$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json) Hash identifier: mcbcmKpvzuPVQkLXNFMbn2Mrb9xgASDIhqah2F+i0Es= Subject key identifier: 37:48:44:7C:2C:93:D7:B1:DE:C9:4D:EA:82:90:D3:84:5F:CF:E7:53 Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft Manifest number: 01B1 Signing time: Fri 22 Aug 2025 20:19:46 +0000 Manifest this update: Fri 22 Aug 2025 20:19:46 +0000 Manifest next update: Fri 29 Aug 2025 20:19:46 +0000 Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: HqzDHPpdPU8kvBVz+WreOoseDVDmKrV3jExZyLB65s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Validity Not Before: Aug 22 20:19:46 2025 GMT Not After : Aug 29 20:19:46 2025 GMT Subject: CN=68a8d0e2-0329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:09:3d:e7:bf:62:9e:8a:06:21:dd:05:44: d8:e4:6f:3e:9f:fd:52:0e:ad:eb:83:80:8b:19:6c: 4d:dd:46:70:20:df:83:7b:0b:15:45:c8:d1:0e:70: bf:20:90:70:cf:e6:92:8c:68:27:74:3c:b4:80:90: ea:49:ba:9a:d7:5a:21:0f:a5:f7:15:fe:f0:d1:e5: c5:7a:ef:53:ac:d4:d4:23:7d:7b:69:0a:e6:e2:46: 1b:0f:3c:3a:f4:c8:7c:92:71:d6:1c:8d:4a:09:56: dd:ea:08:50:7e:be:2d:d5:58:ad:35:10:44:08:49: e1:21:f3:b2:c5:96:11:36:3f:bc:4b:e4:7a:c1:f5: 64:72:76:32:20:74:fe:d5:c5:34:db:b9:a9:c9:44: 14:9b:3d:bf:2c:1d:02:c2:f8:6e:1d:95:61:28:68: c7:c7:e3:c5:e2:91:86:b3:9f:5d:e3:3d:83:85:29: 14:b2:17:38:ec:62:cc:84:29:b4:9e:1d:bc:a5:1f: 80:ac:28:58:3a:3a:49:e9:26:c3:19:a7:58:28:d6: 43:35:d4:f7:b6:2f:7b:ba:10:7e:3d:2c:99:2b:ca: ee:b5:d0:fd:ba:55:89:df:25:43:7d:8e:c9:b3:83: 8e:79:c1:b0:ad:0f:0a:5a:55:6b:11:36:5f:01:35: a0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:48:44:7C:2C:93:D7:B1:DE:C9:4D:EA:82:90:D3:84:5F:CF:E7:53 X509v3 Authority Key Identifier: keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b4:d9:b1:ba:c8:cb:c4:46:bf:05:df:82:e0:ed:2f:a7:d7: f4:cc:5e:31:c4:f7:d3:e3:73:1b:76:b0:a9:73:69:0f:89:e9: 95:a0:14:a7:7a:3a:d5:2a:72:b0:9c:70:cb:23:e6:9d:1f:5f: 81:9f:ab:4c:d0:1e:bf:e6:20:40:f2:ca:c2:cd:83:e4:b1:a4: fa:8c:68:37:58:ca:9b:d9:cd:e0:c9:47:12:7f:e7:fc:15:12: fc:b6:cd:00:89:a6:08:c1:b0:2f:b6:b4:4a:4c:17:e0:46:f8: e8:db:1b:f6:31:22:57:00:10:18:6c:1d:57:f8:65:79:96:48: 36:2f:f8:5e:11:45:e4:00:16:da:e9:c5:a0:04:b1:d4:9f:de: e9:98:3b:b6:7d:c2:b1:0a:3b:06:c4:a5:cd:6f:36:59:c4:41: 16:11:3f:75:13:c2:91:67:03:cc:4e:70:8c:1b:df:6f:60:5b: f2:ff:a9:e6:ce:32:6b:14:bd:83:c8:5d:ea:6c:4b:f3:fc:d1: ce:61:e5:44:8c:80:30:e2:c6:51:c1:f6:7a:9e:fa:88:3e:f5: 6a:86:fd:21:d0:f2:53:4a:28:c9:89:90:e2:b1:0a:5c:7b:c8: 6b:e7:ce:c8:15:ca:ba:42:4e:be:0a:af:5c:eb:51:f2:99:d3: f4:40:dc:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0 MEZDMDUxQjIwHhcNMjUwODIyMjAxOTQ2WhcNMjUwODI5MjAxOTQ2WjAYMRYwFAYD VQQDEw02OGE4ZDBlMi0wMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxisJPee/Yp6KBiHdBUTY5G8+n/1SDq3rg4CLGWxN3UZwIN+DewsVRcjRDnC/ IJBwz+aSjGgndDy0gJDqSbqa11ohD6X3Ff7w0eXFeu9TrNTUI317aQrm4kYbDzw6 9Mh8knHWHI1KCVbd6ghQfr4t1VitNRBECEnhIfOyxZYRNj+8S+R6wfVkcnYyIHT+ 1cU027mpyUQUmz2/LB0CwvhuHZVhKGjHx+PF4pGGs59d4z2DhSkUshc47GLMhCm0 nh28pR+ArChYOjpJ6SbDGadYKNZDNdT3ti97uhB+PSyZK8rutdD9ulWJ3yVDfY7J s4OOecGwrQ8KWlVrETZfATWgAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdIRHws k9ex3slN6oKQ04Rfz+dTMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHtNmxusjLxEa/Bd+C4O0vp9f0zF4xxPfT43MbdrCpc2kPiemVoBSn ejrVKnKwnHDLI+adH1+Bn6tM0B6/5iBA8srCzYPksaT6jGg3WMqb2c3gyUcSf+f8 FRL8ts0AiaYIwbAvtrRKTBfgRvjo2xv2MSJXABAYbB1X+GV5lkg2L/heEUXkABba 6cWgBLHUn97pmDu2fcKxCjsGxKXNbzZZxEEWET91E8KRZwPMTnCMG99vYFvy/6nm zjJrFL2DyF3qbEvz/NHOYeVEjIAw4sZRwfZ6nvqIPvVqhv0h0PJTSijJiZDisQpc e8hr587IFcq6Qk6+Cq9c61HymdP0QNyA -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:48 2025 by rpki-client