$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: Bv4hDvMCKdT110YmDr2NJXs+1I1IFRTLyp+uk2dgvGc= Subject key identifier: 10:BB:37:D1:B4:4E:C1:61:EB:63:14:B8:8F:71:CB:15:B6:1C:98:3B Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34B2 Signing time: Fri 22 Aug 2025 14:35:44 +0000 Manifest this update: Fri 22 Aug 2025 14:35:44 +0000 Manifest next update: Fri 29 Aug 2025 14:35:44 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: 3K0K6harTp3FgAs1YMnkRO+MSCiru0egYf1BmpY9MwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Aug 22 14:35:44 2025 GMT Not After : Aug 29 14:35:44 2025 GMT Subject: CN=68a88040-efca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:e3:8e:08:7f:28:9a:e4:63:80:36:c5:11: 71:f0:9c:52:c8:48:71:88:dd:7f:f0:a2:a7:25:18: 0c:a6:7c:fe:ec:35:a4:e7:26:10:0a:ba:b6:33:bb: 8b:09:73:d5:81:03:9e:56:f8:eb:41:e2:04:98:df: 7e:d5:41:55:c5:3d:6a:fd:80:80:1b:a1:d4:dd:ee: 53:c1:03:17:e6:7e:17:7e:ad:54:80:22:da:2a:9c: f4:b9:6a:b6:2b:f7:b6:3f:f5:b6:0a:0d:3a:91:92: 8d:80:3e:09:63:3c:34:e8:d8:70:36:7c:21:7d:48: dc:79:ef:bd:4b:4b:e2:ef:ab:8f:12:b3:4f:3b:5c: 5a:cd:9b:81:4b:52:3a:f8:3a:5e:c9:0f:e7:1e:9c: 23:e8:06:b6:dc:0c:7d:7a:21:56:5a:96:12:62:b0: eb:77:0c:da:23:b0:35:55:80:ef:e4:f5:e2:81:3d: 5e:2a:2a:90:43:4d:07:80:2f:65:8a:ed:64:fd:49: 05:22:7f:d4:c6:f3:e7:89:d4:23:87:f5:07:50:eb: 9f:8d:07:7a:06:37:54:50:e1:ba:24:dc:07:38:f9: 66:b4:f7:a6:23:14:46:0a:b8:27:9d:4b:c1:ed:05: 57:58:54:cc:83:bc:1a:39:77:a3:35:de:6e:a9:18: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BB:37:D1:B4:4E:C1:61:EB:63:14:B8:8F:71:CB:15:B6:1C:98:3B X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f7:9f:e0:37:41:b6:72:08:5c:a4:b6:47:eb:66:d0:88:7f: 4f:8d:06:89:67:45:cc:e6:91:cb:20:81:18:22:77:bc:fe:f0: 62:07:62:4d:e8:7d:20:51:8c:9b:4c:7a:03:e5:9e:bd:87:e5: 93:82:0b:93:74:cd:4f:52:79:a8:1f:ee:2e:7c:17:a7:17:69: 7a:c2:58:d6:79:d5:7f:b4:df:5c:e9:05:57:3e:aa:08:2d:93: 4b:7e:17:44:ef:9b:96:b6:97:46:7f:5c:83:ca:30:88:63:84: 65:bb:0a:92:b2:41:03:26:1e:92:11:5c:93:f3:83:00:43:b8: e2:4e:21:70:7b:a0:8a:9f:5e:06:12:f6:ae:4d:1f:aa:1f:1c: 30:0a:62:4a:47:f2:01:15:ee:a5:4e:9d:fd:6a:85:44:5d:6f: db:27:d2:62:e4:61:c7:fb:8a:26:8e:e1:a3:8b:1c:ad:7d:03: d4:d3:2d:90:b2:d6:ef:64:43:87:83:c1:e2:09:5c:50:09:a3: c9:ad:d8:ee:11:e5:9d:17:d7:1a:dc:19:5a:49:f7:6b:8d:89: 40:cb:90:2f:a6:19:78:7d:d5:4a:23:3e:41:ce:de:a7:47:64: f2:9a:c5:41:26:19:26:66:7c:9c:99:7b:6a:a3:c1:eb:0a:aa: a1:70:6f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUwODIyMTQzNTQ0WhcNMjUwODI5MTQzNTQ0WjAYMRYwFAYD VQQDEw02OGE4ODA0MC1lZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgvjjgh/KJrkY4A2xRFx8JxSyEhxiN1/8KKnJRgMpnz+7DWk5yYQCrq2M7uL CXPVgQOeVvjrQeIEmN9+1UFVxT1q/YCAG6HU3e5TwQMX5n4Xfq1UgCLaKpz0uWq2 K/e2P/W2Cg06kZKNgD4JYzw06NhwNnwhfUjcee+9S0vi76uPErNPO1xazZuBS1I6 +DpeyQ/nHpwj6Aa23Ax9eiFWWpYSYrDrdwzaI7A1VYDv5PXigT1eKiqQQ00HgC9l iu1k/UkFIn/UxvPnidQjh/UHUOufjQd6BjdUUOG6JNwHOPlmtPemIxRGCrgnnUvB 7QVXWFTMg7waOXejNd5uqRg6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC7N9G0 TsFh62MUuI9xyxW2HJg7MB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ95/gN0G2cghcpLZH62bQiH9PjQaJZ0XM5pHLIIEYIne8/vBiB2JN 6H0gUYybTHoD5Z69h+WTgguTdM1PUnmoH+4ufBenF2l6wljWedV/tN9c6QVXPqoI LZNLfhdE75uWtpdGf1yDyjCIY4RluwqSskEDJh6SEVyT84MAQ7jiTiFwe6CKn14G EvauTR+qHxwwCmJKR/IBFe6lTp39aoVEXW/bJ9Ji5GHH+4omjuGjixytfQPU0y2Q stbvZEOHg8HiCVxQCaPJrdjuEeWdF9ca3BlaSfdrjYlAy5Avphl4fdVKIz5Bzt6n R2TymsVBJhkmZnycmXtqo8HrCqqhcG+A -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:27 2025 by rpki-client