$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: 6vFmc3rVuj2R49jCss/H2FN6l2hzdVb/qwr2tQX0f5Q= Subject key identifier: AC:50:B1:31:8E:B1:07:8C:1F:65:61:A7:71:82:03:04:62:6A:8E:5E Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 0215 Signing time: Sat 23 Aug 2025 02:13:23 +0000 Manifest this update: Sat 23 Aug 2025 02:13:22 +0000 Manifest next update: Sat 30 Aug 2025 02:13:22 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 59gDntgI/hMM6OF+QtCk98BdrlND82tIpz1uyeFrRnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Aug 23 02:13:22 2025 GMT Not After : Aug 30 02:13:22 2025 GMT Subject: CN=68a923c2-dd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:c6:28:bc:2f:e1:8d:f5:84:d2:ea:a7:3e: ea:4f:84:12:8d:d9:67:15:27:62:e0:0a:d2:b4:69: 96:27:d0:4b:bd:26:f2:6c:17:08:23:2e:e9:ee:15: ca:79:d1:92:e7:18:ec:53:fc:8e:b0:8d:ca:2d:3c: a4:5a:bc:b8:5f:db:62:8e:f5:3b:72:12:45:29:0a: 34:06:e9:82:df:c5:58:5f:75:b9:bc:cc:2f:96:ca: 30:30:5a:8a:fe:a9:02:af:93:73:fa:30:98:a0:5d: 6f:e0:94:ee:2d:d2:8e:57:67:c4:a5:0d:3c:8b:7f: 6e:97:5f:fc:84:57:bc:6d:1a:16:fe:45:43:ac:1c: 90:e5:3e:98:4e:18:75:0a:9e:04:e0:b5:08:02:51: 0e:68:02:21:f7:19:76:dc:ca:2f:fc:84:79:53:ab: d5:a4:42:01:19:35:8a:ae:2f:e0:79:7b:74:43:b8: ce:e5:8e:4e:87:4a:87:73:24:57:01:f6:5d:30:de: cb:ed:d8:46:12:4f:29:07:47:b0:31:3b:28:63:9e: 49:20:79:19:bc:97:14:7e:28:b1:fd:86:4c:67:9c: 71:bc:0b:aa:8f:b9:79:56:a0:6c:c1:62:77:6b:ea: a4:0a:65:88:b6:f3:a9:95:bc:ad:15:7a:5e:40:c5: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:50:B1:31:8E:B1:07:8C:1F:65:61:A7:71:82:03:04:62:6A:8E:5E X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:17:2b:5e:5c:44:39:59:2c:db:1b:14:6d:50:3d:69:29:81: a6:1f:40:ab:78:da:03:f3:eb:7c:62:b1:ec:55:0f:19:92:6c: 6a:3b:51:58:a1:e8:8b:4f:56:99:76:1a:d5:6d:4f:fc:12:b0: 8f:d2:71:c1:97:ba:59:de:0a:e6:8e:7c:b5:b1:4f:51:d7:cc: 51:3f:a2:5a:67:c2:24:e3:ad:e5:ca:7a:ea:13:b2:47:b9:86: ef:f1:6c:f4:2c:66:ee:12:74:22:6c:ac:58:2a:18:85:84:30: 78:ce:aa:51:d6:8f:d0:5f:64:da:31:2e:34:25:2a:8c:8d:87: ab:d7:01:91:69:c5:29:38:c6:91:f8:a7:f8:85:c0:c4:73:fe: c6:0a:0f:98:14:52:16:ba:d0:3e:48:a2:a5:f3:56:9d:8a:2f: 85:d6:dc:66:f0:8f:0f:6b:ce:67:74:0b:e8:77:9f:4c:31:f7: 54:a4:9c:51:09:6d:e1:64:4b:5e:27:23:99:34:ad:d7:3e:8d: 8b:58:6e:65:ca:09:ca:30:3d:ad:e2:10:98:1d:67:03:e6:11: f8:ad:ac:ec:57:7a:61:a3:90:41:71:68:36:05:b7:55:17:97: 53:82:04:fb:7b:45:b5:dd:42:24:76:52:43:2e:08:ea:31:74: 57:14:3a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUwODIzMDIxMzIyWhcNMjUwODMwMDIxMzIyWjAYMRYwFAYD VQQDEw02OGE5MjNjMi1kZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nzGKLwv4Y31hNLqpz7qT4QSjdlnFSdi4ArStGmWJ9BLvSbybBcIIy7p7hXK edGS5xjsU/yOsI3KLTykWry4X9tijvU7chJFKQo0BumC38VYX3W5vMwvlsowMFqK /qkCr5Nz+jCYoF1v4JTuLdKOV2fEpQ08i39ul1/8hFe8bRoW/kVDrByQ5T6YThh1 Cp4E4LUIAlEOaAIh9xl23Mov/IR5U6vVpEIBGTWKri/geXt0Q7jO5Y5Oh0qHcyRX AfZdMN7L7dhGEk8pB0ewMTsoY55JIHkZvJcUfiix/YZMZ5xxvAuqj7l5VqBswWJ3 a+qkCmWItvOplbytFXpeQMW8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxQsTGO sQeMH2Vhp3GCAwRiao5eMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChFyteXEQ5WSzbGxRtUD1pKYGmH0CreNoD8+t8YrHsVQ8ZkmxqO1FY oeiLT1aZdhrVbU/8ErCP0nHBl7pZ3grmjny1sU9R18xRP6JaZ8Ik463lynrqE7JH uYbv8Wz0LGbuEnQibKxYKhiFhDB4zqpR1o/QX2TaMS40JSqMjYer1wGRacUpOMaR +Kf4hcDEc/7GCg+YFFIWutA+SKKl81adii+F1txm8I8Pa85ndAvod59MMfdUpJxR CW3hZEteJyOZNK3XPo2LWG5lygnKMD2t4hCYHWcD5hH4razsV3pho5BBcWg2BbdV F5dTggT7e0W13UIkdlJDLgjqMXRXFDoC -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:41 2025 by rpki-client