$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: XwSjvbFuqFupi9MCcUZsXfs6rRcxRpsiIMMKX0T0p84= Subject key identifier: 0E:CC:7D:18:B1:F8:73:EB:82:2C:C4:5E:79:AD:56:FC:CA:A9:D0:E3 Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 34C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3D33 Signing time: Fri 22 Aug 2025 15:14:49 +0000 Manifest this update: Fri 22 Aug 2025 15:14:49 +0000 Manifest next update: Fri 29 Aug 2025 15:14:49 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: WG1aM/NG0sbWuSSjkhXG2oEdGK6ifkXnWmtfAIwnqxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB, serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: Aug 22 15:14:49 2025 GMT Not After : Aug 29 15:14:49 2025 GMT Subject: CN=68a88969-248b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:27:2f:32:6e:4c:5f:91:25:76:49:03:b1:d4: 5b:0e:74:1f:d3:ff:ac:6e:7b:f4:dd:12:06:59:78: 18:9e:36:0f:fc:71:14:d2:19:e9:f4:c5:78:85:26: e8:8b:4d:91:32:2e:b9:62:cc:ad:28:3f:7a:a1:35: 88:7d:4e:0a:9a:70:42:a2:64:55:60:fe:25:35:14: b5:aa:c6:b3:22:e9:e1:7e:58:1c:a0:88:c3:fc:1f: 78:71:34:1a:0e:48:5f:f8:c1:ee:7d:50:66:f4:1b: 6b:a7:43:9b:17:bf:38:c3:c2:00:14:88:40:99:04: f5:ee:24:df:ec:59:d9:76:7d:69:bc:e4:f2:16:32: 87:e1:1c:c4:cb:f7:fa:99:20:2c:65:74:6d:f0:a8: f1:3e:00:01:7f:0c:15:c4:60:a5:44:47:3a:6e:c8: 44:bd:5d:b8:7f:59:00:7a:e4:77:a7:4f:c8:75:68: a4:c5:88:da:57:da:48:a1:40:63:20:65:18:e2:de: 37:8e:a7:12:5b:75:33:55:40:1c:e8:f9:67:a4:6d: c6:20:44:d7:e9:b8:4f:c3:3d:2a:49:55:f6:71:a3: c9:af:ab:19:98:79:b9:a9:ad:60:73:25:77:15:bb: 39:60:d0:f9:ac:9a:e7:68:7d:76:bb:95:7b:3a:a0: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:7D:18:B1:F8:73:EB:82:2C:C4:5E:79:AD:56:FC:CA:A9:D0:E3 X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ed:c6:e8:25:b8:1b:e0:d5:9d:ce:37:59:68:42:d0:a4:7a: 97:ac:9c:22:43:e1:11:82:b5:08:f4:41:a7:de:b4:c8:4e:62: bd:5e:95:a1:ac:60:40:47:74:94:be:74:fd:cc:75:4f:b7:cd: 44:8d:cf:f1:5e:76:a2:8e:af:7c:d9:71:5b:2e:64:9a:c7:a9: 39:70:22:4b:64:eb:57:64:da:59:ec:06:36:ee:92:6e:ef:fe: fa:66:d1:20:1b:96:82:ab:eb:66:85:41:2e:c0:94:b4:97:6f: d7:f0:60:1d:1c:ee:bc:a9:48:f4:ae:8b:b1:d8:3b:bf:46:08: 3c:6d:ac:74:b7:5b:16:4a:76:25:2e:62:08:27:21:ef:d1:b6: 97:e0:55:98:10:10:e3:07:c7:11:41:1b:55:40:a2:92:b3:f9: 3d:50:be:a5:92:5c:92:2f:f4:45:09:f3:27:a0:fd:53:18:64: 7d:0d:1c:bb:63:6a:f8:73:8a:b5:11:2c:db:17:07:85:4f:67: 56:0e:5b:a6:84:bd:11:ed:d6:30:c3:f7:71:c2:b6:d5:4d:1f: 0c:87:70:25:14:c2:7f:c8:46:c2:89:73:2f:ad:d6:6a:15:64: a9:6f:2f:00:8a:49:6c:27:95:a3:1d:70:cb:81:8a:64:36:79: fe:97:9f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjUwODIyMTUxNDQ5WhcNMjUwODI5MTUxNDQ5WjAYMRYwFAYD VQQDEw02OGE4ODk2OS0yNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CcvMm5MX5EldkkDsdRbDnQf0/+sbnv03RIGWXgYnjYP/HEU0hnp9MV4hSbo i02RMi65YsytKD96oTWIfU4KmnBComRVYP4lNRS1qsazIunhflgcoIjD/B94cTQa Dkhf+MHufVBm9Btrp0ObF784w8IAFIhAmQT17iTf7FnZdn1pvOTyFjKH4RzEy/f6 mSAsZXRt8KjxPgABfwwVxGClREc6bshEvV24f1kAeuR3p0/IdWikxYjaV9pIoUBj IGUY4t43jqcSW3UzVUAc6PlnpG3GIETX6bhPwz0qSVX2caPJr6sZmHm5qa1gcyV3 Fbs5YND5rJrnaH12u5V7OqBV+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7MfRix +HPrgizEXnmtVvzKqdDjMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA87cboJbgb4NWdzjdZaELQpHqXrJwiQ+ERgrUI9EGn3rTITmK9XpWh rGBAR3SUvnT9zHVPt81Ejc/xXnaijq982XFbLmSax6k5cCJLZOtXZNpZ7AY27pJu 7/76ZtEgG5aCq+tmhUEuwJS0l2/X8GAdHO68qUj0roux2Du/Rgg8bax0t1sWSnYl LmIIJyHv0baX4FWYEBDjB8cRQRtVQKKSs/k9UL6lklySL/RFCfMnoP1TGGR9DRy7 Y2r4c4q1ESzbFweFT2dWDlumhL0R7dYww/dxwrbVTR8Mh3AlFMJ/yEbCiXMvrdZq FWSpby8AiklsJ5WjHXDLgYpkNnn+l58F -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:25 2025 by rpki-client