$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft File: rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json) Hash identifier: xoSa9RxlEKewawtBCDqkeRmMFf/cmrkGm8PsvP41yUE= Subject key identifier: 46:A1:54:DA:24:9B:B8:1A:AF:BF:A5:78:08:7F:09:FF:6C:29:9C:43 Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft Manifest number: 34A7 Signing time: Tue 12 Aug 2025 14:46:14 +0000 Manifest this update: Tue 12 Aug 2025 14:46:14 +0000 Manifest next update: Tue 19 Aug 2025 14:46:14 +0000 Files and hashes: 1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: ejW8NkQSuGifsaQ1uqgDWf7Am0/0dVt/DyQg459eTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Validity Not Before: Aug 12 14:46:14 2025 GMT Not After : Aug 19 14:46:14 2025 GMT Subject: CN=689b53b6-3cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:f6:e0:2a:91:e2:cc:9c:59:14:f2:7e:37: f9:cd:25:bb:7b:04:62:56:90:0c:99:88:98:e9:16: dd:72:8d:b0:b8:81:2e:61:8b:a7:05:df:06:0a:64: 04:7b:78:19:3e:27:31:57:9b:d7:d3:e0:87:ba:90: 18:42:2b:13:e0:75:4c:6f:c9:85:e4:06:7c:a2:68: 21:59:73:e6:c6:d9:36:cc:8e:ba:57:a8:cb:bf:e9: 75:d0:c1:31:3c:01:ca:9a:7d:ce:f3:17:81:e3:60: 2c:5a:4e:ff:87:de:27:b3:b7:00:36:49:79:42:41: cc:43:45:5a:3c:8e:18:39:31:ac:11:f1:6b:5b:5a: 5b:f2:ac:df:51:74:4b:49:2a:3f:6a:2d:b8:e4:9d: 20:04:06:58:f7:f9:49:79:04:ba:74:c6:2f:f0:6f: fe:0a:45:71:63:fc:1e:35:33:37:d4:47:95:1a:e0: 6d:6b:e6:a3:5c:10:0b:ea:df:66:a1:d6:92:51:42: 73:1b:c3:e6:24:59:0a:c9:f6:fe:78:48:49:8d:7a: 5a:64:ff:d7:40:9a:40:0a:6e:80:be:f9:e4:fa:5d: ee:b2:ac:f8:44:ed:84:3d:92:92:37:1c:f4:26:d5: 00:12:f5:c6:8b:ed:00:09:67:52:a7:6c:11:69:fc: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A1:54:DA:24:9B:B8:1A:AF:BF:A5:78:08:7F:09:FF:6C:29:9C:43 X509v3 Authority Key Identifier: keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:89:b2:79:80:23:81:da:92:7d:79:d2:96:78:f4:8d:de:9a: 00:2e:b2:29:0e:8d:f1:a8:19:c0:c4:85:38:75:7c:ba:67:de: 12:ef:7f:b3:6b:04:67:98:e6:f4:29:e0:a4:c9:14:3c:9e:9b: 7d:0d:58:4d:8b:d5:ee:b1:e4:70:c6:45:7e:de:f2:21:a8:e9: 2d:b1:8a:7a:d3:30:1a:42:76:d9:94:e6:d2:84:02:02:3f:95: 4f:c6:f0:93:b9:e3:94:40:32:89:b6:ad:c2:99:0e:c4:0b:d3: 51:11:c3:59:3a:66:af:0a:86:f7:ac:b5:3b:b7:37:cc:bc:dd: 64:70:f9:c6:7e:4f:1f:70:dc:99:99:e2:9b:81:03:a8:6d:2d: cf:f8:40:38:d1:bb:36:7b:af:2e:e9:f5:7b:4b:e6:76:56:c2: 08:54:b0:3a:10:52:38:48:d0:0e:76:ab:c9:7a:5f:68:67:24: 72:66:72:ac:f1:7b:5d:66:f1:5d:23:99:1e:1c:e5:52:34:f7: 9d:6f:87:55:99:20:84:7c:0a:89:02:4d:8e:ec:af:70:82:9a: 94:50:5c:31:e1:07:5b:48:33:cb:a7:f1:ad:6c:37:22:f8:82: cd:16:4e:70:4f:27:f2:fb:d1:c1:41:b8:f2:4c:6c:c0:b4:8a: cf:d8:fd:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2NjkxMTAvBgNVBAUTKEFENEQ2NTNCODM1QzRFMURFOThFQzY2Mzc2ODg5QTlB ODM3NjRCMDIwHhcNMjUwODEyMTQ0NjE0WhcNMjUwODE5MTQ0NjE0WjAYMRYwFAYD VQQDEw02ODliNTNiNi0zY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolf24CqR4sycWRTyfjf5zSW7ewRiVpAMmYiY6Rbdco2wuIEuYYunBd8GCmQE e3gZPicxV5vX0+CHupAYQisT4HVMb8mF5AZ8omghWXPmxtk2zI66V6jLv+l10MEx PAHKmn3O8xeB42AsWk7/h94ns7cANkl5QkHMQ0VaPI4YOTGsEfFrW1pb8qzfUXRL SSo/ai245J0gBAZY9/lJeQS6dMYv8G/+CkVxY/weNTM31EeVGuBta+ajXBAL6t9m odaSUUJzG8PmJFkKyfb+eEhJjXpaZP/XQJpACm6Avvnk+l3usqz4RO2EPZKSNxz0 JtUAEvXGi+0ACWdSp2wRafxO8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEahVNok m7gar7+leAh/Cf9sKZxDMB8GA1UdIwQYMBaAFK1NZTuDXE4d6Y7GY3aImpqDdksC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjY2OS85RDVCRjZGRTFE OTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1RoM3Bqc1pqZG9pYW1vTjJT d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVMWxPNE5jVGgzcGpzWmpkb2lhbW9OMlN3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjY2OS85RDVCRjZGRTFEOTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1Ro M3Bqc1pqZG9pYW1vTjJTd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNibJ5gCOB2pJ9edKWePSN3poALrIpDo3xqBnAxIU4dXy6Z94S73+z awRnmOb0KeCkyRQ8npt9DVhNi9XuseRwxkV+3vIhqOktsYp60zAaQnbZlObShAIC P5VPxvCTueOUQDKJtq3CmQ7EC9NREcNZOmavCob3rLU7tzfMvN1kcPnGfk8fcNyZ meKbgQOobS3P+EA40bs2e68u6fV7S+Z2VsIIVLA6EFI4SNAOdqvJel9oZyRyZnKs 8XtdZvFdI5keHOVSNPedb4dVmSCEfAqJAk2O7K9wgpqUUFwx4QdbSDPLp/GtbDci +ILNFk5wTyfy+9HBQbjyTGzAtIrP2P34 -----END CERTIFICATE-----Generated at Wed Aug 13 04:29:14 2025 by rpki-client