$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: fEKWLXqwwsQvIOrKBOjfLy3TIMuunraOo7Ns07OVIKY= Subject key identifier: 57:65:4F:43:3B:2B:72:0F:02:B3:D6:F5:E3:5C:AD:4A:87:4A:09:10 Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34A9 Signing time: Mon 04 Aug 2025 14:36:36 +0000 Manifest this update: Mon 04 Aug 2025 14:36:35 +0000 Manifest next update: Mon 11 Aug 2025 14:36:35 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: yU7msqdqCViUo9P18eBxyxJiJaWpA3GpxaHCPivWOh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Aug 4 14:36:35 2025 GMT Not After : Aug 11 14:36:35 2025 GMT Subject: CN=6890c573-1300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:14:51:18:c4:6b:56:44:af:f1:18:60:92: 65:a2:92:f3:db:b5:9d:ed:ed:51:d6:7f:12:f2:75: 12:9d:14:e8:97:33:4b:10:0e:ec:46:bd:2d:1e:7a: 2f:cd:ab:78:85:8a:7b:ee:87:97:4b:f8:e2:2c:63: bb:41:42:72:46:a7:25:bd:5d:05:d0:f6:df:b2:66: 99:1a:13:37:80:2b:a7:77:1a:dc:80:99:cb:86:ea: 4c:fc:05:32:a6:ca:52:7e:d0:f7:5f:d7:40:63:60: 19:41:81:1a:f5:72:5c:f4:56:95:0f:c6:9a:74:94: ee:e4:b8:51:40:48:8f:66:cd:99:85:ad:fd:4c:17: 13:c3:07:93:9f:e3:0a:27:a4:fe:a8:67:b7:84:11: da:0b:61:56:bd:f9:44:37:03:6f:22:ee:3b:16:b9: 36:cb:c9:8f:cd:ab:74:6b:9d:4f:33:67:ec:48:e0: 79:31:1c:21:68:1f:8e:b7:2d:ee:02:00:52:d0:2f: 33:6d:09:86:cb:3d:bc:ad:31:d4:ef:c1:a1:ba:d8: 45:e5:5b:e9:d5:4f:83:bb:85:9d:12:a1:9c:c7:1b: a8:8c:e2:4b:e4:a0:47:3e:f8:45:2f:1a:fb:ae:f3: a9:58:67:18:5b:c5:2a:8b:15:d8:83:87:0a:5a:64: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:4F:43:3B:2B:72:0F:02:B3:D6:F5:E3:5C:AD:4A:87:4A:09:10 X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:93:e5:5e:83:f7:c6:32:ca:83:46:49:52:da:d3:51:55:a0: 3e:15:79:e2:45:5a:33:62:8c:5c:1d:b5:ef:86:c2:10:6e:3a: 9c:50:c3:99:5d:79:2a:dc:59:4c:7b:22:b2:fc:7a:f6:04:5d: 6e:15:52:35:f2:9e:96:5f:44:dc:2b:b3:ab:fd:a0:a0:02:9a: 74:cb:17:0f:11:4e:4e:d9:36:d1:b2:c2:4c:2e:4b:1c:ac:cb: 56:e6:fc:69:84:d6:ff:0c:d2:08:ca:e6:9b:f8:e5:d9:d0:d9: 26:2a:0f:b8:49:98:97:58:e7:d4:f0:e5:27:0a:97:b6:4e:d1: 51:c6:92:8f:33:84:e8:8f:86:97:d8:a3:ad:10:6b:94:e6:fa: 77:e8:85:dc:cf:d3:95:c6:40:34:e6:59:04:be:26:0e:e0:72: 85:35:2e:db:1e:99:12:1f:96:4e:5c:78:b8:aa:9f:d4:83:fe: 4f:b4:83:bd:e9:6f:02:a2:65:51:d2:96:af:db:28:a5:08:5c: b8:36:92:66:70:f0:4e:f2:a1:e4:82:e3:42:d5:42:d1:b8:93: 9d:8a:be:56:6e:f0:6e:dc:f3:2c:bc:1d:90:3a:bd:51:13:93: 55:af:1a:73:fe:0d:48:ab:f5:fa:66:a3:29:d4:14:c9:c6:7d: 17:c4:e8:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUwODA0MTQzNjM1WhcNMjUwODExMTQzNjM1WjAYMRYwFAYD VQQDEw02ODkwYzU3My0xMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b8UURjEa1ZEr/EYYJJlopLz27Wd7e1R1n8S8nUSnRTolzNLEA7sRr0tHnov zat4hYp77oeXS/jiLGO7QUJyRqclvV0F0PbfsmaZGhM3gCundxrcgJnLhupM/AUy pspSftD3X9dAY2AZQYEa9XJc9FaVD8aadJTu5LhRQEiPZs2Zha39TBcTwweTn+MK J6T+qGe3hBHaC2FWvflENwNvIu47Frk2y8mPzat0a51PM2fsSOB5MRwhaB+Oty3u AgBS0C8zbQmGyz28rTHU78GhuthF5Vvp1U+Du4WdEqGcxxuojOJL5KBHPvhFLxr7 rvOpWGcYW8UqixXYg4cKWmS5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdlT0M7 K3IPArPW9eNcrUqHSgkQMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlk+Veg/fGMsqDRklS2tNRVaA+FXniRVozYoxcHbXvhsIQbjqcUMOZ XXkq3FlMeyKy/Hr2BF1uFVI18p6WX0TcK7Or/aCgApp0yxcPEU5O2TbRssJMLksc rMtW5vxphNb/DNIIyuab+OXZ0NkmKg+4SZiXWOfU8OUnCpe2TtFRxpKPM4Toj4aX 2KOtEGuU5vp36IXcz9OVxkA05lkEviYO4HKFNS7bHpkSH5ZOXHi4qp/Ug/5PtIO9 6W8ComVR0pav2yilCFy4NpJmcPBO8qHkguNC1ULRuJOdir5WbvBu3PMsvB2QOr1R E5NVrxpz/g1Iq/X6ZqMp1BTJxn0XxOjK -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:15 2025 by rpki-client