$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: isTCsk3fu2y3Upb0pWrwUxK2+WlJOOs0aK9RobF4l+M= Subject key identifier: 20:C1:45:19:7F:CC:C7:F1:CD:5E:C6:C4:FB:FD:A4:9C:91:A3:65:33 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 4786 Signing time: Fri 22 Aug 2025 14:21:16 +0000 Manifest this update: Fri 22 Aug 2025 14:21:15 +0000 Manifest next update: Fri 29 Aug 2025 14:21:15 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: jXPh99DK0Hx84Mxypxu950/3ImlvhbengMjoonUyUnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Aug 22 14:21:15 2025 GMT Not After : Aug 29 14:21:15 2025 GMT Subject: CN=68a87cdc-ac7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:be:26:6e:eb:e1:4a:7a:e7:5f:14:02:75: 10:a7:07:c3:68:d7:6a:af:e3:07:32:d4:05:30:e0: cb:20:00:4c:c8:63:ee:78:8d:6e:61:31:56:f2:6c: 91:b4:f5:49:1d:d1:b8:c0:1b:27:db:eb:bd:86:bb: 29:bc:73:7d:11:a2:24:fb:e4:b9:b9:23:aa:71:90: e4:fc:e4:f9:52:1f:70:29:6a:d4:31:76:28:7a:b9: b0:da:86:ce:2f:0c:f3:c0:23:4e:db:e0:22:c2:94: 30:9b:bc:1b:34:30:4b:90:c3:90:b0:34:7e:e3:e4: 5c:d1:4c:22:58:e7:8e:af:fe:49:28:b1:9e:73:c4: 2d:10:10:20:6c:f0:16:be:19:f0:26:aa:33:ad:ba: 06:d8:b9:86:b9:f3:fc:65:7c:87:8b:bb:9f:d2:2d: a1:98:7e:a1:3f:df:26:98:e5:e6:40:7a:af:67:3b: 91:0d:69:6d:04:ee:b0:c5:c9:86:74:9a:54:0f:38: 3c:c6:75:97:25:f7:19:c4:8a:33:15:91:ae:bd:0e: 6c:3b:a2:67:4a:40:c0:86:72:a8:b6:83:d0:de:c9: ed:40:47:ed:c8:a3:08:cf:ae:14:bf:c7:03:84:a3: d0:23:2a:c1:f7:f8:86:d3:b6:50:29:cb:14:39:e2: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C1:45:19:7F:CC:C7:F1:CD:5E:C6:C4:FB:FD:A4:9C:91:A3:65:33 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:90:39:fb:9a:58:b7:7f:e2:4d:08:c9:7d:2d:81:05:91:da: 0f:b5:ed:7f:fd:72:67:4a:90:4d:b2:e8:85:b6:28:41:35:9b: 65:f4:43:61:76:86:ed:b8:4b:6a:9c:62:96:2b:14:0c:a8:e1: 58:8c:c9:57:2a:55:d7:51:7f:c7:3b:a8:6e:7c:61:75:da:cc: 3a:ad:5b:6a:04:2e:51:32:8d:19:b6:d0:5b:19:44:d2:25:3a: 16:68:d6:74:61:70:78:f3:aa:bd:7b:6f:5c:2a:11:e6:60:63: 67:5b:fa:71:86:7e:3d:9e:22:fe:40:a8:c8:ea:2f:4b:5c:32: 19:40:81:63:ca:20:08:73:d1:e7:b9:59:9d:04:66:2a:5d:81: dd:72:d3:a0:bd:97:0f:61:85:68:0d:67:b2:f2:65:0c:f3:6b: 50:47:d7:54:fb:2a:a5:0a:0a:53:49:17:d4:e5:7d:74:e8:6f: ef:04:03:fd:78:41:13:a5:5a:42:4e:9f:c2:41:3f:86:5b:62: 90:b7:66:75:d9:db:89:56:67:99:12:c3:c8:10:04:0e:e2:31: e4:5a:30:99:1a:0d:cd:c1:4d:2f:4c:d0:10:05:05:d6:0c:40: f6:3b:83:dc:66:65:a2:87:d0:1f:4b:da:2c:31:06:1e:7a:b6: 6e:3a:88:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwODIyMTQyMTE1WhcNMjUwODI5MTQyMTE1WjAYMRYwFAYD VQQDEw02OGE4N2NkYy1hYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXi+Jm7r4Up6518UAnUQpwfDaNdqr+MHMtQFMODLIABMyGPueI1uYTFW8myR tPVJHdG4wBsn2+u9hrspvHN9EaIk++S5uSOqcZDk/OT5Uh9wKWrUMXYoermw2obO LwzzwCNO2+AiwpQwm7wbNDBLkMOQsDR+4+Rc0UwiWOeOr/5JKLGec8QtEBAgbPAW vhnwJqozrboG2LmGufP8ZXyHi7uf0i2hmH6hP98mmOXmQHqvZzuRDWltBO6wxcmG dJpUDzg8xnWXJfcZxIozFZGuvQ5sO6JnSkDAhnKotoPQ3sntQEftyKMIz64Uv8cD hKPQIyrB9/iG07ZQKcsUOeKWHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDBRRl/ zMfxzV7GxPv9pJyRo2UzMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZkDn7mli3f+JNCMl9LYEFkdoPte1//XJnSpBNsuiFtihBNZtl9ENh dobtuEtqnGKWKxQMqOFYjMlXKlXXUX/HO6hufGF12sw6rVtqBC5RMo0ZttBbGUTS JToWaNZ0YXB486q9e29cKhHmYGNnW/pxhn49niL+QKjI6i9LXDIZQIFjyiAIc9Hn uVmdBGYqXYHdctOgvZcPYYVoDWey8mUM82tQR9dU+yqlCgpTSRfU5X106G/vBAP9 eEETpVpCTp/CQT+GW2KQt2Z12duJVmeZEsPIEAQO4jHkWjCZGg3NwU0vTNAQBQXW DED2O4PcZmWih9AfS9osMQYeerZuOoiC -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:05 2025 by rpki-client