$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: M3zbeJSJjzs2OFO6tcZS4+N6JCe4ydEL3itIvc3hwH4= Subject key identifier: A9:06:02:E3:59:B0:05:14:F2:99:51:31:76:AD:B7:45:A1:A2:B6:2A Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3D21 Signing time: Mon 04 Aug 2025 15:16:20 +0000 Manifest this update: Mon 04 Aug 2025 15:16:20 +0000 Manifest next update: Mon 11 Aug 2025 15:16:20 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: qksxdD6i9fWSxVrX+13chp+V8Qk1McwyrR5jvZWMxUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB, serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: Aug 4 15:16:20 2025 GMT Not After : Aug 11 15:16:20 2025 GMT Subject: CN=6890cec4-1b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:f9:45:a7:86:0f:5c:85:67:2d:38:77:3e: ab:da:3d:48:ab:19:a4:5f:1b:a1:57:fe:39:8a:3f: 6d:01:37:35:eb:df:24:83:49:1a:f6:1f:2c:06:dd: 0c:77:7b:95:af:8e:1b:2c:c4:a3:ce:00:fc:d9:91: af:48:d6:cc:38:cc:22:d4:a3:27:06:17:39:38:84: e2:90:8c:b0:0e:9d:eb:33:5f:ac:f3:1b:47:6c:ab: 97:54:cc:cb:ea:2b:18:9b:87:05:43:b0:9a:f9:6d: 01:e2:80:15:4b:e7:4c:2c:ff:d4:45:84:84:c0:20: 1f:0a:db:d0:3f:f7:54:c6:f8:92:f0:f0:03:d1:5e: 88:8c:00:c4:f5:b6:d2:4c:5c:d7:ad:ba:c2:69:59: 34:61:ee:75:93:78:66:b4:13:6d:ec:97:70:82:cb: 1d:26:c6:dd:72:10:0d:8f:fd:d0:c6:65:9b:24:f3: c4:30:3a:78:6b:23:bd:1b:40:91:85:3a:05:bf:c6: fe:19:44:f2:7c:f9:da:53:71:2f:01:10:cc:e6:ab: 15:b7:d4:2b:d2:3e:35:71:6e:40:50:f3:ef:c4:79: 14:f8:8c:5f:26:30:84:6f:37:1a:ed:49:a9:ba:2b: 01:30:25:7c:7b:f0:61:ec:b9:df:63:d3:f1:82:76: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:06:02:E3:59:B0:05:14:F2:99:51:31:76:AD:B7:45:A1:A2:B6:2A X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6a:63:92:ce:d7:9d:72:a8:57:bf:db:5c:3d:36:84:46:25: 00:30:08:d6:b0:5a:2e:e1:d6:d6:82:52:8d:c2:97:34:7a:43: c7:a5:15:d2:69:3d:ac:9f:a3:25:16:1b:98:41:c3:f4:4e:56: d8:56:64:32:84:1c:89:66:88:e8:8c:21:b5:43:48:28:28:a4: 2b:c4:50:52:47:c7:4d:1f:03:bc:50:19:68:40:a0:70:40:52: 55:85:58:4c:4f:85:1a:e8:43:64:4b:09:c8:e1:17:0c:13:61: 6b:d3:a1:62:de:97:ac:0c:78:59:24:d8:34:a3:b0:d6:e1:7f: bc:95:ea:62:e2:a7:2c:d6:3c:c6:f0:d4:78:c5:d0:3d:c7:c2: cd:e9:6c:a0:4b:75:3a:81:44:ef:98:be:c4:61:66:1b:85:f4: 59:63:b3:0a:76:ec:54:2d:67:46:9a:a5:99:18:16:95:2f:31: 70:77:e5:d4:7e:04:0d:bb:8e:23:69:3e:10:ba:38:39:b2:9c: 54:8c:ef:0f:f0:b9:a8:62:1c:9e:8f:c2:9d:1f:db:48:68:52: 61:b1:b8:73:55:d3:77:f5:5d:2b:3c:dc:a3:a9:bd:d3:c5:43: ff:c4:b1:e5:0a:aa:13:83:95:e1:8f:d9:dc:97:2a:bd:16:4d: 8b:45:51:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjUwODA0MTUxNjIwWhcNMjUwODExMTUxNjIwWjAYMRYwFAYD VQQDEw02ODkwY2VjNC0xYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Yb5RaeGD1yFZy04dz6r2j1IqxmkXxuhV/45ij9tATc1698kg0ka9h8sBt0M d3uVr44bLMSjzgD82ZGvSNbMOMwi1KMnBhc5OITikIywDp3rM1+s8xtHbKuXVMzL 6isYm4cFQ7Ca+W0B4oAVS+dMLP/URYSEwCAfCtvQP/dUxviS8PAD0V6IjADE9bbS TFzXrbrCaVk0Ye51k3hmtBNt7JdwgssdJsbdchANj/3QxmWbJPPEMDp4ayO9G0CR hToFv8b+GUTyfPnaU3EvARDM5qsVt9Qr0j41cW5AUPPvxHkU+IxfJjCEbzca7Ump uisBMCV8e/Bh7LnfY9PxgnbiuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkGAuNZ sAUU8plRMXatt0WhorYqMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFamOSztedcqhXv9tcPTaERiUAMAjWsFou4dbWglKNwpc0ekPHpRXS aT2sn6MlFhuYQcP0TlbYVmQyhByJZojojCG1Q0goKKQrxFBSR8dNHwO8UBloQKBw QFJVhVhMT4Ua6ENkSwnI4RcME2Fr06Fi3pesDHhZJNg0o7DW4X+8lepi4qcs1jzG 8NR4xdA9x8LN6WygS3U6gUTvmL7EYWYbhfRZY7MKduxULWdGmqWZGBaVLzFwd+XU fgQNu44jaT4Qujg5spxUjO8P8LmoYhyej8KdH9tIaFJhsbhzVdN39V0rPNyjqb3T xUP/xLHlCqoTg5Xhj9nclyq9Fk2LRVFZ -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:01 2025 by rpki-client