$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json) Hash identifier: UucxoTIx54OFNwAakt48LKt+Smv2glxVMDcMzTvVL8w= Subject key identifier: FF:55:48:3C:5B:0B:BE:FA:B6:EE:2D:EF:D4:E2:ED:56:85:FE:36:A6 Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:50:58 +0000 Manifest this update: Sat 23 Aug 2025 05:50:57 +0000 Manifest next update: Sat 30 Aug 2025 05:50:57 +0000 Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: jYeSwnBOAQP1kgL9fwVTtSHeXDf1YZU4+EseiTgQli4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Validity Not Before: Aug 23 05:50:57 2025 GMT Not After : Aug 30 05:50:57 2025 GMT Subject: CN=68a956c2-d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7b:07:4d:2d:34:37:95:a6:93:d2:7a:54:68: 18:88:fa:cc:16:76:27:25:d2:d8:f7:0d:33:a2:3a: 77:21:59:8c:f0:87:5d:5a:5b:93:96:e4:5b:1c:3a: cf:4c:36:5f:b8:d3:8e:e1:37:72:3e:76:7d:7c:4f: e7:36:52:9d:fa:65:a3:18:d3:dc:21:40:02:f1:61: eb:e2:6f:da:af:74:7d:97:0c:c0:69:02:20:3b:9e: 7d:6d:e0:0c:30:10:08:b1:f1:2c:a3:c3:24:4f:9a: 07:b8:b8:f3:5d:59:ff:75:e3:1b:f8:d6:fa:55:dc: a8:ce:93:d3:da:77:22:24:a9:44:b6:0a:4f:a3:6f: c2:33:9f:f0:f6:24:d2:27:b6:fd:20:30:3c:0b:bb: dc:b7:99:73:da:be:aa:16:9b:7b:0e:2e:ce:a5:48: 6b:dd:ae:bb:64:69:f4:ea:c9:91:36:20:5a:79:14: 74:d9:89:a0:8a:4e:73:d5:e3:b0:0e:c2:e9:ce:3f: f6:9d:96:42:b8:69:5a:ec:7a:b3:0f:a0:fe:57:69: 57:07:2a:2c:e9:80:5f:fa:ed:5b:ad:9e:23:ae:d9: 8a:a2:e8:d1:f4:09:a5:4f:f6:62:32:6b:9a:29:9f: de:e9:55:96:4e:06:5d:35:95:bb:3c:2d:6c:44:49: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:48:3C:5B:0B:BE:FA:B6:EE:2D:EF:D4:E2:ED:56:85:FE:36:A6 X509v3 Authority Key Identifier: keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:59:0d:3e:7e:ce:c7:62:0a:2b:96:ab:34:6d:45:a0:e5:87: 30:e5:02:6f:e0:0d:23:f7:ee:1d:c2:ba:ad:9f:6d:1b:b7:e4: 9f:fb:80:f3:da:01:7d:89:c0:fe:a8:be:85:54:15:d8:e2:bf: 32:f9:c8:9b:d9:05:92:05:38:fa:2b:4b:23:e5:71:7f:0b:a2: 8a:4d:02:45:96:6f:ec:5d:1f:a6:93:99:b6:f5:5f:14:4e:2e: 0c:2d:67:c0:4d:b1:53:fb:bf:64:8a:43:ec:7d:02:1d:27:d7: 9c:d9:89:af:59:19:62:4a:ff:c3:5c:0e:a4:df:47:63:a2:42: 6a:1e:c5:76:03:97:38:3e:6f:7d:65:e6:5d:32:bd:0a:10:10: 16:5d:5f:4c:f8:4c:9c:5c:ce:15:18:91:7f:1d:3f:41:b3:4f: b0:7d:1b:67:00:0d:6f:42:5b:94:5a:32:08:c7:c4:b3:0f:dc: 4f:1f:47:18:86:97:7d:a0:6e:0c:ac:03:15:c5:26:c5:82:f2: 8e:eb:28:6f:7b:22:c1:65:25:37:f1:b8:26:9e:4d:24:ee:39: fd:e0:be:4b:3c:53:46:be:86:4d:73:6f:b6:f4:82:a8:21:b3: 70:58:b0:d7:2e:2f:4b:fe:ff:ca:67:cd:33:9a:fe:9c:3e:4f: 34:cf:9e:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD QzJGQ0Q1RUQwHhcNMjUwODIzMDU1MDU3WhcNMjUwODMwMDU1MDU3WjAYMRYwFAYD VQQDEw02OGE5NTZjMi1kMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73sHTS00N5Wmk9J6VGgYiPrMFnYnJdLY9w0zojp3IVmM8IddWluTluRbHDrP TDZfuNOO4TdyPnZ9fE/nNlKd+mWjGNPcIUAC8WHr4m/ar3R9lwzAaQIgO559beAM MBAIsfEso8MkT5oHuLjzXVn/deMb+Nb6VdyozpPT2nciJKlEtgpPo2/CM5/w9iTS J7b9IDA8C7vct5lz2r6qFpt7Di7OpUhr3a67ZGn06smRNiBaeRR02Ymgik5z1eOw DsLpzj/2nZZCuGla7HqzD6D+V2lXByos6YBf+u1brZ4jrtmKoujR9AmlT/ZiMmua KZ/e6VWWTgZdNZW7PC1sREno1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9VSDxb C776tu4t79Ti7VaF/jamMB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1 QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByWQ0+fs7HYgorlqs0bUWg5Ycw5QJv4A0j9+4dwrqtn20bt+Sf+4Dz 2gF9icD+qL6FVBXY4r8y+cib2QWSBTj6K0sj5XF/C6KKTQJFlm/sXR+mk5m29V8U Ti4MLWfATbFT+79kikPsfQIdJ9ec2YmvWRliSv/DXA6k30djokJqHsV2A5c4Pm99 ZeZdMr0KEBAWXV9M+EycXM4VGJF/HT9Bs0+wfRtnAA1vQluUWjIIx8SzD9xPH0cY hpd9oG4MrAMVxSbFgvKO6yhveyLBZSU38bgmnk0k7jn94L5LPFNGvoZNc2+29IKo IbNwWLDXLi9L/v/KZ80zmv6cPk80z56q -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:19 2025 by rpki-client