$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: csV+/LCRR9GK1Bww3jFWVYwz5CayJz7ONKhcZaxVFwk= Subject key identifier: 62:05:A4:72:3D:37:77:78:9A:ED:AF:CB:51:6A:43:77:14:E1:A7:A8 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 34A6 Signing time: Fri 08 Aug 2025 15:12:12 +0000 Manifest this update: Fri 08 Aug 2025 15:12:11 +0000 Manifest next update: Fri 15 Aug 2025 15:12:11 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: lH1UdGTOvrqqH8M5Ss7RbnV4vDY1Fj2TDKV+x4mJwdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Aug 8 15:12:11 2025 GMT Not After : Aug 15 15:12:11 2025 GMT Subject: CN=689613cc-8fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:73:47:cf:12:c4:6f:a0:88:fc:f3:76:5e: f4:2a:35:be:eb:b5:a1:1a:9c:59:0e:96:a0:bf:26: 01:a6:e5:ae:e9:f4:69:34:53:a9:41:a4:c9:a5:0e: c1:52:f1:ed:01:31:79:1f:94:cd:0b:b4:ef:02:6a: 63:dd:6a:d5:f3:ce:58:74:7b:60:02:7d:85:df:48: e4:17:4a:9f:4b:61:db:8b:82:f8:cb:4e:01:a6:de: bd:c3:10:7e:20:dd:45:11:f6:e8:5f:61:46:ea:ca: 92:1b:16:03:24:ad:3a:b7:08:01:0a:4c:be:28:f2: c6:a6:66:3d:b4:12:9a:aa:56:1c:e7:40:78:63:c2: 3f:e4:85:19:6a:63:2a:29:d9:81:77:06:c6:17:5b: b3:21:92:bb:9a:dc:ea:88:53:14:22:9e:2f:8e:f0: 0f:84:62:38:61:32:d6:da:44:ae:b3:b2:e3:a3:8f: 99:4c:f8:10:4d:dd:c1:34:84:45:8f:c4:d6:1d:8a: e4:d8:b2:e8:a7:be:e7:a9:43:12:fb:47:e9:59:59: a6:88:f0:70:fe:9d:a0:d5:e2:ed:89:fb:2e:a7:d6: a7:38:1d:97:b3:2e:bb:1b:1d:f3:02:db:5f:ff:a3: 3e:44:76:8c:79:c2:4b:5f:56:57:72:2e:47:1e:4b: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:05:A4:72:3D:37:77:78:9A:ED:AF:CB:51:6A:43:77:14:E1:A7:A8 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:5c:30:73:40:ee:a7:a9:33:9c:2f:20:8d:af:3f:14:4d:9b: 40:41:e5:25:51:64:93:53:c8:4d:3b:b7:4b:d9:d5:25:8b:8c: e6:1e:87:a2:c3:8a:77:70:b2:8b:9e:e9:d7:45:62:89:5a:e6: ea:fd:aa:2f:e8:50:68:9f:60:28:65:ae:d1:59:8d:66:f2:fc: 94:c1:8e:f2:5b:bf:91:70:d1:e5:56:73:a8:95:1d:d8:e1:e2: 9d:82:b5:05:36:a3:f7:04:77:2d:9b:45:bd:ef:c8:2f:1b:b5: 13:d4:52:6c:30:2f:3d:f3:f1:c3:78:a2:3c:cc:bf:6c:f0:75: 0d:fd:07:e5:13:d8:78:9b:7c:74:86:fd:bf:8e:62:a5:f2:0b: be:54:e4:6f:b8:a3:76:a7:be:18:89:2d:2c:a0:c6:07:73:10: 9d:67:bd:b4:7e:bc:54:b7:43:04:3f:94:48:0e:fd:62:67:ea: af:ff:94:f6:d8:6f:29:1b:a9:e3:35:c5:f8:6f:c5:52:3c:c4: 66:51:35:ec:85:60:7e:34:cd:c6:66:9f:82:e1:ae:9a:be:ff: b3:d5:8c:40:d5:de:c7:dd:6e:52:d4:9a:97:5a:c9:d3:4e:75: b6:db:af:47:b3:cb:42:2a:c6:9f:31:2c:3e:fb:9c:e9:18:17: 55:42:30:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwODA4MTUxMjExWhcNMjUwODE1MTUxMjExWjAYMRYwFAYD VQQDEw02ODk2MTNjYy04ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs25zR88SxG+giPzzdl70KjW+67WhGpxZDpagvyYBpuWu6fRpNFOpQaTJpQ7B UvHtATF5H5TNC7TvAmpj3WrV885YdHtgAn2F30jkF0qfS2Hbi4L4y04Bpt69wxB+ IN1FEfboX2FG6sqSGxYDJK06twgBCky+KPLGpmY9tBKaqlYc50B4Y8I/5IUZamMq KdmBdwbGF1uzIZK7mtzqiFMUIp4vjvAPhGI4YTLW2kSus7Ljo4+ZTPgQTd3BNIRF j8TWHYrk2LLop77nqUMS+0fpWVmmiPBw/p2g1eLtifsup9anOB2Xsy67Gx3zAttf /6M+RHaMecJLX1ZXci5HHkuTqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIFpHI9 N3d4mu2vy1FqQ3cU4aeoMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDXDBzQO6nqTOcLyCNrz8UTZtAQeUlUWSTU8hNO7dL2dUli4zmHoei w4p3cLKLnunXRWKJWubq/aov6FBon2AoZa7RWY1m8vyUwY7yW7+RcNHlVnOolR3Y 4eKdgrUFNqP3BHctm0W978gvG7UT1FJsMC898/HDeKI8zL9s8HUN/QflE9h4m3x0 hv2/jmKl8gu+VORvuKN2p74YiS0soMYHcxCdZ720frxUt0MEP5RIDv1iZ+qv/5T2 2G8pG6njNcX4b8VSPMRmUTXshWB+NM3GZp+C4a6avv+z1YxA1d7H3W5S1JqXWsnT TnW2269Hs8tCKsafMSw++5zpGBdVQjDa -----END CERTIFICATE-----Generated at Sun Aug 10 05:38:27 2025 by rpki-client