$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: 5kyx613qwunOOH3z0uNaQzOqmLreCNwBhaZ8StYX39w= Subject key identifier: 35:67:D1:96:AF:EF:50:9D:5F:CA:6D:5A:D8:69:D3:73:0C:E8:A5:25 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01B6 Signing time: Sat 23 Aug 2025 01:17:58 +0000 Manifest this update: Sat 23 Aug 2025 01:17:57 +0000 Manifest next update: Sat 30 Aug 2025 01:17:57 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: 4GaDZX8aZbE0psa60p2yQ/YTMTP818ZwjQBbKTSmtpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Aug 23 01:17:57 2025 GMT Not After : Aug 30 01:17:57 2025 GMT Subject: CN=68a916c5-53ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:59:8b:7b:ec:0a:e7:b1:d4:25:6b:41:04: 80:ca:c6:7f:7c:a6:55:ff:06:60:8b:b2:fb:6e:9f: a5:97:58:c8:fc:32:57:70:58:8d:ef:51:1c:f9:d2: 98:62:48:59:93:4b:95:91:4d:89:d3:e4:7c:1d:5f: b8:bb:4d:37:63:19:a9:ad:9c:64:b1:c4:60:11:00: 16:3c:9f:0c:af:32:85:c2:a4:19:c2:4b:77:e7:d3: 5a:e0:4e:29:bf:89:94:d4:05:89:98:04:dd:cd:8c: 5d:74:d7:25:75:61:c8:a0:90:ba:f2:5d:48:b4:a7: 57:76:40:91:44:cb:2e:99:14:a5:af:c0:a2:45:31: eb:30:94:f1:5a:32:90:4b:73:df:85:cf:f7:d8:fb: 42:1d:74:e4:f2:a0:87:d1:40:d7:60:a1:ea:b4:c9: 82:f8:6e:7d:1d:8e:92:57:ba:27:54:d1:3e:1d:7c: d0:8e:de:76:73:1a:42:48:d1:ed:9a:f7:ec:a5:72: cd:23:56:08:d2:3d:6a:9a:fa:5f:9d:3e:09:6e:88: 5a:45:fc:7e:d0:1c:36:f1:30:cc:a6:5e:45:71:7d: 8c:67:c0:28:9b:1e:ba:6e:05:e2:d6:5c:b8:22:35: 2f:75:1e:ed:a7:a0:f3:a1:98:5b:d8:ea:43:53:97: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:D1:96:AF:EF:50:9D:5F:CA:6D:5A:D8:69:D3:73:0C:E8:A5:25 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:88:b8:c6:cf:80:19:ea:ed:fd:eb:ce:31:ca:a7:8c:21:f7: fa:56:d6:b0:65:d3:01:9b:ce:2e:16:39:4d:bd:5d:93:1b:c9: d9:07:d5:80:72:6e:31:93:2d:7c:48:1e:25:99:c4:ef:87:97: 57:b7:8a:78:f3:19:f9:42:b9:97:eb:15:c4:a3:b0:1c:9b:e9: 93:73:c4:74:08:24:d8:14:68:ca:b7:32:8b:10:2d:89:1e:a7: cf:a5:30:6b:41:83:89:62:5c:4c:a2:e3:48:53:dd:51:34:78: 7d:8b:b0:77:df:1a:38:97:6d:26:f4:2f:b8:33:f4:e5:1e:e3: 84:e1:b2:26:30:06:22:ce:50:a5:11:3b:58:d2:a0:6f:6c:ab: bc:89:64:23:a3:1f:db:6f:c5:5b:35:45:e8:35:70:f5:52:36: d4:b2:26:9b:f5:a4:44:31:c6:e3:23:0c:b7:93:a5:91:bb:6e: a6:2a:7b:c6:da:16:b5:07:d6:d7:25:b4:ba:7a:6a:e9:f5:b2: 0d:7d:11:09:a0:a5:c5:1f:b5:b7:cc:82:95:61:af:89:31:60: 9f:c5:b7:c5:85:31:cb:97:21:a1:eb:03:60:eb:79:05:c4:3c: 21:b4:3c:95:c7:62:5a:e7:9a:d3:a6:ca:36:b0:cf:e1:90:2a: ff:70:ef:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUwODIzMDExNzU3WhcNMjUwODMwMDExNzU3WjAYMRYwFAYD VQQDEw02OGE5MTZjNS01M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TFZi3vsCuex1CVrQQSAysZ/fKZV/wZgi7L7bp+ll1jI/DJXcFiN71Ec+dKY YkhZk0uVkU2J0+R8HV+4u003YxmprZxkscRgEQAWPJ8MrzKFwqQZwkt359Na4E4p v4mU1AWJmATdzYxddNcldWHIoJC68l1ItKdXdkCRRMsumRSlr8CiRTHrMJTxWjKQ S3Pfhc/32PtCHXTk8qCH0UDXYKHqtMmC+G59HY6SV7onVNE+HXzQjt52cxpCSNHt mvfspXLNI1YI0j1qmvpfnT4JbohaRfx+0Bw28TDMpl5FcX2MZ8Aomx66bgXi1ly4 IjUvdR7tp6DzoZhb2OpDU5e5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVn0Zav 71CdX8ptWthp03MM6KUlMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkiLjGz4AZ6u39684xyqeMIff6VtawZdMBm84uFjlNvV2TG8nZB9WA cm4xky18SB4lmcTvh5dXt4p48xn5QrmX6xXEo7Acm+mTc8R0CCTYFGjKtzKLEC2J HqfPpTBrQYOJYlxMouNIU91RNHh9i7B33xo4l20m9C+4M/TlHuOE4bImMAYizlCl ETtY0qBvbKu8iWQjox/bb8VbNUXoNXD1UjbUsiab9aREMcbjIwy3k6WRu26mKnvG 2ha1B9bXJbS6emrp9bINfREJoKXFH7W3zIKVYa+JMWCfxbfFhTHLlyGh6wNg63kF xDwhtDyVx2Ja55rTpso2sM/hkCr/cO/B -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:47 2025 by rpki-client