$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft File: pbtkBP5TtawGtBCz1s2gNKITHpA.mft (raw, json) Hash identifier: EWmM4FAddTd0V6vgmjuVKqBtHWy+KLpTliVRbVT2qic= Subject key identifier: DD:DA:58:B1:4B:73:C4:07:F9:67:36:A9:84:D4:7A:59:4D:F6:5F:34 Authority key identifier: A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90 Certificate issuer: /CN=A915DE6C/serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft Manifest number: 23 Signing time: Mon 11 Aug 2025 08:06:53 +0000 Manifest this update: Mon 11 Aug 2025 08:06:53 +0000 Manifest next update: Mon 18 Aug 2025 08:06:53 +0000 Files and hashes: 1: pbtkBP5TtawGtBCz1s2gNKITHpA.crl (hash: qJiS/mFb7/mhJ9rdF0/9R3jRAwc678ashpghqoERsCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.crl rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90 Validity Not Before: Aug 11 08:06:53 2025 GMT Not After : Aug 18 08:06:53 2025 GMT Subject: CN=6899a49d-cc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:d2:7b:05:15:de:d9:4c:5f:34:a9:08:3c: 5f:1c:ab:67:2a:9a:82:0f:9b:80:85:92:54:14:7e: 76:4a:5c:99:32:fa:04:b3:da:11:90:8f:d5:2a:c5: b3:2c:1a:16:d1:d9:b5:54:07:55:2e:f9:3b:00:77: f2:51:e4:0c:6d:bb:7f:55:01:7c:8f:7f:40:c1:b9: d7:91:08:f4:6b:96:6a:96:cb:a2:e0:a2:20:27:8e: 51:ac:66:83:76:84:15:6d:b8:52:f7:20:f3:4f:6f: 0f:4d:25:24:32:80:71:1d:86:3f:40:20:56:ea:b6: b1:9d:95:b4:78:9f:a4:18:c6:c4:39:d3:ee:c7:e9: c9:b2:e4:da:ba:1d:08:c1:e7:70:c9:3b:a0:5f:2a: 88:03:cc:4a:32:fa:a7:b8:c1:bd:6b:5b:74:34:2b: e9:a1:fc:9a:f1:c3:5f:8a:e5:0a:ed:dc:84:58:d2: 07:aa:25:c9:8a:be:4f:17:a9:31:20:99:69:18:e3: 5f:cf:f3:61:70:2a:7f:49:6a:8b:dd:02:ab:ee:15: e5:1e:bc:1c:69:dd:ab:a2:af:79:ef:45:7d:e1:ee: 6d:78:2e:0a:f3:7a:59:d9:2a:b8:94:c9:01:f1:7d: 10:29:6e:c4:d7:ea:88:c6:bf:f4:03:3b:40:9b:e2: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DA:58:B1:4B:73:C4:07:F9:67:36:A9:84:D4:7A:59:4D:F6:5F:34 X509v3 Authority Key Identifier: keyid:A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:98:cb:bc:d6:01:e9:3e:36:26:dd:8a:3c:ac:eb:10:c3:b8: 5e:72:8d:a4:3c:0d:d3:ab:d3:6e:01:a9:a7:50:18:fd:18:ef: 3d:a9:b6:e8:72:99:08:43:d1:0e:45:49:cd:68:9a:12:5d:96: 65:d4:d6:ba:22:e5:fa:e5:6b:4f:ac:2b:4b:19:c4:83:38:8d: ee:d7:60:85:23:7d:b9:ce:33:e9:17:c5:09:06:74:00:b4:55: e8:9e:c3:be:46:81:a5:e9:cf:4f:0b:7b:cb:90:be:37:18:a4: 03:ac:b7:1c:63:de:1e:2c:8e:7d:37:76:90:02:99:20:79:5a: be:9d:9d:d8:6a:92:75:62:e6:09:21:e8:65:82:0d:d8:4b:0f: 40:4f:5d:bb:fb:1a:0d:64:5d:c2:86:75:c9:4e:4b:d0:67:5a: 36:4d:e3:e6:2a:2e:16:94:b4:16:3d:d3:18:fa:e5:a3:4b:20: 2d:b9:78:bd:6e:bc:c4:eb:ff:27:3a:18:2a:24:fc:fa:4f:7f: 6c:d2:31:3a:b9:2c:de:99:a1:93:c6:d5:af:ad:cc:a9:c1:a7: b9:7a:54:8f:5e:80:f7:d2:f1:7d:4e:58:9e:20:61:d5:bc:2d: ed:80:58:67:82:29:e7:23:97:00:bc:e1:dc:1a:63:f6:2c:56: bb:44:e4:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 REU2QzExMC8GA1UEBRMoQTVCQjY0MDRGRTUzQjVBQzA2QjQxMEIzRDZDREEwMzRB MjEzMUU5MDAeFw0yNTA4MTEwODA2NTNaFw0yNTA4MTgwODA2NTNaMBgxFjAUBgNV BAMTDTY4OTlhNDlkLWNjNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvgtJ7BRXe2UxfNKkIPF8cq2cqmoIPm4CFklQUfnZKXJky+gSz2hGQj9UqxbMs GhbR2bVUB1Uu+TsAd/JR5Axtu39VAXyPf0DBudeRCPRrlmqWy6LgoiAnjlGsZoN2 hBVtuFL3IPNPbw9NJSQygHEdhj9AIFbqtrGdlbR4n6QYxsQ50+7H6cmy5Nq6HQjB 53DJO6BfKogDzEoy+qe4wb1rW3Q0K+mh/Jrxw1+K5Qrt3IRY0geqJcmKvk8XqTEg mWkY41/P82FwKn9JaovdAqvuFeUevBxp3auir3nvRX3h7m14LgrzelnZKriUyQHx fRApbsTX6ojGv/QDO0Cb4lQ3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3dpYsUtz xAf5ZzaphNR6WU32XzQwHwYDVR0jBBgwFoAUpbtkBP5TtawGtBCz1s2gNKITHpAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVERTZDLzc0RkJCM0Q2NDNE NDExRjA5MEI0NzY2OEM0RjlBRTAyL3BidGtCUDVUdGF3R3RCQ3oxczJnTktJVEhw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGJ0a0JQNVR0YXdHdEJDejFzMmdOS0lUSHBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE RTZDLzc0RkJCM0Q2NDNENDExRjA5MEI0NzY2OEM0RjlBRTAyL3BidGtCUDVUdGF3 R3RCQ3oxczJnTktJVEhwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGYy7zWAek+Nibdijys6xDDuF5yjaQ8DdOr024BqadQGP0Y7z2ptuhy mQhD0Q5FSc1omhJdlmXU1roi5frla0+sK0sZxIM4je7XYIUjfbnOM+kXxQkGdAC0 Veiew75GgaXpz08Le8uQvjcYpAOstxxj3h4sjn03dpACmSB5Wr6dndhqknVi5gkh 6GWCDdhLD0BPXbv7Gg1kXcKGdclOS9BnWjZN4+YqLhaUtBY90xj65aNLIC25eL1u vMTr/yc6GCok/PpPf2zSMTq5LN6ZoZPG1a+tzKnBp7l6VI9egPfS8X1OWJ4gYdW8 Le2AWGeCKecjlwC84dwaY/YsVrtE5MI= -----END CERTIFICATE-----Generated at Tue Aug 12 14:49:06 2025 by rpki-client