$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: 1eBrzuxlUHiQi2q3q5gU8kpAS6DHdWvqCZf09Hl1mZQ= Subject key identifier: D9:89:1E:0D:0E:2E:0C:37:F3:78:EC:09:37:CD:AC:83:AC:14:08:8C Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 04CD Signing time: Tue 05 Aug 2025 00:16:44 +0000 Manifest this update: Tue 05 Aug 2025 00:16:44 +0000 Manifest next update: Tue 12 Aug 2025 00:16:44 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: GRUofO6I/ULd95WQMHLt20wMHovlpIGuohklzKUUfbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: Aug 5 00:16:44 2025 GMT Not After : Aug 12 00:16:44 2025 GMT Subject: CN=68914d6c-9bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:a5:1e:bb:75:2a:87:b1:f9:c9:04:6b:90: e5:68:59:3e:a2:69:7b:12:31:e3:45:2f:6f:db:59: a5:e3:01:57:1f:7e:0c:a3:dd:b4:f2:5d:aa:f9:92: 87:76:f7:0b:91:7a:88:ce:72:75:7e:97:e9:63:f5: bd:2b:1f:bb:78:45:20:58:35:2b:03:b1:95:e1:25: 1e:f5:de:9f:e5:87:cf:b9:e0:d2:3a:1a:96:85:95: 8d:79:2a:34:55:4f:5e:17:48:be:b8:ec:7d:43:4a: 37:86:42:14:c6:ae:fb:5f:26:58:0c:e9:53:f4:da: d9:d2:26:cb:c9:db:3f:f8:64:59:28:da:04:da:bc: ed:8a:58:38:c6:49:e3:58:b2:69:3d:15:fd:15:77: 4a:fc:82:c7:a2:6d:5a:fc:1b:a4:ad:c3:a8:de:97: f7:a9:47:67:16:96:12:d1:20:fd:d8:ba:e3:7a:da: bf:8f:71:a5:9c:f9:32:fe:89:4d:93:52:02:6b:6c: 28:00:20:33:ef:85:37:b3:ba:ac:ca:6f:8c:16:20: 02:d7:a1:7c:fa:c0:b8:78:ba:33:ea:d3:e9:8a:b8: a9:5c:c3:66:8c:e3:27:4d:ba:2e:6f:c6:06:23:70: be:04:00:b1:68:8e:d9:6c:20:1f:20:f8:e9:35:f3: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:1E:0D:0E:2E:0C:37:F3:78:EC:09:37:CD:AC:83:AC:14:08:8C X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b5:1f:a8:5b:c2:8f:d9:9d:f9:a4:53:cd:bf:f9:81:8d:71: 4d:0f:fe:c8:8d:19:4a:a2:ff:0b:2f:dc:5b:b2:d4:06:3f:a1: 81:81:ed:55:e5:19:b6:63:2b:1e:9a:a3:09:cb:e6:d9:68:cb: 1c:0c:81:f7:b4:41:a4:82:00:2f:87:a3:18:76:f2:08:d0:73: 43:33:36:e3:0e:cd:6d:c9:f0:6d:12:18:78:1b:51:e7:ae:67: 0b:d7:88:0a:49:f8:fc:a8:59:06:70:2d:30:d2:f4:f0:de:b2: 0c:0f:e1:35:53:c7:0c:23:77:79:fd:e5:c5:1f:be:05:d1:18: f1:ee:42:53:19:1c:b3:a8:b2:f1:e8:94:ad:b4:1f:15:5b:de: 0c:22:04:2c:66:6b:16:bd:a0:20:35:04:1b:5c:65:8c:72:c8: c2:77:1c:63:f0:b5:1d:f2:61:e6:ea:7d:0b:9f:4d:6d:22:29: 64:af:8e:67:cf:00:c2:2c:c0:de:69:53:95:41:b2:34:a9:ff: ad:fe:65:dd:2c:b5:fb:89:24:f3:13:28:73:52:9a:2e:59:f5: 6e:5a:1a:31:a0:91:8e:b6:26:26:d4:63:e2:e8:cb:67:e3:1e: 1b:76:7c:e8:ba:81:e6:8a:d3:06:69:e0:b6:84:54:13:d0:6c: 8e:4b:23:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjUwODA1MDAxNjQ0WhcNMjUwODEyMDAxNjQ0WjAYMRYwFAYD VQQDEw02ODkxNGQ2Yy05YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8SlHrt1Koex+ckEa5DlaFk+oml7EjHjRS9v21ml4wFXH34Mo9208l2q+ZKH dvcLkXqIznJ1fpfpY/W9Kx+7eEUgWDUrA7GV4SUe9d6f5YfPueDSOhqWhZWNeSo0 VU9eF0i+uOx9Q0o3hkIUxq77XyZYDOlT9NrZ0ibLyds/+GRZKNoE2rztilg4xknj WLJpPRX9FXdK/ILHom1a/BukrcOo3pf3qUdnFpYS0SD92Lrjetq/j3GlnPky/olN k1ICa2woACAz74U3s7qsym+MFiAC16F8+sC4eLoz6tPpiripXMNmjOMnTboub8YG I3C+BACxaI7ZbCAfIPjpNfPG6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmJHg0O Lgw383jsCTfNrIOsFAiMMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8tR+oW8KP2Z35pFPNv/mBjXFND/7IjRlKov8LL9xbstQGP6GBge1V 5Rm2YysemqMJy+bZaMscDIH3tEGkggAvh6MYdvII0HNDMzbjDs1tyfBtEhh4G1Hn rmcL14gKSfj8qFkGcC0w0vTw3rIMD+E1U8cMI3d5/eXFH74F0Rjx7kJTGRyzqLLx 6JSttB8VW94MIgQsZmsWvaAgNQQbXGWMcsjCdxxj8LUd8mHm6n0Ln01tIilkr45n zwDCLMDeaVOVQbI0qf+t/mXdLLX7iSTzEyhzUpouWfVuWhoxoJGOtiYm1GPi6Mtn 4x4bdnzouoHmitMGaeC2hFQT0GyOSyM4 -----END CERTIFICATE-----Generated at Wed Aug 6 19:31:56 2025 by rpki-client