$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: 2biUJEhAt+PCfsqN8qfSfw6/fLRXGGfZfBsPIUtjkho= Subject key identifier: CE:34:C3:52:B3:03:C7:73:8E:4E:A4:3D:90:A4:36:8C:85:20:37:AD Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 34C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 4776 Signing time: Wed 06 Aug 2025 14:21:05 +0000 Manifest this update: Wed 06 Aug 2025 14:21:05 +0000 Manifest next update: Wed 13 Aug 2025 14:21:05 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: kNHHaC9s/j0fyUDU7jSX793jENuRscspGNspr3P1gaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13509 (0x34c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Aug 6 14:21:05 2025 GMT Not After : Aug 13 14:21:05 2025 GMT Subject: CN=689364d1-1082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5d:29:ea:ea:60:ba:ac:af:77:9d:3f:f4:6e: 81:6c:06:d9:80:cf:07:a2:14:f1:15:cb:64:4a:67: 63:56:fd:3e:59:02:4d:2c:74:13:12:90:65:9d:00: 5d:be:8a:ae:5a:26:50:27:ef:dd:e2:5f:f6:99:3d: f2:d0:03:6f:81:91:6f:5f:91:81:c8:4e:e5:82:81: f8:84:b5:ca:ce:55:46:b6:fc:b0:ac:14:fe:ab:77: 61:6c:20:1d:2d:76:86:cb:ef:8a:2a:6d:e0:ce:95: 24:be:59:56:87:ee:70:d9:23:2d:92:89:7e:19:85: a3:9c:22:75:46:6c:ef:24:16:38:3c:d8:d5:55:58: b8:85:5d:b3:93:ba:4f:92:3d:c2:2d:9d:a0:73:41: 91:7c:60:ac:4f:71:09:61:97:46:a1:d0:3c:a6:90: 46:1e:dd:55:a9:c2:15:be:12:9b:20:bc:73:9c:45: 8a:a1:4b:a4:b5:84:f0:f3:f7:9d:31:e7:ae:d3:ab: b3:f7:20:d9:ba:96:ce:b7:43:3e:e8:66:49:24:c0: 80:c6:eb:5e:98:93:67:5c:da:49:5a:2b:23:4d:c3: 17:51:03:6d:57:37:73:aa:73:54:58:05:0e:c7:2f: 77:c5:b2:ba:e9:49:58:31:25:8c:63:02:d1:4b:71: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:34:C3:52:B3:03:C7:73:8E:4E:A4:3D:90:A4:36:8C:85:20:37:AD X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f2:37:41:3f:45:37:5d:e2:f2:6f:02:34:29:b0:cf:85:e0: be:23:5f:38:1b:d8:99:09:95:71:4e:c5:2c:33:38:06:60:3e: bb:72:4a:a3:ae:bb:bf:de:25:51:3a:6e:f1:b7:37:7f:e2:82: 84:f3:b7:a1:3e:89:10:7e:cc:e3:c8:b6:6c:41:18:20:29:bd: a4:ab:93:2b:d2:b6:99:1d:79:dc:ab:ce:a0:ff:c6:7a:f0:90: 1b:f9:1e:9c:1c:94:18:dd:31:50:1d:06:30:4f:69:18:6a:4e: 7b:7a:52:55:45:82:13:d2:f7:92:c5:6a:bf:ff:c4:2c:66:a6: 87:3a:5b:b7:27:a0:ac:6b:60:8c:3c:79:ec:f9:ce:89:f5:27: 8a:34:43:8c:45:16:42:36:3f:09:06:df:75:e2:16:0a:2c:08: ae:1e:ba:76:2d:66:86:a6:ff:6a:26:ce:69:41:b0:24:ef:e5: f4:d2:0f:8d:34:41:02:40:1b:8c:3e:20:17:0b:12:b4:ee:c0: 9d:6f:3f:16:17:8d:38:83:e0:41:5d:ae:06:11:a2:fc:78:b8: 5d:c0:7e:ef:44:92:9d:e1:9b:37:c2:d2:4c:db:b8:fe:9d:b8: 99:75:ee:25:53:cf:db:12:d7:0c:fb:87:9d:3e:61:98:fb:33: f4:c8:80:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwODA2MTQyMTA1WhcNMjUwODEzMTQyMTA1WjAYMRYwFAYD VQQDEw02ODkzNjRkMS0xMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV0p6upguqyvd50/9G6BbAbZgM8HohTxFctkSmdjVv0+WQJNLHQTEpBlnQBd voquWiZQJ+/d4l/2mT3y0ANvgZFvX5GByE7lgoH4hLXKzlVGtvywrBT+q3dhbCAd LXaGy++KKm3gzpUkvllWh+5w2SMtkol+GYWjnCJ1RmzvJBY4PNjVVVi4hV2zk7pP kj3CLZ2gc0GRfGCsT3EJYZdGodA8ppBGHt1VqcIVvhKbILxznEWKoUuktYTw8/ed Meeu06uz9yDZupbOt0M+6GZJJMCAxutemJNnXNpJWisjTcMXUQNtVzdzqnNUWAUO xy93xbK66UlYMSWMYwLRS3FwnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM40w1Kz A8dzjk6kPZCkNoyFIDetMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh8jdBP0U3XeLybwI0KbDPheC+I184G9iZCZVxTsUsMzgGYD67ckqj rru/3iVROm7xtzd/4oKE87ehPokQfszjyLZsQRggKb2kq5Mr0raZHXncq86g/8Z6 8JAb+R6cHJQY3TFQHQYwT2kYak57elJVRYIT0veSxWq//8QsZqaHOlu3J6Csa2CM PHns+c6J9SeKNEOMRRZCNj8JBt914hYKLAiuHrp2LWaGpv9qJs5pQbAk7+X00g+N NEECQBuMPiAXCxK07sCdbz8WF404g+BBXa4GEaL8eLhdwH7vRJKd4Zs3wtJM27j+ nbiZde4lU8/bEtcM+4edPmGY+zP0yICM -----END CERTIFICATE-----Generated at Fri Aug 8 10:26:50 2025 by rpki-client