$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: 9G6VLVZgMd8IW6jWQqgteAFO7wdtAX2FZe7SqhezaA4= Subject key identifier: 90:98:79:F1:D7:6C:2B:E7:80:B6:7C:96:CE:E0:EA:BA:B1:38:4E:3A Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 08C1 Signing time: Fri 22 Aug 2025 20:36:51 +0000 Manifest this update: Fri 22 Aug 2025 20:36:50 +0000 Manifest next update: Fri 29 Aug 2025 20:36:50 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: Fp6ZvnpITz/FkPwwK3usKyPiMjwDSXcbmfDvWVGL/ig=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Aug 22 20:36:50 2025 GMT Not After : Aug 29 20:36:50 2025 GMT Subject: CN=68a8d4e3-c2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:c4:58:08:fd:c9:5e:bf:d6:0a:eb:07:99: 4b:9d:e1:63:b1:bd:8f:2c:2d:ad:72:64:3b:87:78: 47:7f:1a:58:fa:c9:3b:70:fb:32:59:b3:bd:06:33: 6e:e3:50:2d:9a:ed:da:c9:0c:12:49:ac:3d:63:cf: 6c:69:6f:9b:75:99:10:61:f5:63:85:03:05:61:fc: 39:50:39:d6:bd:ba:d2:e1:67:ab:6b:49:30:4c:90: 87:b2:d0:e1:4c:b5:32:ce:4f:8a:b7:d7:bd:3b:d5: 2d:92:bc:0c:8e:6d:88:37:f6:64:b5:56:d4:a2:26: 2d:0d:ca:fe:fe:14:b6:3a:8e:56:e4:00:11:d4:68: cb:4a:d0:4f:96:6e:51:df:00:7d:97:30:32:59:88: 5d:e2:28:de:b4:1f:01:67:ef:aa:b1:cf:b3:ac:95: 2d:8d:e5:9a:4a:b5:c0:20:45:47:3e:69:6c:69:3f: 14:8c:ad:79:be:01:1f:30:3c:27:6e:2a:ed:7d:d6: b8:2d:90:49:2d:41:bb:3d:87:dd:9e:4a:3d:a9:64: 9c:a5:32:a4:27:dc:dd:c2:0a:1f:01:79:66:28:18: 20:a0:e7:e0:c6:23:56:81:7b:76:32:21:71:f7:5b: 91:50:8f:29:66:fd:b8:f4:58:91:ad:73:7b:08:e9: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:98:79:F1:D7:6C:2B:E7:80:B6:7C:96:CE:E0:EA:BA:B1:38:4E:3A X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e5:b5:a2:5f:ef:50:ab:f8:5b:3e:50:4f:9f:1c:f9:7d:35: 6a:5c:76:08:db:34:2e:53:fa:53:13:c2:14:5b:de:98:a3:55: 5a:59:5b:5a:86:52:10:1e:45:e9:f1:b0:63:3e:58:53:92:eb: 21:bd:cd:3b:4e:19:13:d2:48:2b:02:fb:a1:f4:e4:3d:cd:51: 21:e1:86:5d:c9:12:d4:06:85:ba:73:58:98:3a:ca:55:91:cc: 20:e9:15:d9:0e:3c:9c:24:a1:3a:ec:38:b1:32:50:b4:85:4e: d7:5f:ae:a8:bd:24:55:97:d6:4b:93:20:96:85:62:c9:62:62: e2:db:13:a5:f7:fc:e8:05:38:b6:50:6c:0f:54:5e:6e:88:67: 9f:91:26:8a:5c:e2:2a:21:f4:14:4d:5a:11:1c:1b:79:80:a6: 34:2b:d6:1b:fa:09:e5:85:25:da:a2:45:2a:d4:56:6c:05:fe: b7:6d:31:73:b9:46:39:fb:bc:58:ee:8e:ed:49:7d:81:cf:73: 35:92:b2:cb:7c:41:64:b6:4f:bd:ae:50:4b:26:e2:7e:06:b3: ab:f4:60:77:b0:3d:5b:86:4d:f1:ec:52:a6:60:ad:8e:44:b1: 97:95:53:a7:ee:46:d1:68:f5:84:fa:d0:0e:b6:92:df:2c:98: 77:2d:b7:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUwODIyMjAzNjUwWhcNMjUwODI5MjAzNjUwWjAYMRYwFAYD VQQDEw02OGE4ZDRlMy1jMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApO7EWAj9yV6/1grrB5lLneFjsb2PLC2tcmQ7h3hHfxpY+sk7cPsyWbO9BjNu 41Atmu3ayQwSSaw9Y89saW+bdZkQYfVjhQMFYfw5UDnWvbrS4Wera0kwTJCHstDh TLUyzk+Kt9e9O9UtkrwMjm2IN/ZktVbUoiYtDcr+/hS2Oo5W5AAR1GjLStBPlm5R 3wB9lzAyWYhd4ijetB8BZ++qsc+zrJUtjeWaSrXAIEVHPmlsaT8UjK15vgEfMDwn birtfda4LZBJLUG7PYfdnko9qWScpTKkJ9zdwgofAXlmKBggoOfgxiNWgXt2MiFx 91uRUI8pZv249FiRrXN7COl2nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCYefHX bCvngLZ8ls7g6rqxOE46MB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB55bWiX+9Qq/hbPlBPnxz5fTVqXHYI2zQuU/pTE8IUW96Yo1VaWVta hlIQHkXp8bBjPlhTkushvc07ThkT0kgrAvuh9OQ9zVEh4YZdyRLUBoW6c1iYOspV kcwg6RXZDjycJKE67DixMlC0hU7XX66ovSRVl9ZLkyCWhWLJYmLi2xOl9/zoBTi2 UGwPVF5uiGefkSaKXOIqIfQUTVoRHBt5gKY0K9Yb+gnlhSXaokUq1FZsBf63bTFz uUY5+7xY7o7tSX2Bz3M1krLLfEFktk+9rlBLJuJ+BrOr9GB3sD1bhk3x7FKmYK2O RLGXlVOn7kbRaPWE+tAOtpLfLJh3LbcN -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:00 2025 by rpki-client