$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: gqP/3vJd+W3qHNnMb4JtE59H/Z4LoQPvMhJfZgklDJQ= Subject key identifier: 81:0B:F1:5B:09:5A:8D:16:1F:95:59:F4:BE:8B:5F:32:49:50:91:47 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 3486 Signing time: Fri 08 Aug 2025 15:23:26 +0000 Manifest this update: Fri 08 Aug 2025 15:23:25 +0000 Manifest next update: Fri 15 Aug 2025 15:23:25 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: SMxalOJevnHeTWGu0nM6dCIwVF8438RJ3ibrOjKGf88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Aug 8 15:23:25 2025 GMT Not After : Aug 15 15:23:25 2025 GMT Subject: CN=6896166e-2cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:10:19:0c:20:ce:8d:fc:65:31:40:7f:d6: f2:8c:ca:c1:15:50:97:38:7a:c2:3f:70:0e:15:f2: be:dd:8f:cf:17:32:70:dd:15:59:64:16:a7:f3:56: 70:3c:0e:d9:10:01:e5:d8:23:ee:aa:d2:04:33:f5: a3:63:4f:23:c9:62:58:59:3e:ae:c4:57:15:98:ec: ff:6c:fa:91:64:6e:97:56:da:b3:77:d7:0f:33:19: b6:00:ab:a4:85:7f:eb:a9:ca:b4:f8:d4:f5:24:01: de:23:c5:f5:96:39:87:a5:12:a9:09:ce:e8:e2:46: f4:38:3e:7c:7b:ab:17:fa:f2:ff:ab:b0:6f:50:5f: 68:31:4b:50:b5:4a:e5:e9:bf:58:4e:81:14:58:92: 91:52:dd:5b:0b:cf:08:3f:8b:26:07:24:e8:2b:90: 33:f8:16:50:62:20:f5:9b:81:17:23:7a:4f:e6:66: 0c:7d:b2:a0:b7:49:51:a6:c9:28:9d:64:00:72:12: b1:32:13:c7:d8:71:45:14:7d:6b:fa:68:ca:5e:0f: 57:12:32:c4:61:b9:f1:00:4b:dd:af:38:5e:b4:73: 2f:f5:92:f0:c4:0f:5c:22:a8:8b:26:68:42:0c:82: e2:70:1d:c5:f6:1f:a1:35:44:fd:5b:f6:24:2c:41: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0B:F1:5B:09:5A:8D:16:1F:95:59:F4:BE:8B:5F:32:49:50:91:47 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3a:50:2d:67:e5:b9:2e:9c:7b:78:94:b5:2e:a8:bd:bb:a2: fd:4a:18:fa:3a:56:a9:f3:5f:72:11:7f:c4:4d:61:e0:df:1f: 7a:eb:b5:d6:09:58:c1:de:7a:65:3e:6f:73:19:f2:7a:04:89: e7:d7:f3:9e:02:39:d4:95:a4:b1:cd:d8:c4:c8:80:01:3d:38: e9:10:39:4b:b4:cb:ad:8e:93:d8:56:a3:8d:2a:d8:b4:08:31: 77:3a:4c:d9:1d:69:57:1f:01:23:af:e0:91:76:88:ad:71:54: db:66:e8:6c:d5:32:79:f7:55:c8:7b:74:39:e9:79:85:aa:99: 68:65:58:9f:ff:00:50:7c:9a:47:06:7c:0d:60:52:bd:0b:ae: 3f:f4:05:c3:99:81:c0:ed:e2:03:57:40:59:71:3a:56:0a:c7: fe:5d:97:0d:bf:1c:da:f0:ca:a9:85:0c:42:b7:d0:00:ba:1e: 58:be:05:a9:e5:d1:db:11:01:6a:08:43:1b:99:a6:69:42:82: ec:22:21:66:f3:c1:ac:44:29:ec:f6:b7:9f:96:d6:a7:7c:c6: 52:60:a5:2d:f7:4c:c7:a7:d6:ed:15:25:aa:02:66:19:74:5d: 91:0f:38:d0:c7:10:0d:e1:46:5c:7b:70:a9:a5:d3:a2:bc:d0: b6:d7:f5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUwODA4MTUyMzI1WhcNMjUwODE1MTUyMzI1WjAYMRYwFAYD VQQDEw02ODk2MTY2ZS0yY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZgQGQwgzo38ZTFAf9byjMrBFVCXOHrCP3AOFfK+3Y/PFzJw3RVZZBan81Zw PA7ZEAHl2CPuqtIEM/WjY08jyWJYWT6uxFcVmOz/bPqRZG6XVtqzd9cPMxm2AKuk hX/rqcq0+NT1JAHeI8X1ljmHpRKpCc7o4kb0OD58e6sX+vL/q7BvUF9oMUtQtUrl 6b9YToEUWJKRUt1bC88IP4smByToK5Az+BZQYiD1m4EXI3pP5mYMfbKgt0lRpsko nWQAchKxMhPH2HFFFH1r+mjKXg9XEjLEYbnxAEvdrzhetHMv9ZLwxA9cIqiLJmhC DILicB3F9h+hNUT9W/YkLEHFpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEL8VsJ Wo0WH5VZ9L6LXzJJUJFHMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiOlAtZ+W5Lpx7eJS1Lqi9u6L9Shj6Olap819yEX/ETWHg3x9667XW CVjB3nplPm9zGfJ6BInn1/OeAjnUlaSxzdjEyIABPTjpEDlLtMutjpPYVqONKti0 CDF3OkzZHWlXHwEjr+CRdoitcVTbZuhs1TJ591XIe3Q56XmFqploZVif/wBQfJpH BnwNYFK9C64/9AXDmYHA7eIDV0BZcTpWCsf+XZcNvxza8MqphQxCt9AAuh5YvgWp 5dHbEQFqCEMbmaZpQoLsIiFm88GsRCns9refltanfMZSYKUt90zHp9btFSWqAmYZ dF2RDzjQxxAN4UZce3CppdOivNC21/VN -----END CERTIFICATE-----Generated at Sat Aug 9 23:10:47 2025 by rpki-client