$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: 7HbqCoO1XB1cUK0YFT7i77JNK4NpY7Gs3P0F4UScBgc= Subject key identifier: E4:65:2B:AA:43:1B:1E:D4:16:BD:E6:57:79:14:58:1F:8A:2F:7C:91 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D13 Signing time: Fri 22 Aug 2025 18:10:15 +0000 Manifest this update: Fri 22 Aug 2025 18:10:15 +0000 Manifest next update: Fri 29 Aug 2025 18:10:15 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: tt8sq2+aFsVcnAN4qJCyfh3pFtcp4a+snWOrGbFDXlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Aug 22 18:10:15 2025 GMT Not After : Aug 29 18:10:15 2025 GMT Subject: CN=68a8b287-9c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:bc:dc:31:ec:2f:21:3c:b7:e3:db:f0:50: 67:d7:af:a3:93:6d:d2:f8:f8:c5:3c:d9:3c:fd:e0: 18:22:78:48:30:5d:09:db:2d:41:82:f1:24:3a:2e: a6:c5:33:8a:06:d4:8c:de:fe:f5:69:d1:e6:7c:44: c8:6f:a2:9f:27:30:7c:64:f6:5f:ac:f7:aa:bb:ee: 75:20:d8:f1:fa:c0:09:3c:09:81:9a:bc:b2:24:2e: 50:fe:50:8f:ea:83:01:f5:a2:ec:33:ba:09:1e:b5: 03:18:61:ea:ab:ff:79:53:50:75:ae:5f:c8:c0:5a: e0:e7:1a:6d:3e:e3:94:dc:da:70:44:91:7a:cf:68: 3c:a3:e8:a4:36:7f:ca:f2:19:c6:a4:89:94:93:96: ff:c0:1c:ee:0f:5a:be:d2:67:cf:8e:a6:21:21:8f: 94:bd:ca:ac:2a:11:e9:4b:3b:31:ac:3f:84:4a:5f: 0d:5d:e9:f9:47:f0:a1:9c:fb:c8:3d:cb:c8:c8:06: b5:7e:55:95:4a:aa:6a:7e:77:bf:81:50:24:d2:6d: c7:20:21:7f:90:f9:b5:5d:91:8b:4e:df:05:33:9b: ec:37:26:ca:60:7c:ca:9d:6c:c9:8c:03:af:cf:d1: c5:28:05:59:03:e0:95:45:9c:70:b3:4f:37:3c:75: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:65:2B:AA:43:1B:1E:D4:16:BD:E6:57:79:14:58:1F:8A:2F:7C:91 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fb:2a:67:86:f0:14:b7:79:54:f7:8f:b5:c1:23:bc:c5:3e: c5:6c:2a:7f:4b:86:07:a4:18:f0:3c:8b:58:fd:f1:b6:ec:5e: 9d:33:ad:c3:73:c4:13:6c:87:06:93:0a:a3:a9:df:20:6d:d8: 10:e4:4e:40:e1:59:d2:aa:fb:e3:8b:72:4d:6b:c2:3f:67:89: 8e:b6:ea:4e:b6:bb:74:21:b2:14:00:e0:50:a5:a5:ab:a8:d6: 01:15:b2:ba:62:40:40:9c:77:85:04:f1:ba:7b:ed:04:3b:b3: a3:1b:32:a9:b3:94:56:81:70:12:9e:7e:f7:a2:4d:51:d3:40: 26:1c:a7:99:a0:80:b7:bb:4c:36:b2:45:78:01:e2:fb:0d:a4: ae:4c:29:a4:b5:ea:ca:1c:b8:e6:d1:2b:30:32:73:cc:19:34: 9d:22:8b:54:5b:c2:77:c0:0e:88:04:e8:c7:05:91:00:79:61: 68:57:44:3c:da:b1:8d:5f:37:e0:dc:25:94:af:a1:94:d9:a9: bf:ce:92:96:48:8f:5f:2f:32:57:07:4f:cd:91:fc:f6:d7:79: 2f:7f:6b:50:b2:6b:30:fa:50:06:a0:31:57:1b:a8:1b:57:74: bd:ba:51:4a:5b:af:fb:83:e4:79:88:66:52:ac:75:1e:da:93: da:62:39:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUwODIyMTgxMDE1WhcNMjUwODI5MTgxMDE1WjAYMRYwFAYD VQQDEw02OGE4YjI4Ny05YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0K83DHsLyE8t+Pb8FBn16+jk23S+PjFPNk8/eAYInhIMF0J2y1BgvEkOi6m xTOKBtSM3v71adHmfETIb6KfJzB8ZPZfrPequ+51INjx+sAJPAmBmryyJC5Q/lCP 6oMB9aLsM7oJHrUDGGHqq/95U1B1rl/IwFrg5xptPuOU3NpwRJF6z2g8o+ikNn/K 8hnGpImUk5b/wBzuD1q+0mfPjqYhIY+UvcqsKhHpSzsxrD+ESl8NXen5R/ChnPvI PcvIyAa1flWVSqpqfne/gVAk0m3HICF/kPm1XZGLTt8FM5vsNybKYHzKnWzJjAOv z9HFKAVZA+CVRZxws083PHVJpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORlK6pD Gx7UFr3mV3kUWB+KL3yRMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+ypnhvAUt3lU94+1wSO8xT7FbCp/S4YHpBjwPItY/fG27F6dM63D c8QTbIcGkwqjqd8gbdgQ5E5A4VnSqvvji3JNa8I/Z4mOtupOtrt0IbIUAOBQpaWr qNYBFbK6YkBAnHeFBPG6e+0EO7OjGzKps5RWgXASnn73ok1R00AmHKeZoIC3u0w2 skV4AeL7DaSuTCmkterKHLjm0SswMnPMGTSdIotUW8J3wA6IBOjHBZEAeWFoV0Q8 2rGNXzfg3CWUr6GU2am/zpKWSI9fLzJXB0/Nkfz213kvf2tQsmsw+lAGoDFXG6gb V3S9ulFKW6/7g+R5iGZSrHUe2pPaYjnp -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:26 2025 by rpki-client