$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: xTVENRLaZt3fe1EcjjxD5ghGKkEdFKIazvx1NPfK+9Q= Subject key identifier: 87:55:BC:8E:BD:85:4A:DA:01:C4:38:CC:61:FB:66:51:0E:97:D0:A0 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34A4 Signing time: Mon 04 Aug 2025 14:55:56 +0000 Manifest this update: Mon 04 Aug 2025 14:55:55 +0000 Manifest next update: Mon 11 Aug 2025 14:55:55 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: g76W2iFV8GFoBaih5BLKKR/KEanCmbFsHCI0NUciTfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Aug 4 14:55:55 2025 GMT Not After : Aug 11 14:55:55 2025 GMT Subject: CN=6890c9fb-799d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:22:eb:a0:5d:79:2e:b4:5e:e2:cd:75:7b: 8d:95:a8:17:62:fa:d9:4c:e1:e0:14:cc:ac:89:7a: 84:e1:c1:b5:01:48:3d:59:14:e0:58:62:9a:39:3d: 70:e3:a9:65:13:e4:8a:22:a1:29:68:4d:c3:92:fc: ac:36:fe:34:2b:f5:2a:b0:37:fc:ed:db:3b:6b:24: c3:c9:f3:50:b8:fb:e1:8c:77:57:85:f4:66:60:7c: 68:f8:d7:40:a5:3b:31:a7:16:c2:d8:af:dc:cc:b7: fe:8c:2b:3b:61:0a:00:09:4c:96:a5:ca:ba:88:7f: 66:6c:dd:a5:f5:54:2b:57:c8:17:df:17:40:bc:14: bb:9b:dc:1c:a4:bf:e7:fe:0f:72:f0:87:99:ff:21: 5b:93:d4:62:b3:38:c4:b5:a1:0a:4c:fd:7a:17:99: e7:82:3f:fd:3b:3c:58:93:8c:f4:9f:6d:57:16:63: d0:26:e9:91:57:c0:5c:9e:8b:5b:95:8a:2d:96:76: 86:d6:bc:10:7e:d0:33:ef:55:14:ab:05:4d:64:3b: c2:be:e3:1d:c0:08:03:9e:e9:9f:4e:0a:cb:48:ac: ab:41:41:59:bb:72:80:7c:33:6d:86:54:98:a4:de: 72:5e:c5:32:c3:e7:54:04:d4:59:ca:b3:8f:9c:4d: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:55:BC:8E:BD:85:4A:DA:01:C4:38:CC:61:FB:66:51:0E:97:D0:A0 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ab:f9:fc:8a:00:cf:97:13:69:d9:7a:ae:85:22:c7:e0:ad: 50:2d:51:eb:84:13:a6:a0:36:6b:01:d8:3e:e9:51:87:11:25: 60:21:df:8e:ba:6b:9e:81:fa:38:03:2f:91:5a:de:9f:d7:e7: 46:74:29:89:8c:06:9f:b8:12:00:9e:57:f6:a2:f1:9e:ba:ba: db:b2:8a:eb:fc:3d:87:b3:71:56:20:05:4f:9c:a8:18:87:db: 6f:4a:00:58:e6:5e:11:cd:89:c6:58:d4:91:e0:59:65:15:be: 31:73:2a:cb:1e:75:d8:fd:6d:45:f0:72:26:30:73:ae:7b:37: c5:3d:99:17:6b:65:fb:22:b7:20:04:6c:a5:cd:78:3b:00:17: 64:41:6d:92:1b:25:3a:97:a2:8a:5f:9e:7d:ff:64:6c:e9:ad: 52:6f:52:cd:73:2a:15:bb:c7:58:c2:1c:e2:02:9c:8e:fd:de: a4:25:44:fd:ba:52:3b:e7:d6:7d:bb:9f:a8:8c:97:cf:19:4d: df:29:8f:65:1e:55:f5:70:47:98:47:35:fc:0b:19:ae:6e:a7: b0:d0:78:24:65:8d:54:64:f2:62:69:36:b4:d0:45:8c:a3:48: 51:b5:8f:fa:7b:7c:00:e1:72:ba:ae:57:8f:42:21:3d:09:74: 47:c8:0a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwODA0MTQ1NTU1WhcNMjUwODExMTQ1NTU1WjAYMRYwFAYD VQQDEw02ODkwYzlmYi03OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB4i66BdeS60XuLNdXuNlagXYvrZTOHgFMysiXqE4cG1AUg9WRTgWGKaOT1w 46llE+SKIqEpaE3DkvysNv40K/UqsDf87ds7ayTDyfNQuPvhjHdXhfRmYHxo+NdA pTsxpxbC2K/czLf+jCs7YQoACUyWpcq6iH9mbN2l9VQrV8gX3xdAvBS7m9wcpL/n /g9y8IeZ/yFbk9RiszjEtaEKTP16F5nngj/9OzxYk4z0n21XFmPQJumRV8Bcnotb lYotlnaG1rwQftAz71UUqwVNZDvCvuMdwAgDnumfTgrLSKyrQUFZu3KAfDNthlSY pN5yXsUyw+dUBNRZyrOPnE32bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdVvI69 hUraAcQ4zGH7ZlEOl9CgMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKq/n8igDPlxNp2XquhSLH4K1QLVHrhBOmoDZrAdg+6VGHESVgId+O umuegfo4Ay+RWt6f1+dGdCmJjAafuBIAnlf2ovGeurrbsorr/D2Hs3FWIAVPnKgY h9tvSgBY5l4RzYnGWNSR4FllFb4xcyrLHnXY/W1F8HImMHOuezfFPZkXa2X7Ircg BGylzXg7ABdkQW2SGyU6l6KKX559/2Rs6a1Sb1LNcyoVu8dYwhziApyO/d6kJUT9 ulI759Z9u5+ojJfPGU3fKY9lHlX1cEeYRzX8Cxmubqew0HgkZY1UZPJiaTa00EWM o0hRtY/6e3wA4XK6rlePQiE9CXRHyAqJ -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:57 2025 by rpki-client