$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: FBe0yFR/ZRAZ/dRJT8UIbH9r0w+t6HdYEKvaoXiFqZw= Subject key identifier: 9F:69:BB:92:FC:C3:C0:7F:A2:12:51:04:0F:5F:35:4D:F0:A8:C7:4E Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 066D Signing time: Fri 22 Aug 2025 22:26:50 +0000 Manifest this update: Fri 22 Aug 2025 22:26:50 +0000 Manifest next update: Fri 29 Aug 2025 22:26:50 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: O6fhO58vjEkph1qlXk8/+usOlSdcTQQGXXclHzzYz3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Aug 22 22:26:50 2025 GMT Not After : Aug 29 22:26:50 2025 GMT Subject: CN=68a8eeaa-f983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:53:35:2f:e0:01:1b:41:08:c1:b5:fd:30: 67:c9:f1:48:34:15:45:75:65:60:ff:60:03:a9:e6: 54:63:98:23:51:4e:d4:a0:c9:b0:9c:e8:77:9a:e4: 2b:d2:3c:df:c4:24:0a:07:fd:a4:f6:83:a1:ff:64: 7a:99:ef:dd:9c:33:7f:b1:14:ff:54:24:74:f3:4b: e0:12:1e:f9:d4:8f:ec:9b:28:30:d5:40:9c:3a:23: db:62:6e:82:bc:b6:dd:6d:65:e3:bd:18:32:7c:26: 35:ac:4c:49:9d:cb:d4:49:7e:35:ae:9a:8a:85:97: 0a:e5:77:e9:b4:59:6e:8f:e1:52:50:86:02:e1:fd: 02:50:f5:86:cd:12:f0:40:80:fd:7e:19:7c:b3:93: 04:7e:df:6a:c3:ab:9f:ed:f5:26:7b:8b:bf:fc:6e: 7e:03:70:4a:58:c6:2d:fb:a6:c4:04:60:df:de:c7: 5d:ab:4d:2d:8b:10:23:7e:36:44:00:fc:89:21:60: 7b:11:8d:5a:3d:f2:7f:e3:e2:7e:aa:8b:e6:73:c6: ea:10:4f:c0:b5:84:30:f5:85:19:51:66:20:f1:e0: 8f:34:2f:c0:91:95:2e:71:6a:51:16:04:7c:14:ef: c4:b6:04:7d:13:99:7f:19:44:ba:7c:39:ff:e9:20: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:BB:92:FC:C3:C0:7F:A2:12:51:04:0F:5F:35:4D:F0:A8:C7:4E X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ac:56:65:db:18:46:4a:d7:37:e5:93:3e:bb:63:04:1d:9f: 0d:b7:84:97:f5:65:dc:d1:96:3d:f8:cc:ab:dc:72:04:5f:37: b2:da:9a:28:5c:7d:0a:1f:a9:2a:48:aa:f1:d2:8f:7c:a3:04: eb:3c:90:65:1c:54:2f:f9:80:91:4e:cb:99:df:ed:b4:49:b5: 8d:68:34:43:bd:79:a0:ff:3a:ba:06:f3:54:d9:d6:84:f0:46: 46:7f:eb:f1:0a:47:bf:7c:99:b3:be:66:85:c6:7c:f2:e6:58: 51:20:37:ca:43:a9:06:c8:ac:de:bc:f7:5e:61:9e:58:13:f4: af:96:f4:e2:e4:64:95:1e:2e:e2:18:1e:f8:54:16:26:21:51: 98:dd:f6:0a:5b:80:91:6f:87:42:c3:e7:5d:c4:b9:75:73:0e: ae:f9:56:e2:a2:9e:1a:37:00:2a:36:0a:c5:19:83:47:47:37: c0:07:1b:14:2d:4a:6b:e0:fa:b9:d8:d5:57:52:54:bb:c3:34: 6f:c6:b4:b7:33:1c:7f:e7:1f:60:c2:4e:86:cb:6a:4b:a4:56: b0:50:9f:0c:24:7f:99:9d:66:73:af:a3:3d:c0:b4:f0:01:1f: 40:0c:67:92:7a:84:9f:c2:65:b6:6c:fd:f3:4a:1d:e2:e4:09: 21:40:d4:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwODIyMjIyNjUwWhcNMjUwODI5MjIyNjUwWjAYMRYwFAYD VQQDEw02OGE4ZWVhYS1mOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc5TNS/gARtBCMG1/TBnyfFINBVFdWVg/2ADqeZUY5gjUU7UoMmwnOh3muQr 0jzfxCQKB/2k9oOh/2R6me/dnDN/sRT/VCR080vgEh751I/smygw1UCcOiPbYm6C vLbdbWXjvRgyfCY1rExJncvUSX41rpqKhZcK5XfptFluj+FSUIYC4f0CUPWGzRLw QID9fhl8s5MEft9qw6uf7fUme4u//G5+A3BKWMYt+6bEBGDf3sddq00tixAjfjZE APyJIWB7EY1aPfJ/4+J+qovmc8bqEE/AtYQw9YUZUWYg8eCPNC/AkZUucWpRFgR8 FO/EtgR9E5l/GUS6fDn/6SBNswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9pu5L8 w8B/ohJRBA9fNU3wqMdOMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUrFZl2xhGStc35ZM+u2MEHZ8Nt4SX9WXc0ZY9+Myr3HIEXzey2poo XH0KH6kqSKrx0o98owTrPJBlHFQv+YCRTsuZ3+20SbWNaDRDvXmg/zq6BvNU2daE 8EZGf+vxCke/fJmzvmaFxnzy5lhRIDfKQ6kGyKzevPdeYZ5YE/SvlvTi5GSVHi7i GB74VBYmIVGY3fYKW4CRb4dCw+ddxLl1cw6u+Vbiop4aNwAqNgrFGYNHRzfABxsU LUpr4Pq52NVXUlS7wzRvxrS3Mxx/5x9gwk6Gy2pLpFawUJ8MJH+ZnWZzr6M9wLTw AR9ADGeSeoSfwmW2bP3zSh3i5AkhQNTh -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:49 2025 by rpki-client