$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: zXsretTWEGHY0Pf+3Xn4Qnd93kWsKcXlokf6n12vJCw= Subject key identifier: B1:FA:F5:34:04:21:20:D2:61:93:A4:B2:15:99:E9:5C:18:47:0F:FC Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 34A5 Signing time: Fri 08 Aug 2025 15:14:45 +0000 Manifest this update: Fri 08 Aug 2025 15:14:44 +0000 Manifest next update: Fri 15 Aug 2025 15:14:44 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: dusIgwkPyr4l9ZeeT6hgsxN4nrEGuEsLPCVc+VaOHsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Aug 8 15:14:44 2025 GMT Not After : Aug 15 15:14:44 2025 GMT Subject: CN=68961465-eb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:7f:92:00:c3:f5:12:be:99:ee:d0:cc:46: 64:8b:fb:e4:e7:15:4c:ca:9d:45:d4:d9:03:15:db: b7:c7:8d:a0:8c:d4:b9:8e:4a:97:1f:cc:7b:2a:7d: b9:40:d1:a3:42:40:f1:63:11:c4:4e:be:6c:3e:4a: 41:0a:d8:0d:fd:88:75:7e:f5:d5:00:cf:b7:d9:17: 7c:8c:8b:8f:13:ab:0d:61:81:27:e7:77:b7:59:88: f1:e8:1e:b2:80:60:ac:d6:b8:af:31:6f:53:e0:a2: 3d:42:a6:c6:db:b1:b1:c9:59:40:3e:94:29:f8:95: b3:5f:d4:28:1a:77:41:48:63:78:bf:3a:51:a8:80: c4:f8:5d:29:30:b9:0c:1e:2b:3e:4c:b0:50:fa:6e: 10:f0:1a:26:73:41:8e:a0:03:a2:9a:6d:5d:91:6f: 27:cc:f7:13:fa:02:a1:d2:ec:16:57:84:71:a7:20: 72:46:3d:f4:a7:19:38:1d:16:62:b5:e1:26:19:4a: 26:13:b6:7d:d6:f0:47:e8:d1:c1:26:0c:0e:27:5a: fc:a2:c5:54:ed:24:b5:46:be:17:c8:00:f1:1d:51: 83:84:66:52:01:e1:a9:d0:3d:d6:62:8a:60:71:69: 39:e9:65:55:d5:b2:53:eb:8e:21:76:2e:0b:4c:bb: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:F5:34:04:21:20:D2:61:93:A4:B2:15:99:E9:5C:18:47:0F:FC X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:8e:cd:2f:47:81:c5:2b:3a:65:a9:e9:46:0c:ae:1a:dd:5d: b5:b5:94:89:c8:0e:4d:3e:f2:79:5b:9b:b2:19:02:28:03:1d: 48:84:bd:64:3c:e9:35:72:2c:bf:d5:3e:5d:07:4d:be:a7:b4: 88:3e:c3:c6:f7:74:b6:24:db:31:02:b9:aa:61:1c:33:61:22: 45:a4:97:d5:a9:d7:6c:51:2e:ff:6f:3d:6d:a7:de:10:b6:1c: a7:97:1b:d9:88:f6:6e:06:2d:c9:ae:87:2a:34:8a:5f:57:80: 66:88:50:ac:25:cf:c3:b6:6f:2f:f3:26:ae:0f:e1:55:9f:23: b9:15:db:3f:cc:c3:59:d5:2a:d6:20:b2:54:e3:2d:3d:b1:d2: fb:6f:ba:f2:6a:d6:a7:2d:f2:8c:2e:96:a0:94:1d:69:e0:64: 53:52:3a:67:46:47:99:e5:08:19:fd:04:19:d9:21:6c:3b:3f: 60:bb:62:7d:0e:13:05:35:6f:a7:80:0b:c2:d2:fe:69:4d:0c: 19:c2:06:da:84:be:5d:63:ae:c3:88:32:6b:1b:e6:d9:9a:a2: 37:2f:0e:79:9f:34:b1:be:27:9a:d5:1c:3d:08:73:9a:c2:78: 49:22:1f:69:b9:12:63:b0:99:2a:5c:ae:03:55:c4:f2:23:af: 3d:90:b2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUwODA4MTUxNDQ0WhcNMjUwODE1MTUxNDQ0WjAYMRYwFAYD VQQDEw02ODk2MTQ2NS1lYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN9/kgDD9RK+me7QzEZki/vk5xVMyp1F1NkDFdu3x42gjNS5jkqXH8x7Kn25 QNGjQkDxYxHETr5sPkpBCtgN/Yh1fvXVAM+32Rd8jIuPE6sNYYEn53e3WYjx6B6y gGCs1rivMW9T4KI9QqbG27GxyVlAPpQp+JWzX9QoGndBSGN4vzpRqIDE+F0pMLkM His+TLBQ+m4Q8Bomc0GOoAOimm1dkW8nzPcT+gKh0uwWV4RxpyByRj30pxk4HRZi teEmGUomE7Z91vBH6NHBJgwOJ1r8osVU7SS1Rr4XyADxHVGDhGZSAeGp0D3WYopg cWk56WVV1bJT644hdi4LTLs1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH69TQE ISDSYZOkshWZ6VwYRw/8MB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVjs0vR4HFKzplqelGDK4a3V21tZSJyA5NPvJ5W5uyGQIoAx1IhL1k POk1ciy/1T5dB02+p7SIPsPG93S2JNsxArmqYRwzYSJFpJfVqddsUS7/bz1tp94Q thynlxvZiPZuBi3JrocqNIpfV4BmiFCsJc/Dtm8v8yauD+FVnyO5Fds/zMNZ1SrW ILJU4y09sdL7b7ryatanLfKMLpaglB1p4GRTUjpnRkeZ5QgZ/QQZ2SFsOz9gu2J9 DhMFNW+ngAvC0v5pTQwZwgbahL5dY67DiDJrG+bZmqI3Lw55nzSxviea1Rw9CHOa wnhJIh9puRJjsJkqXK4DVcTyI689kLIG -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:29 2025 by rpki-client