$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: xD732jxjOrDGFmnZ4HHFrGr46C8d83MvXo/ZiJxrsmc= Subject key identifier: 31:F5:8A:26:CE:E9:C6:44:C2:AE:A5:FA:96:B5:FC:59:82:96:32:C3 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34AD Signing time: Fri 22 Aug 2025 14:55:58 +0000 Manifest this update: Fri 22 Aug 2025 14:55:58 +0000 Manifest next update: Fri 29 Aug 2025 14:55:58 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: REwPQqC29DZtJIMudrszcYzD2JotQNyXcEcuOWlvAOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Aug 22 14:55:58 2025 GMT Not After : Aug 29 14:55:58 2025 GMT Subject: CN=68a884fe-a493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:f7:2c:4c:23:e8:cf:30:b4:a5:c9:4e:07: 94:51:31:dc:71:8e:6d:2e:41:ed:41:96:66:7c:bc: 7a:3e:fa:d0:97:c8:ca:99:41:20:04:35:0f:66:30: df:b8:d5:1f:89:0b:6a:cc:8c:4a:33:3b:5c:7e:1e: 80:45:dd:3c:84:f7:78:2b:ec:7c:14:da:5f:7f:08: 1f:fc:3d:fe:90:7a:76:2d:22:6d:be:a0:7f:1e:3c: c9:27:16:d9:f8:75:7f:af:05:05:d0:a6:b2:e7:6f: bb:04:0e:2f:68:b6:b1:c8:54:4d:db:2b:61:f4:f4: f9:8e:69:c9:66:21:41:cf:69:9e:a8:82:43:ef:7c: 8f:a4:b7:76:44:18:46:a8:36:d0:f1:e5:00:29:32: f0:7d:91:17:26:1e:70:d0:60:7c:ea:93:f5:4b:67: 7a:60:fb:44:73:ff:60:20:87:b8:3d:17:82:7b:1c: 50:d5:c1:4f:17:1d:f8:76:f3:cf:06:be:52:1a:a0: 95:af:4b:17:2d:13:6a:37:9d:b8:e8:d7:da:62:9f: 75:23:32:6d:3e:b7:14:cf:5d:7a:83:85:cd:da:7c: 6c:25:26:3c:67:d1:09:40:2b:0d:f2:fa:a7:8b:70: 73:52:f2:23:1f:5c:b4:fa:fb:31:28:59:1e:22:93: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F5:8A:26:CE:E9:C6:44:C2:AE:A5:FA:96:B5:FC:59:82:96:32:C3 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4f:09:59:6e:04:4d:17:a6:9f:26:7f:96:4a:b9:68:64:29: bb:75:16:db:da:ec:b5:48:c3:3d:d0:41:6c:c9:4a:1b:3c:21: a5:3a:63:3c:5d:3a:50:5e:66:37:04:83:0d:63:0c:c0:0d:bd: 5e:1a:58:08:e3:15:c1:d6:c0:0a:a3:1c:72:62:ea:91:65:3f: cd:5c:28:88:2f:ff:8d:ef:8d:91:07:dc:fe:35:7e:81:ef:6a: 91:43:ea:5f:9f:b4:3b:47:e4:2d:9e:ed:e6:fe:43:fe:5c:14: 3a:4d:c6:b5:5f:44:09:aa:8f:bf:7f:84:3b:7c:6f:64:f7:a5: 02:b7:de:4d:55:59:36:f5:0f:26:a6:b6:e0:a4:b7:a8:c2:7f: 99:ca:af:d7:07:71:d8:5d:2d:9f:a7:0b:02:9f:4e:06:a2:cb: 04:fd:b5:2e:0b:fc:6c:0e:ef:81:02:1a:8f:d9:21:9a:da:82: bf:b7:e7:df:5e:44:7a:87:1e:ac:5a:63:a3:3f:6e:3c:d4:7a: a2:ee:e1:9e:88:2d:fd:a9:99:18:84:37:a7:da:c7:1b:70:29: a4:88:62:14:fd:51:c1:0a:3b:d1:eb:4d:6a:24:ba:db:e4:5d: 17:47:7b:7c:ee:86:fd:7f:9a:bc:0f:49:e9:aa:19:0e:13:94: 0c:84:72:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwODIyMTQ1NTU4WhcNMjUwODI5MTQ1NTU4WjAYMRYwFAYD VQQDEw02OGE4ODRmZS1hNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzon3LEwj6M8wtKXJTgeUUTHccY5tLkHtQZZmfLx6PvrQl8jKmUEgBDUPZjDf uNUfiQtqzIxKMztcfh6ARd08hPd4K+x8FNpffwgf/D3+kHp2LSJtvqB/HjzJJxbZ +HV/rwUF0Kay52+7BA4vaLaxyFRN2yth9PT5jmnJZiFBz2meqIJD73yPpLd2RBhG qDbQ8eUAKTLwfZEXJh5w0GB86pP1S2d6YPtEc/9gIIe4PReCexxQ1cFPFx34dvPP Br5SGqCVr0sXLRNqN5246NfaYp91IzJtPrcUz116g4XN2nxsJSY8Z9EJQCsN8vqn i3BzUvIjH1y0+vsxKFkeIpPWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH1iibO 6cZEwq6l+pa1/FmCljLDMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1TwlZbgRNF6afJn+WSrloZCm7dRbb2uy1SMM90EFsyUobPCGlOmM8 XTpQXmY3BIMNYwzADb1eGlgI4xXB1sAKoxxyYuqRZT/NXCiIL/+N742RB9z+NX6B 72qRQ+pfn7Q7R+Qtnu3m/kP+XBQ6Tca1X0QJqo+/f4Q7fG9k96UCt95NVVk29Q8m prbgpLeown+Zyq/XB3HYXS2fpwsCn04GossE/bUuC/xsDu+BAhqP2SGa2oK/t+ff XkR6hx6sWmOjP2481Hqi7uGeiC39qZkYhDen2scbcCmkiGIU/VHBCjvR601qJLrb 5F0XR3t87ob9f5q8D0npqhkOE5QMhHKe -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:14 2025 by rpki-client