$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: pKEifa7Ysx/ujuI537T8g/sPc/45OxPXSUpMvoVXPlU= Subject key identifier: 63:D2:6E:2E:F5:9A:41:F0:FB:66:90:BB:A3:37:F6:72:A1:80:B0:95 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 02AE Signing time: Sat 23 Aug 2025 02:54:09 +0000 Manifest this update: Sat 23 Aug 2025 02:54:09 +0000 Manifest next update: Sat 30 Aug 2025 02:54:09 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: P4I83y8BsyRk06Wu8kauJhzZMTQAWHt8Y4n2IQiWHGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Aug 23 02:54:09 2025 GMT Not After : Aug 30 02:54:09 2025 GMT Subject: CN=68a92d51-d2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:66:05:ad:56:b6:e7:c5:89:64:ff:1f:7e: 2c:94:33:5d:c9:39:73:cd:30:11:3b:0a:ed:79:7a: 1a:95:7a:f5:79:c6:a7:d0:01:d7:2d:0f:c0:2d:3f: 0b:46:9d:a8:2e:fd:e0:14:db:ce:ed:5e:b1:c0:b2: 2e:39:cb:cc:a2:de:81:0f:5b:c4:d0:e9:9f:2f:58: d4:5c:8b:9a:b9:fa:28:71:28:07:ed:a0:ca:12:ad: e7:e4:82:f0:c7:5c:2c:bc:2b:e5:e1:b8:84:70:44: bb:50:05:6d:fb:8c:03:61:0f:66:c9:4f:c7:b4:27: dc:e0:9f:9b:5f:7d:ab:0d:78:b9:fa:ce:8e:de:bb: a0:36:bc:10:f9:a0:39:ca:9b:6c:c6:0d:93:f8:db: 25:97:ae:6a:85:cb:35:42:7d:6c:02:3e:3c:81:45: 69:b1:d8:1b:8f:09:a9:03:87:17:c0:a6:42:2e:ea: 9b:13:7a:0d:6e:3f:ae:0f:3e:74:61:10:c2:d7:74: a0:6b:1c:29:76:18:f2:f3:0a:d8:79:a6:95:80:dc: 4e:06:ea:bf:91:74:2e:41:db:68:83:9e:42:7d:03: 72:46:c4:4e:5f:ea:4f:09:a7:e3:97:0d:2c:2d:b1: cf:5e:26:b1:ce:3f:58:bd:80:c1:ec:1f:35:fc:de: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D2:6E:2E:F5:9A:41:F0:FB:66:90:BB:A3:37:F6:72:A1:80:B0:95 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:92:ba:a5:ed:76:fc:02:58:54:ba:9c:d6:24:7d:01:c0:43: e4:48:ed:33:b5:ad:e5:5d:99:df:c4:8a:aa:3a:85:48:5c:a5: 00:ba:82:3e:0b:50:ea:77:cb:d6:cd:35:35:6f:60:02:4e:5d: c9:8e:2d:b0:a3:d1:2a:3e:7a:ad:ef:80:15:84:7d:33:e2:9c: 81:77:23:d3:87:2e:11:f4:d4:95:66:01:3d:5e:d9:52:71:48: fa:48:fb:f2:62:81:c5:4e:c9:04:81:dd:27:e1:2e:c5:75:1e: b5:25:73:e0:7a:1d:79:f3:c9:69:f1:5d:d6:2a:98:d3:7e:a9: c9:e3:ae:71:e0:f8:1d:de:75:73:6f:e0:d9:05:41:b3:36:70: dd:bc:c3:33:89:56:1b:65:ad:e0:d1:21:b8:3b:b5:9e:ec:bd: b8:e6:94:f4:71:32:52:37:bb:ee:9c:9e:58:de:97:12:cf:6f: 6d:97:4d:22:03:8f:c2:15:f2:5c:d2:cc:c7:c0:67:04:0b:ea: f2:c5:b6:6a:4d:58:8d:a2:ef:9d:f9:84:1c:27:96:0b:93:f9: 7b:3a:53:58:a5:bd:80:6d:09:f2:6f:f0:af:1c:af:89:99:77: 0f:c3:c3:54:c9:08:33:80:81:02:01:8d:04:d1:bf:32:5d:9d: b2:f4:a2:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUwODIzMDI1NDA5WhcNMjUwODMwMDI1NDA5WjAYMRYwFAYD VQQDEw02OGE5MmQ1MS1kMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYxmBa1WtufFiWT/H34slDNdyTlzzTAROwrteXoalXr1ecan0AHXLQ/ALT8L Rp2oLv3gFNvO7V6xwLIuOcvMot6BD1vE0OmfL1jUXIuaufoocSgH7aDKEq3n5ILw x1wsvCvl4biEcES7UAVt+4wDYQ9myU/HtCfc4J+bX32rDXi5+s6O3rugNrwQ+aA5 yptsxg2T+Nsll65qhcs1Qn1sAj48gUVpsdgbjwmpA4cXwKZCLuqbE3oNbj+uDz50 YRDC13Sgaxwpdhjy8wrYeaaVgNxOBuq/kXQuQdtog55CfQNyRsROX+pPCafjlw0s LbHPXiaxzj9YvYDB7B81/N446QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPSbi71 mkHw+2aQu6M39nKhgLCVMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUkrql7Xb8AlhUupzWJH0BwEPkSO0zta3lXZnfxIqqOoVIXKUAuoI+ C1Dqd8vWzTU1b2ACTl3Jji2wo9EqPnqt74AVhH0z4pyBdyPThy4R9NSVZgE9XtlS cUj6SPvyYoHFTskEgd0n4S7FdR61JXPgeh1588lp8V3WKpjTfqnJ465x4Pgd3nVz b+DZBUGzNnDdvMMziVYbZa3g0SG4O7We7L245pT0cTJSN7vunJ5Y3pcSz29tl00i A4/CFfJc0szHwGcEC+ryxbZqTViNou+d+YQcJ5YLk/l7OlNYpb2AbQnyb/CvHK+J mXcPw8NUyQgzgIECAY0E0b8yXZ2y9KIO -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:07 2025 by rpki-client