$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: 2Ej4hDNKmU2v+wI8E5PdTsEd/GhC8LWwMFSDy8+QCFs= Subject key identifier: CC:83:8F:5B:A2:B0:30:FE:87:9B:E6:70:6D:52:31:4E:45:13:37:58 Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 34AA Signing time: Tue 12 Aug 2025 15:04:01 +0000 Manifest this update: Tue 12 Aug 2025 15:04:00 +0000 Manifest next update: Tue 19 Aug 2025 15:04:00 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: tLPj/Wj5k+2yop5gC0lzKEleG4RplKyRukl6eN6ve5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Aug 12 15:04:00 2025 GMT Not After : Aug 19 15:04:00 2025 GMT Subject: CN=689b57e1-303c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:83:4c:e4:f0:95:d8:2d:4d:9b:cb:5e:34: 39:0e:39:6f:4c:ab:9f:c9:1e:96:8b:6e:f6:fa:3c: b4:21:11:53:db:f3:15:ae:0b:6d:c1:a7:22:7a:aa: 45:e0:e3:03:93:d6:a7:dd:49:a9:64:ca:44:37:60: 8c:9a:67:fc:0d:0e:e5:40:da:9d:8e:ba:16:5a:5a: 05:01:dc:e1:5e:1f:b3:4a:58:27:fc:84:1f:d8:52: ff:fc:f5:c8:6c:c8:a0:ef:a5:9a:9b:47:a2:9e:de: 9d:ce:a5:ac:ba:22:77:fc:c0:22:5b:7b:84:66:40: 8e:35:94:93:55:c8:8e:3e:86:0d:f1:a8:b5:63:d7: 58:c6:6b:5c:11:9b:25:e2:f4:e5:12:32:db:4c:cf: 58:f8:59:a3:e5:a1:3b:91:98:f2:ab:47:9b:94:d2: b8:3d:ed:6b:a9:ee:a5:bb:1a:98:8f:c0:79:70:da: a4:1b:77:6e:6d:d9:3c:83:c1:c5:b9:df:bb:33:d4: 40:a5:18:40:9c:cb:ed:d3:e5:aa:f4:c7:13:77:fd: 58:7c:a4:c6:38:84:a6:0d:55:ca:da:8a:5f:fd:09: df:81:a9:43:98:24:82:20:ad:95:92:95:60:d0:83: 32:18:bd:82:13:5f:d6:f3:7b:82:31:a9:a1:82:d7: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:8F:5B:A2:B0:30:FE:87:9B:E6:70:6D:52:31:4E:45:13:37:58 X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:94:dd:14:bb:ba:fc:11:c7:53:29:17:9d:e3:42:9f:a0:8d: 26:b3:1c:4b:cd:95:2e:7e:fb:9d:2a:79:2b:63:6f:01:13:be: 53:e7:9a:65:ab:6d:60:ef:d6:90:20:91:37:59:4e:dd:36:a7: bd:4e:48:49:32:05:e9:1c:d7:e4:7d:39:3f:bc:fa:3d:c2:11: 07:82:8a:16:68:54:ba:98:09:53:7b:70:5e:f3:f0:0b:fb:f4: b8:44:2d:d4:24:23:49:1f:24:31:b7:0b:db:76:64:33:a7:24: a1:f7:eb:24:47:0e:aa:c7:5b:96:52:f1:b4:60:da:10:8b:fe: 12:49:09:cb:84:2c:1a:c5:79:47:fe:1c:0b:b4:00:16:68:6d: 7f:f2:39:87:14:12:07:84:90:a7:53:c1:70:ce:a6:d1:4e:91: e3:4f:4f:32:30:92:66:17:e7:db:7e:bf:88:d6:60:88:94:d5: 85:e6:bf:da:9a:b3:ac:cc:d5:20:96:9b:15:81:ca:6a:6d:44: 64:94:ba:90:b5:b6:0f:18:3b:85:9b:e6:ef:63:af:fc:64:c0: 47:11:6c:05:d7:8a:6a:58:67:11:02:a7:7e:4f:60:21:d3:f0: 86:82:43:10:62:fa:ff:54:6e:61:2a:ac:77:80:ce:9d:15:8f: 05:ea:f3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUwODEyMTUwNDAwWhcNMjUwODE5MTUwNDAwWjAYMRYwFAYD VQQDEw02ODliNTdlMS0zMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4euDTOTwldgtTZvLXjQ5DjlvTKufyR6Wi272+jy0IRFT2/MVrgttwacieqpF 4OMDk9an3UmpZMpEN2CMmmf8DQ7lQNqdjroWWloFAdzhXh+zSlgn/IQf2FL//PXI bMig76Wam0eint6dzqWsuiJ3/MAiW3uEZkCONZSTVciOPoYN8ai1Y9dYxmtcEZsl 4vTlEjLbTM9Y+Fmj5aE7kZjyq0eblNK4Pe1rqe6luxqYj8B5cNqkG3dubdk8g8HF ud+7M9RApRhAnMvt0+Wq9McTd/1YfKTGOISmDVXK2opf/QnfgalDmCSCIK2VkpVg 0IMyGL2CE1/W83uCMamhgtcEYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyDj1ui sDD+h5vmcG1SMU5FEzdYMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnlN0Uu7r8EcdTKRed40KfoI0msxxLzZUufvudKnkrY28BE75T55pl q21g79aQIJE3WU7dNqe9TkhJMgXpHNfkfTk/vPo9whEHgooWaFS6mAlTe3Be8/AL +/S4RC3UJCNJHyQxtwvbdmQzpySh9+skRw6qx1uWUvG0YNoQi/4SSQnLhCwaxXlH /hwLtAAWaG1/8jmHFBIHhJCnU8FwzqbRTpHjT08yMJJmF+fbfr+I1mCIlNWF5r/a mrOszNUglpsVgcpqbURklLqQtbYPGDuFm+bvY6/8ZMBHEWwF14pqWGcRAqd+T2Ah 0/CGgkMQYvr/VG5hKqx3gM6dFY8F6vOz -----END CERTIFICATE-----Generated at Wed Aug 13 02:42:55 2025 by rpki-client