXHYtuq0BaBAzpLq/JUtgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Aug 22 23:37:15 2025 GMT Not After : Aug 29 23:37:15 2025 GMT Subject: CN=68a8ff2b-fb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:19:f3:b1:cb:fb:a8:7c:7d:8c:85:ba:5a: 86:19:d2:62:35:36:f6:32:28:9e:33:e2:19:1b:a8: 51:29:3d:c3:98:80:db:bf:ce:ec:1f:45:27:9f:9e: b0:26:94:da:2d:de:c5:c0:08:2f:c7:c6:30:3c:48: c8:fa:c5:84:85:e1:49:0a:1f:54:3e:f4:04:f4:70: 63:55:87:56:66:b1:9a:b6:9a:c2:af:b7:7c:5e:d5: 5f:8e:96:34:09:f9:8f:6e:57:58:12:45:e0:eb:4c: 21:12:79:18:a1:45:45:7f:b3:3d:99:60:8c:a8:d9: 63:ab:9d:e6:3b:e4:7f:46:28:02:7b:ea:bc:16:ba: dd:2d:d3:53:fb:b0:09:35:cf:73:60:c6:c9:33:d8: c6:d8:22:89:f9:cf:4f:07:a8:51:45:f5:d5:b4:85: 19:38:af:63:b4:3e:2c:12:07:6b:6b:23:7c:9b:59: c9:96:bc:cd:7b:33:0e:86:f5:cb:7d:2d:df:4a:66: 14:35:12:a5:e6:48:e7:35:b7:ec:d6:62:22:0e:e8: e5:eb:35:81:db:cd:fc:01:3c:9b:f3:36:5b:2e:29: 52:df:92:ab:91:69:d1:85:cc:8b:32:cd:e5:90:c8: 5a:69:e8:68:42:09:b4:1d:09:fb:a8:25:98:56:21: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0D:CE:6D:60:A0:CA:EE:A0:73:A5:4D:02:A6:24:0D:A9:FD:FF:A2 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b4:20:e0:27:10:c4:af:ea:62:c3:2b:d9:fa:0b:f8:9b:10: e7:2f:50:02:f6:08:fd:ca:d1:43:e4:4f:59:6e:d1:0e:97:b4: 4b:c4:1a:e8:5f:15:ea:3f:eb:4f:03:24:61:61:9b:1f:e8:d8: 8f:35:6b:f4:f7:af:b1:74:15:76:63:65:bc:1b:3e:e7:80:0c: e2:39:ed:04:c2:55:23:9f:a5:d2:71:70:b4:87:1c:31:db:92: 5e:d8:2d:68:42:e8:9c:52:5c:89:12:a2:78:35:5e:13:5c:ed: 55:d5:89:ca:c3:47:32:87:16:d5:f7:32:a0:00:73:13:59:8b: 9e:43:13:c3:37:9a:2e:2f:41:d7:47:7d:ed:a3:69:c3:6e:6d: 50:e1:00:ad:76:54:59:aa:b1:b1:c1:1f:3b:57:75:76:ad:18: 9f:05:bb:2b:1e:1e:bd:44:74:37:99:98:45:4c:0f:70:ab:27: 45:75:c1:28:36:aa:48:2d:df:2b:16:24:ff:24:84:41:a3:5c: c1:bf:a7:d4:d4:20:d7:dd:13:ad:cd:04:44:a5:88:16:b7:dd: 51:b5:16:32:ad:d1:58:2c:27:fe:71:fe:c9:37:78:c1:5b:ae: 6b:05:d4:75:a5:66:2c:73:13:65:e9:06:22:a8:3e:ac:84:80: ba:64:19:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUwODIyMjMzNzE1WhcNMjUwODI5MjMzNzE1WjAYMRYwFAYD VQQDEw02OGE4ZmYyYi1mYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUYZ87HL+6h8fYyFulqGGdJiNTb2MiieM+IZG6hRKT3DmIDbv87sH0Unn56w JpTaLd7FwAgvx8YwPEjI+sWEheFJCh9UPvQE9HBjVYdWZrGatprCr7d8XtVfjpY0 CfmPbldYEkXg60whEnkYoUVFf7M9mWCMqNljq53mO+R/RigCe+q8FrrdLdNT+7AJ Nc9zYMbJM9jG2CKJ+c9PB6hRRfXVtIUZOK9jtD4sEgdrayN8m1nJlrzNezMOhvXL fS3fSmYUNRKl5kjnNbfs1mIiDujl6zWB2838ATyb8zZbLilS35KrkWnRhcyLMs3l kMhaaehoQgm0HQn7qCWYViGaeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsNzm1g oMruoHOlTQKmJA2p/f+iMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAttCDgJxDEr+piwyvZ+gv4mxDnL1AC9gj9ytFD5E9ZbtEOl7RLxBro XxXqP+tPAyRhYZsf6NiPNWv096+xdBV2Y2W8Gz7ngAziOe0EwlUjn6XScXC0hxwx 25Je2C1oQuicUlyJEqJ4NV4TXO1V1YnKw0cyhxbV9zKgAHMTWYueQxPDN5ouL0HX R33to2nDbm1Q4QCtdlRZqrGxwR87V3V2rRifBbsrHh69RHQ3mZhFTA9wqydFdcEo NqpILd8rFiT/JIRBo1zBv6fU1CDX3ROtzQREpYgWt91RtRYyrdFYLCf+cf7JN3jB W65rBdR1pWYscxNl6QYiqD6shIC6ZBkS -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:40 2025 by rpki-client