$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: RI53cyAjwBYCuJCLGBE5toFkf5UGHcC4r050qhQ7duo= Subject key identifier: B1:FA:84:8A:1B:3E:F6:00:96:C2:7A:33:A5:8F:4E:4E:E8:AD:99:A8 Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 34AB Signing time: Tue 12 Aug 2025 15:13:45 +0000 Manifest this update: Tue 12 Aug 2025 15:13:44 +0000 Manifest next update: Tue 19 Aug 2025 15:13:44 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: jh2wyeJ8PT6ZKXO/JRb6LnZYBWX3QJrpWoAT14QffAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Aug 12 15:13:44 2025 GMT Not After : Aug 19 15:13:44 2025 GMT Subject: CN=689b5a29-5c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:77:24:21:ed:79:08:cc:1d:d7:e0:a5:95: 61:80:1c:87:62:97:3a:f0:f7:ca:d2:b8:12:dc:e6: 92:14:56:2b:9f:33:02:d6:23:59:ca:c4:1b:4f:04: 7a:70:30:89:39:43:1a:58:d4:2f:74:ff:ae:e0:d5: d3:b3:2e:b4:46:eb:0d:98:70:17:85:c7:58:ea:7d: d1:6a:49:90:67:60:d6:a1:7c:c5:74:c1:85:e3:c1: 0b:a7:0e:2c:33:78:9c:09:09:4c:cd:f4:05:37:a2: 0b:66:1d:4d:cd:57:0b:e8:d2:0a:50:3b:fc:54:52: 98:36:9f:d8:09:95:d2:eb:ad:32:6b:03:b6:5d:a5: fd:75:3e:4f:9c:cd:95:be:cb:3e:e2:8a:38:70:60: f8:d8:42:95:c8:3f:54:b9:1f:ab:d6:bd:66:56:50: 77:c5:2b:05:52:97:2e:96:5a:8c:d6:5c:fb:27:ad: 6d:44:43:a0:6e:fa:a2:1c:b8:91:52:a0:bd:df:9c: c5:d4:af:47:4f:68:6d:df:4e:e9:37:ac:45:c9:bb: 53:18:dd:1e:f7:fb:ab:43:14:5b:85:d8:64:eb:db: 5b:72:b8:71:24:b0:5b:56:a7:16:5e:e5:0a:b6:17: 9b:9f:e0:f4:31:94:a3:cb:87:83:4d:96:c9:1c:e8: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:84:8A:1B:3E:F6:00:96:C2:7A:33:A5:8F:4E:4E:E8:AD:99:A8 X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:72:6b:7b:e7:20:ce:d0:4d:1d:71:af:53:8b:a2:52:8e:2e: e9:04:d1:eb:5f:7c:7a:c0:8e:62:5b:84:59:8a:db:2a:20:5f: b2:dd:b0:7a:35:1a:2c:b4:76:65:1e:27:97:51:ef:47:1f:42: bb:76:b5:39:58:52:ab:be:1c:0e:78:97:10:03:ca:bd:72:1f: fa:4b:81:31:78:4e:e3:0d:fb:b6:e4:98:8e:26:74:19:40:81: 4d:d8:e0:12:f8:00:b4:f1:7c:47:5d:00:68:f9:6a:50:f6:4a: 21:85:c2:b0:06:d0:89:ad:d4:16:35:bb:3f:5a:56:03:48:ee: f6:06:ae:3f:b9:ec:93:48:93:54:95:dd:bb:44:68:1e:c5:91: 23:97:7e:b7:c2:0d:f0:d6:1f:cd:36:8c:2f:92:b9:ae:d6:90: d1:3b:f9:84:57:4c:ce:0e:cf:f1:00:77:2c:b7:e3:23:cf:d0: 7e:a9:bd:8d:3b:ff:2e:81:ff:ed:b9:7d:a3:58:a0:7e:b4:de: 61:9e:83:f3:1d:0e:14:bb:7b:cf:f0:ee:e7:47:f8:22:a1:a4: 25:be:86:cd:b9:70:07:eb:34:cb:4d:1a:e7:2f:a0:2a:e6:73: 43:73:fc:e8:94:82:ac:4c:93:53:0e:13:f2:99:10:49:dc:26: 12:5f:56:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwODEyMTUxMzQ0WhcNMjUwODE5MTUxMzQ0WjAYMRYwFAYD VQQDEw02ODliNWEyOS01YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvR3JCHteQjMHdfgpZVhgByHYpc68PfK0rgS3OaSFFYrnzMC1iNZysQbTwR6 cDCJOUMaWNQvdP+u4NXTsy60RusNmHAXhcdY6n3RakmQZ2DWoXzFdMGF48ELpw4s M3icCQlMzfQFN6ILZh1NzVcL6NIKUDv8VFKYNp/YCZXS660yawO2XaX9dT5PnM2V vss+4oo4cGD42EKVyD9UuR+r1r1mVlB3xSsFUpcullqM1lz7J61tREOgbvqiHLiR UqC935zF1K9HT2ht307pN6xFybtTGN0e9/urQxRbhdhk69tbcrhxJLBbVqcWXuUK thebn+D0MZSjy4eDTZbJHOggcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH6hIob PvYAlsJ6M6WPTk7orZmoMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWcmt75yDO0E0dca9Ti6JSji7pBNHrX3x6wI5iW4RZitsqIF+y3bB6 NRostHZlHieXUe9HH0K7drU5WFKrvhwOeJcQA8q9ch/6S4ExeE7jDfu25JiOJnQZ QIFN2OAS+AC08XxHXQBo+WpQ9kohhcKwBtCJrdQWNbs/WlYDSO72Bq4/ueyTSJNU ld27RGgexZEjl363wg3w1h/NNowvkrmu1pDRO/mEV0zODs/xAHcst+Mjz9B+qb2N O/8ugf/tuX2jWKB+tN5hnoPzHQ4Uu3vP8O7nR/gioaQlvobNuXAH6zTLTRrnL6Aq 5nNDc/zolIKsTJNTDhPymRBJ3CYSX1bk -----END CERTIFICATE-----Generated at Tue Aug 12 22:42:04 2025 by rpki-client