$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft File: S36_c0WWAv2-dyvz4uxQsutKf2E.mft (raw, json) Hash identifier: HOWm7KbXsvdF1FYIdcFRh7bvGi0GbvjIqA3PCBKZBUw= Subject key identifier: D7:27:62:F1:6A:3E:2F:10:A0:E3:4C:61:91:1D:1D:C5:96:1A:7A:21 Authority key identifier: 4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61 Certificate issuer: /CN=A91754C0/serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft Manifest number: 011A Signing time: Sat 23 Aug 2025 04:56:23 +0000 Manifest this update: Sat 23 Aug 2025 04:56:23 +0000 Manifest next update: Sat 30 Aug 2025 04:56:22 +0000 Files and hashes: 1: S36_c0WWAv2-dyvz4uxQsutKf2E.crl (hash: 4EqzUe4bzpZDhf9nuOVw98Guq1a2QZtMqEMpFqm8U8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61 Validity Not Before: Aug 23 04:56:23 2025 GMT Not After : Aug 30 04:56:22 2025 GMT Subject: CN=68a949f7-8caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:a5:17:d9:25:ca:e9:f0:2b:1e:50:f4:cf: 4e:ca:cb:17:a0:5e:6d:4c:4b:42:31:ea:0d:e2:d3: e4:93:50:8d:e5:48:4f:bb:5e:71:bb:d3:da:91:70: 2b:54:14:56:34:76:82:14:ee:76:32:f5:42:5d:03: 44:d1:3e:ad:c0:97:c1:5f:fe:b2:da:72:80:77:ec: de:6d:89:1e:32:51:d3:a2:5d:e6:01:ea:5d:bc:d1: 41:11:6f:57:03:30:a4:91:5f:98:cc:93:b7:7c:77: fb:e1:3e:34:4d:41:d1:9f:2b:7a:4f:32:c4:4c:22: 11:e8:a2:c9:f5:1b:b4:95:fa:47:37:0f:d1:69:24: e6:ef:62:38:8d:c1:b9:cb:57:af:89:da:11:ef:8f: f0:9a:da:ab:2b:af:01:81:4a:de:30:0f:c4:91:4a: 7f:41:d6:a7:ce:97:33:5a:98:f6:29:89:eb:8c:e2: de:79:15:e0:26:79:3e:37:48:66:91:be:f0:1b:b6: 69:d1:bd:d9:57:6b:fe:89:d4:11:38:52:64:5d:b5: bb:1b:99:09:c2:62:c2:b1:fd:ae:27:6b:d9:35:a3: a9:9d:f2:13:39:a8:1b:41:01:18:f5:0c:01:03:eb: 50:47:33:0c:9e:fb:fb:91:5e:33:5a:1d:6c:0f:7f: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:62:F1:6A:3E:2F:10:A0:E3:4C:61:91:1D:1D:C5:96:1A:7A:21 X509v3 Authority Key Identifier: keyid:4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:06:34:04:b6:51:99:0a:e9:0e:67:d3:b4:c2:61:9b:50:84: ca:70:73:18:15:f3:97:69:4d:0b:d3:97:d3:f1:57:2a:9f:a4: 7a:d7:e4:6c:c2:78:ec:40:9d:c2:6d:ad:06:57:50:31:0a:5c: cd:60:ae:d9:6e:eb:f6:58:cf:4c:1d:05:b2:60:39:89:f3:06: 70:c9:39:6e:53:be:2b:d2:04:e3:87:64:12:52:33:88:6b:21: 9a:51:79:d1:bc:23:88:fe:9f:f7:ca:98:25:a9:3f:a9:b9:4a: a5:64:b2:ca:19:9b:e8:b3:53:f8:ee:99:37:f8:e1:d2:f5:d0: 99:a1:d9:12:b9:3a:42:3e:bf:69:87:91:69:72:12:4e:f9:51: 61:f2:b5:b8:9d:ea:55:88:1f:a3:ab:2e:b3:a0:75:5c:d3:47: e1:3f:dc:e3:91:7c:49:74:26:e4:97:8b:71:d9:8e:f9:74:60: ab:2e:53:98:48:b4:e7:0d:36:7c:7c:17:6e:60:5a:c6:6d:39: 90:81:68:f5:74:2a:fc:23:60:b9:61:29:42:b5:b5:06:c2:77: 95:64:b2:0f:66:aa:16:9b:4d:27:d3:18:3a:9d:0a:10:0b:2d: 95:ad:da:e9:b3:f2:8d:07:3b:53:34:40:2c:f2:59:99:15:67: 6b:d4:9e:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKDRCN0VCRjczNDU5NjAyRkRCRTc3MkJGM0UyRUM1MEIy RUI0QTdGNjEwHhcNMjUwODIzMDQ1NjIzWhcNMjUwODMwMDQ1NjIyWjAYMRYwFAYD VQQDEw02OGE5NDlmNy04Y2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskOlF9klyunwKx5Q9M9OyssXoF5tTEtCMeoN4tPkk1CN5UhPu15xu9PakXAr VBRWNHaCFO52MvVCXQNE0T6twJfBX/6y2nKAd+zebYkeMlHTol3mAepdvNFBEW9X AzCkkV+YzJO3fHf74T40TUHRnyt6TzLETCIR6KLJ9Ru0lfpHNw/RaSTm72I4jcG5 y1evidoR74/wmtqrK68BgUreMA/EkUp/QdanzpczWpj2KYnrjOLeeRXgJnk+N0hm kb7wG7Zp0b3ZV2v+idQROFJkXbW7G5kJwmLCsf2uJ2vZNaOpnfITOagbQQEY9QwB A+tQRzMMnvv7kV4zWh1sD3/rEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcnYvFq Pi8QoONMYZEdHcWWGnohMB8GA1UdIwQYMBaAFEt+v3NFlgL9vncr8+LsULLrSn9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC8wODZDMUM4MkND QkMxMUVFOEEwRjc3NDhDNEY5QUUwMi9TMzZfYzBXV0F2Mi1keXZ6NHV4UXN1dEtm MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzNl9jMFdXQXYyLWR5dno0dXhRc3V0S2YyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC8wODZDMUM4MkNDQkMxMUVFOEEwRjc3NDhDNEY5QUUwMi9TMzZfYzBXV0F2 Mi1keXZ6NHV4UXN1dEtmMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0BjQEtlGZCukOZ9O0wmGbUITKcHMYFfOXaU0L05fT8Vcqn6R61+Rs wnjsQJ3Cba0GV1AxClzNYK7Zbuv2WM9MHQWyYDmJ8wZwyTluU74r0gTjh2QSUjOI ayGaUXnRvCOI/p/3ypglqT+puUqlZLLKGZvos1P47pk3+OHS9dCZodkSuTpCPr9p h5FpchJO+VFh8rW4nepViB+jqy6zoHVc00fhP9zjkXxJdCbkl4tx2Y75dGCrLlOY SLTnDTZ8fBduYFrGbTmQgWj1dCr8I2C5YSlCtbUGwneVZLIPZqoWm00n0xg6nQoQ Cy2Vrdrps/KNBztTNEAs8lmZFWdr1J6Y -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:38 2025 by rpki-client