$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: 87ePZik0aiphx+HfqpeWZnJA5ED7SHekPhrvzdUbIYo= Subject key identifier: 4A:DC:2D:8E:A9:F7:F5:94:D7:56:41:8B:A1:DF:4E:18:96:D3:0C:D9 Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 34B1 Signing time: Fri 22 Aug 2025 14:34:08 +0000 Manifest this update: Fri 22 Aug 2025 14:34:07 +0000 Manifest next update: Fri 29 Aug 2025 14:34:07 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: Eh0lEFUoHVM8ZBHXF4DXP0Q0hSU57YZ+XqCWngzwMdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Aug 22 14:34:07 2025 GMT Not After : Aug 29 14:34:07 2025 GMT Subject: CN=68a87fdf-aeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:23:21:19:ae:1a:0f:79:ca:4e:fa:31:83: 04:c4:5e:ed:f1:df:da:e2:a7:e7:4b:2a:0d:8c:af: e7:48:6d:7a:2a:3b:a3:3c:2b:d3:a8:22:5a:77:29: 53:39:40:a9:be:48:dc:fc:30:da:22:27:e0:72:13: f2:da:fb:27:e1:e0:29:f3:85:4b:ea:e9:1c:7d:41: 5e:db:33:64:1e:90:7b:64:e6:a4:6d:3e:be:8f:d5: 49:bf:28:3e:f2:d9:e9:e7:1e:b9:61:07:84:a2:03: 66:d1:42:40:b1:9a:b9:86:eb:45:ab:10:24:c7:cc: 0d:8a:d4:d3:7b:0c:96:ae:f2:90:4e:8a:3f:b8:f6: 5b:b0:eb:ab:db:fb:37:69:cc:01:bd:9a:3d:ff:98: a6:ce:ba:2b:5a:37:d1:30:28:bc:f7:ac:a7:1d:df: 54:a4:ec:ff:4b:51:f7:5a:5c:1e:e6:f2:b2:00:73: 76:81:38:a4:8d:d6:dc:74:55:1d:29:67:3e:19:dd: 26:60:ec:b3:84:3d:1a:32:e7:c3:ff:ad:7d:83:8a: 3c:61:a1:5c:b3:66:e2:d5:a5:c3:36:1c:86:58:32: 17:89:27:6b:4d:bd:9c:60:d9:61:93:5a:a5:1a:de: 18:65:5c:b1:27:33:20:58:65:04:9a:38:c8:f9:20: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DC:2D:8E:A9:F7:F5:94:D7:56:41:8B:A1:DF:4E:18:96:D3:0C:D9 X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b2:56:d2:32:a8:f1:46:a5:38:7d:00:80:f4:4a:6a:76:21: ca:3f:4a:22:a6:e4:40:5c:00:b7:b5:85:8f:f9:ca:e5:f2:1a: 2b:1c:85:6f:08:49:c0:6a:60:75:42:30:09:2d:d6:2d:3d:63: 66:83:82:44:79:7c:f4:b2:9d:98:41:cb:53:fa:aa:c7:09:9a: ea:df:51:e0:81:1c:b6:ee:89:47:59:c0:16:05:fa:42:4b:b1: f7:f2:4a:30:bf:0f:57:46:8a:3f:72:62:4e:90:e3:57:4c:c9: b4:6c:95:fa:75:d4:c6:ca:f1:02:7f:31:75:b3:58:f7:44:84: 49:1a:0a:c0:88:70:29:2f:5c:59:13:2e:ee:6c:e2:d4:28:a4: 85:28:50:ea:97:36:f3:5f:46:a4:1d:45:e9:56:6a:be:9e:c3: 90:5e:60:9d:24:c5:75:b4:53:c7:a6:06:a9:19:72:4d:24:dc: 3d:2d:53:ab:07:0a:56:7d:91:1a:fb:bf:63:46:d9:f0:3d:cf: b0:b2:d3:1a:63:57:7d:15:97:2a:81:6d:9e:99:86:4b:cc:ee: 16:77:cc:ea:8f:88:f6:2e:a1:6a:cf:07:1b:61:43:6c:1e:2f: 2a:74:b1:04:fb:89:aa:42:e6:22:e4:dc:db:e7:b3:69:1e:3c: 93:c8:76:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjUwODIyMTQzNDA3WhcNMjUwODI5MTQzNDA3WjAYMRYwFAYD VQQDEw02OGE4N2ZkZi1hZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mEjIRmuGg95yk76MYMExF7t8d/a4qfnSyoNjK/nSG16KjujPCvTqCJadylT OUCpvkjc/DDaIifgchPy2vsn4eAp84VL6ukcfUFe2zNkHpB7ZOakbT6+j9VJvyg+ 8tnp5x65YQeEogNm0UJAsZq5hutFqxAkx8wNitTTewyWrvKQToo/uPZbsOur2/s3 acwBvZo9/5imzrorWjfRMCi896ynHd9UpOz/S1H3Wlwe5vKyAHN2gTikjdbcdFUd KWc+Gd0mYOyzhD0aMufD/619g4o8YaFcs2bi1aXDNhyGWDIXiSdrTb2cYNlhk1ql Gt4YZVyxJzMgWGUEmjjI+SBNdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErcLY6p 9/WU11ZBi6HfThiW0wzZMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXslbSMqjxRqU4fQCA9EpqdiHKP0oipuRAXAC3tYWP+crl8horHIVv CEnAamB1QjAJLdYtPWNmg4JEeXz0sp2YQctT+qrHCZrq31HggRy27olHWcAWBfpC S7H38kowvw9XRoo/cmJOkONXTMm0bJX6ddTGyvECfzF1s1j3RIRJGgrAiHApL1xZ Ey7ubOLUKKSFKFDqlzbzX0akHUXpVmq+nsOQXmCdJMV1tFPHpgapGXJNJNw9LVOr BwpWfZEa+79jRtnwPc+wstMaY1d9FZcqgW2emYZLzO4Wd8zqj4j2LqFqzwcbYUNs Hi8qdLEE+4mqQuYi5Nzb57NpHjyTyHY/ -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:35 2025 by rpki-client