$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: qRAAdDrU365k+SKyyZD21K4q4jqD4dbUglzWIFvlDXo= Subject key identifier: 7D:87:AA:A7:A6:66:8A:3D:2B:60:FC:D5:FF:9E:D0:2B:BA:55:18:B6 Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 34AA Signing time: Fri 22 Aug 2025 15:14:59 +0000 Manifest this update: Fri 22 Aug 2025 15:14:58 +0000 Manifest next update: Fri 29 Aug 2025 15:14:58 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: UTdtJjVe+LSF2fpBUXFyqWcwHjkPc/JuEBEQOVviomY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Aug 22 15:14:58 2025 GMT Not After : Aug 29 15:14:58 2025 GMT Subject: CN=68a88973-bd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:f1:1c:16:11:8b:d3:7c:52:61:ad:1a:e3: 8a:09:77:bd:ae:8f:d3:71:3d:cc:9b:3f:e5:dd:34: bd:23:f9:82:06:bb:3b:aa:70:f7:74:3e:b6:13:8c: 48:fa:63:33:19:2a:6b:69:da:94:b1:8f:d9:66:e6: d9:1c:33:b1:1d:75:17:91:fc:e4:a4:ce:68:71:7c: 02:25:53:0e:88:c8:04:68:80:8a:a0:28:d5:5d:af: 8d:a5:46:11:34:86:06:32:0d:f7:a0:3e:a2:9a:99: 2b:ec:05:08:69:ac:f8:f7:0f:f4:a8:b1:2e:91:6f: 0b:71:45:5e:02:00:dc:d0:d9:24:3e:df:cb:1a:42: b4:e7:c3:9e:25:e7:41:f3:70:5c:ac:a5:1d:13:df: 86:dd:1e:bf:b1:8b:90:aa:87:45:fc:cc:c6:19:5a: 91:a4:16:98:1f:6d:78:69:78:c5:78:6d:a9:5a:7e: 3b:3c:6c:19:2d:96:dc:5e:9b:2c:e2:82:08:16:6d: 61:44:c6:72:17:ef:f8:a9:03:c3:c8:8b:bd:10:fd: 2a:6c:e7:3d:fd:75:c2:34:26:ed:32:40:bd:95:94: cc:d7:44:99:ba:e5:2e:d9:bd:c9:af:5b:2c:1d:c9: eb:2d:ba:c2:91:21:75:c3:51:56:c7:05:78:58:62: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:AA:A7:A6:66:8A:3D:2B:60:FC:D5:FF:9E:D0:2B:BA:55:18:B6 X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:61:45:40:c3:be:5f:a6:63:bf:f6:7e:0c:43:a2:55:7a:03: b3:5f:05:b0:60:03:24:3e:dd:4c:84:8c:95:a4:4a:89:8e:45: f7:59:e6:44:6d:f3:37:1e:5d:50:0a:31:c3:b7:af:49:70:88: d6:9b:c7:a9:f9:c9:2c:04:a7:1e:06:58:ff:3b:5c:03:c7:6c: 38:66:49:ae:71:d8:c2:ad:9b:6f:30:74:28:e6:93:41:f4:d2: b4:5a:c0:f7:03:48:5d:70:dd:a7:86:be:37:ee:30:8c:b9:f1: 56:b8:7f:87:f0:7e:b8:b4:e0:00:e6:85:2c:23:76:b6:34:30: 7e:2d:c4:03:87:b4:c4:7a:ea:76:89:ca:95:56:48:f7:05:80: 96:c5:8b:02:39:2e:03:e5:8c:47:91:f6:9d:ab:d6:2a:66:9d: 22:e2:b7:11:61:a2:d6:96:77:70:00:7e:72:d1:a5:28:e4:66: d0:0d:00:6b:30:a0:ff:7f:53:ed:8b:1f:a8:87:0f:6f:69:74: 61:de:d4:c3:d1:67:94:e9:40:2d:ba:16:7a:1b:93:4c:14:68: d0:cf:1d:56:d2:69:6a:fd:74:56:7b:82:81:20:80:5e:59:79: cb:d3:ec:a2:08:4a:22:b8:4d:7f:e9:42:51:d2:eb:71:cb:62: eb:47:e8:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjUwODIyMTUxNDU4WhcNMjUwODI5MTUxNDU4WjAYMRYwFAYD VQQDEw02OGE4ODk3My1iZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HDxHBYRi9N8UmGtGuOKCXe9ro/TcT3Mmz/l3TS9I/mCBrs7qnD3dD62E4xI +mMzGSpradqUsY/ZZubZHDOxHXUXkfzkpM5ocXwCJVMOiMgEaICKoCjVXa+NpUYR NIYGMg33oD6impkr7AUIaaz49w/0qLEukW8LcUVeAgDc0NkkPt/LGkK058OeJedB 83BcrKUdE9+G3R6/sYuQqodF/MzGGVqRpBaYH214aXjFeG2pWn47PGwZLZbcXpss 4oIIFm1hRMZyF+/4qQPDyIu9EP0qbOc9/XXCNCbtMkC9lZTM10SZuuUu2b3Jr1ss HcnrLbrCkSF1w1FWxwV4WGKrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2Hqqem Zoo9K2D81f+e0Cu6VRi2MB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjYUVAw75fpmO/9n4MQ6JVegOzXwWwYAMkPt1MhIyVpEqJjkX3WeZE bfM3Hl1QCjHDt69JcIjWm8ep+cksBKceBlj/O1wDx2w4ZkmucdjCrZtvMHQo5pNB 9NK0WsD3A0hdcN2nhr437jCMufFWuH+H8H64tOAA5oUsI3a2NDB+LcQDh7TEeup2 icqVVkj3BYCWxYsCOS4D5YxHkfadq9YqZp0i4rcRYaLWlndwAH5y0aUo5GbQDQBr MKD/f1Ptix+ohw9vaXRh3tTD0WeU6UAtuhZ6G5NMFGjQzx1W0mlq/XRWe4KBIIBe WXnL0+yiCEoiuE1/6UJR0utxy2LrR+gX -----END CERTIFICATE-----Generated at Sat Aug 23 19:30:47 2025 by rpki-client