$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: ffhktAl3U8hOGi0pQpWyIQxQ6/xZzpfAqkA89kUustw= Subject key identifier: 06:AC:A0:F0:D5:A6:C5:C6:C2:2C:AA:C5:3B:53:6B:B3:59:A5:C1:44 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 0A Signing time: Sat 09 Aug 2025 08:41:24 +0000 Manifest this update: Sat 09 Aug 2025 08:41:23 +0000 Manifest next update: Sat 16 Aug 2025 08:41:23 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: BXK08zyxrjbAJzV8YFTcnEM18CJBWPbkVejtl1sqpn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Aug 9 08:41:23 2025 GMT Not After : Aug 16 08:41:23 2025 GMT Subject: CN=689709b3-54ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:14:65:6f:df:4c:1e:ef:0b:17:3f:50:f4: da:ad:75:60:eb:de:c2:ff:56:ac:17:10:2a:9a:d1: 81:c3:1c:49:04:55:da:0b:ea:ae:0b:4b:28:e1:35: f5:7c:6f:d9:fb:ce:ef:91:5c:d3:da:bc:f2:ee:1a: 43:51:ff:c6:d8:bd:46:13:93:4f:8b:ac:bd:3b:a6: 28:25:bc:e4:af:cf:d0:e5:1f:13:b0:04:87:6f:96: bd:25:77:e9:d8:7d:ef:b3:b0:42:a7:9d:71:a9:df: c7:3b:f2:d9:a1:49:ac:d0:dd:03:ce:fa:14:a1:15: 7e:53:1a:b0:e4:85:03:89:db:dd:ee:25:6e:fe:19: 14:e6:26:76:b3:dd:39:f4:d1:e0:b7:d6:e4:38:35: 63:c7:7a:51:73:9d:76:ba:59:21:b2:79:d3:95:2e: 58:74:cf:d3:31:5a:10:33:ad:8c:ad:48:ba:87:15: fe:86:e7:70:4a:d4:61:fd:2a:eb:61:b7:09:00:11: ac:28:85:75:13:8b:1c:0b:51:23:54:3f:82:c1:e3: 63:70:fe:33:e1:ec:e3:2b:43:6b:ed:2c:79:65:fa: 17:57:32:b2:cd:1e:dc:9d:c3:ed:48:71:86:e0:60: 56:b6:71:9a:55:ee:2a:0a:88:be:9b:91:4c:63:cb: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AC:A0:F0:D5:A6:C5:C6:C2:2C:AA:C5:3B:53:6B:B3:59:A5:C1:44 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ec:99:18:2a:52:16:8e:33:ac:3c:42:a1:d6:d3:a3:83:5d: 7d:92:3b:64:39:fd:73:2f:a8:00:c7:f8:2f:e6:ff:c4:49:94: 8f:95:95:5d:0d:ab:c7:81:2c:09:49:06:43:31:db:c2:bb:1e: e0:f8:3a:15:2a:14:f1:7b:35:92:ad:ae:2f:46:84:c6:fa:09: 71:94:72:3a:33:95:a7:48:34:00:b4:c3:1c:14:2b:13:ca:0a: 19:d3:82:7f:50:ef:65:cc:3b:38:18:c2:1e:12:3d:9a:63:39: 4e:c4:96:37:77:50:eb:07:6d:cc:b4:27:68:90:c7:28:09:7a: e1:72:74:91:69:94:9c:bb:49:d2:90:c6:12:1f:35:f0:03:20: 8d:d3:19:5f:6a:46:59:f0:28:fc:24:1d:c5:cf:4d:5b:33:59: 22:0b:cc:78:0a:48:ee:1b:5e:89:17:ef:ec:b7:2d:7e:78:43: db:7e:9d:e1:bd:e9:14:c1:58:76:3c:b7:e2:fe:9d:11:44:a1: d7:7b:57:29:eb:85:dd:49:3a:33:cb:49:24:f7:08:d4:9f:af: bc:30:aa:e8:15:ac:55:c5:67:e3:29:ae:60:af:b4:83:ef:05: 44:e4:3c:2a:82:36:1e:f2:a3:f3:77:24:2b:c4:61:79:5b:1f: eb:36:d2:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTA4MDkwODQxMjNaFw0yNTA4MTYwODQxMjNaMBgxFjAUBgNV BAMTDTY4OTcwOWIzLTU0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6xhRlb99MHu8LFz9Q9NqtdWDr3sL/VqwXECqa0YHDHEkEVdoL6q4LSyjhNfV8 b9n7zu+RXNPavPLuGkNR/8bYvUYTk0+LrL07piglvOSvz9DlHxOwBIdvlr0ld+nY fe+zsEKnnXGp38c78tmhSazQ3QPO+hShFX5TGrDkhQOJ293uJW7+GRTmJnaz3Tn0 0eC31uQ4NWPHelFznXa6WSGyedOVLlh0z9MxWhAzrYytSLqHFf6G53BK1GH9Kuth twkAEawohXUTixwLUSNUP4LB42Nw/jPh7OMrQ2vtLHll+hdXMrLNHtydw+1IcYbg YFa2cZpV7ioKiL6bkUxjy/IfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBqyg8NWm xcbCLKrFO1Nrs1mlwUQwHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3smRgqUhaOM6w8QqHW06ODXX2SO2Q5/XMvqADH+C/m/8RJlI+VlV0N q8eBLAlJBkMx28K7HuD4OhUqFPF7NZKtri9GhMb6CXGUcjozladINAC0wxwUKxPK ChnTgn9Q72XMOzgYwh4SPZpjOU7Eljd3UOsHbcy0J2iQxygJeuFydJFplJy7SdKQ xhIfNfADII3TGV9qRlnwKPwkHcXPTVszWSILzHgKSO4bXokX7+y3LX54Q9t+neG9 6RTBWHY8t+L+nRFEodd7Vynrhd1JOjPLSST3CNSfr7wwqugVrFXFZ+MprmCvtIPv BUTkPCqCNh7yo/N3JCvEYXlbH+s20hY= -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:10 2025 by rpki-client