$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: ghiktxzbcvIo6qS1cMYbiNwCgnNQjNJBvGSynWjDPsE= Subject key identifier: 70:F8:8D:B3:08:B7:B4:F6:A8:F0:28:44:7B:D4:98:8D:01:5C:8E:6E Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 05F8 Signing time: Fri 08 Aug 2025 23:17:36 +0000 Manifest this update: Fri 08 Aug 2025 23:17:35 +0000 Manifest next update: Fri 15 Aug 2025 23:17:35 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: rg9A7CASVgx4F13aLu8JpvwrFyvoB1NmRMQnkds2h5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Aug 8 23:17:35 2025 GMT Not After : Aug 15 23:17:35 2025 GMT Subject: CN=68968590-a7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:dd:71:88:ce:7f:ac:9d:69:15:e1:4d:db: bf:ca:53:39:d8:28:46:c7:5a:c2:3e:83:ce:9f:40: 6f:15:ef:36:db:6c:c6:7b:b1:14:0a:9f:e1:a8:55: a0:da:d1:6f:d9:e1:2f:f5:df:24:ae:4b:8a:b5:83: e3:26:bb:ce:80:f2:5c:cf:ac:c7:81:75:48:28:d4: 15:3d:fd:ce:19:fe:44:54:c0:ac:23:45:80:6e:ab: 7d:fe:11:5f:a4:b0:5e:34:c2:75:b2:d8:4b:ca:ee: 5c:ff:dc:67:10:e6:a2:3e:01:c9:3d:37:02:cd:81: c2:85:d4:68:29:ff:b0:a6:3f:27:2f:a9:cc:c2:e7: b8:14:57:dc:fc:d2:56:39:cd:09:d2:de:99:10:93: a2:54:df:f5:c3:17:ae:ee:39:eb:f8:ec:7f:78:39: f0:fc:f9:c3:e2:7b:92:83:ba:9d:2b:ec:9a:d3:7e: 42:6a:2d:3a:6d:68:db:76:54:22:6d:50:f8:a8:5d: 5f:c7:ec:42:2d:c5:1c:cd:27:55:51:0a:2e:c9:b0: 06:99:41:e0:29:20:a9:2a:07:91:55:10:01:6e:38: f2:00:b9:ba:11:41:6e:dc:c4:93:59:a4:c3:ad:da: b2:24:02:a0:12:2b:8f:0c:70:53:ca:3e:57:64:ab: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F8:8D:B3:08:B7:B4:F6:A8:F0:28:44:7B:D4:98:8D:01:5C:8E:6E X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:07:b6:14:4a:a0:ed:fc:e1:b3:68:6a:57:7a:87:a5:e5: 20:a4:3f:a4:79:2e:62:2d:5b:be:ad:e9:a6:b0:52:91:34:76: 5e:6d:6b:14:96:16:09:10:80:5b:d8:26:5d:48:f8:b6:13:96: 5a:49:8d:57:23:39:1e:e7:48:fd:06:80:64:ef:ed:8a:b7:a9: a2:7d:c3:56:c1:10:d9:28:22:ee:34:5e:f0:03:b1:ef:16:a4: d0:96:74:d8:5a:65:de:8d:5d:97:d8:82:72:5f:bb:f9:36:a4: f5:62:0a:2c:ba:d1:a4:5e:aa:34:54:ea:ff:58:01:3b:42:3a: 01:35:ff:2b:41:4c:25:f9:ad:4a:eb:11:00:9a:be:49:b6:62: 11:dc:a9:69:e6:ba:c7:62:2d:a1:d0:3e:de:9f:bb:48:92:1d: 49:17:38:1b:48:61:0c:08:bc:11:05:23:0d:82:a8:f3:13:c5: 6a:65:55:f7:21:f6:48:75:e7:6b:02:6f:e0:b1:1d:5f:fd:e5: ef:e0:c3:5c:06:80:f9:3e:b0:04:ad:b5:03:4f:91:48:fb:b7: 19:74:fb:ba:be:29:b1:d4:ea:01:f6:60:d0:4d:19:d3:83:dc: 26:15:e6:ed:0c:ff:6f:d5:5d:b6:c0:a4:3f:68:b2:19:7f:ce: 5e:12:c1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUwODA4MjMxNzM1WhcNMjUwODE1MjMxNzM1WjAYMRYwFAYD VQQDEw02ODk2ODU5MC1hN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqjdcYjOf6ydaRXhTdu/ylM52ChGx1rCPoPOn0BvFe8222zGe7EUCp/hqFWg 2tFv2eEv9d8krkuKtYPjJrvOgPJcz6zHgXVIKNQVPf3OGf5EVMCsI0WAbqt9/hFf pLBeNMJ1sthLyu5c/9xnEOaiPgHJPTcCzYHChdRoKf+wpj8nL6nMwue4FFfc/NJW Oc0J0t6ZEJOiVN/1wxeu7jnr+Ox/eDnw/PnD4nuSg7qdK+ya035Cai06bWjbdlQi bVD4qF1fx+xCLcUczSdVUQouybAGmUHgKSCpKgeRVRABbjjyALm6EUFu3MSTWaTD rdqyJAKgEiuPDHBTyj5XZKvZBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD4jbMI t7T2qPAoRHvUmI0BXI5uMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2fwe2FEqg7fzhs2hqV3qHpeUgpD+keS5iLVu+remmsFKRNHZebWsU lhYJEIBb2CZdSPi2E5ZaSY1XIzke50j9BoBk7+2Kt6mifcNWwRDZKCLuNF7wA7Hv FqTQlnTYWmXejV2X2IJyX7v5NqT1YgosutGkXqo0VOr/WAE7QjoBNf8rQUwl+a1K 6xEAmr5JtmIR3Klp5rrHYi2h0D7en7tIkh1JFzgbSGEMCLwRBSMNgqjzE8VqZVX3 IfZIdedrAm/gsR1f/eXv4MNcBoD5PrAErbUDT5FI+7cZdPu6vimx1OoB9mDQTRnT g9wmFebtDP9v1V22wKQ/aLIZf85eEsFf -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:21 2025 by rpki-client