$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft File: x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft (raw, json) Hash identifier: 9rTrf3qckXf9oaU3RpC7iQ7BzyGbTuQRn/Zce0O6gZQ= Subject key identifier: CE:0C:71:65:13:5F:3F:EB:EB:38:3A:CB:7A:D6:82:5C:69:0E:9D:62 Authority key identifier: C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD Certificate issuer: /CN=A912434D/serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft Manifest number: 1C Signing time: Sat 23 Aug 2025 08:08:53 +0000 Manifest this update: Sat 23 Aug 2025 08:08:53 +0000 Manifest next update: Sat 30 Aug 2025 08:08:53 +0000 Files and hashes: 1: x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl (hash: PaP7rv2WbRQYp2qDPXWcBBi06FJ9QjN3f7A4m947CPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Validity Not Before: Aug 23 08:08:53 2025 GMT Not After : Aug 30 08:08:53 2025 GMT Subject: CN=68a97715-a7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:25:2c:54:ea:96:c6:7e:14:25:80:f3:d5: 3f:09:34:c1:99:04:2c:23:8b:dc:e3:46:94:36:19: 7c:70:08:67:fb:5a:e8:12:5a:e1:6b:b1:95:85:17: 18:df:d2:be:e2:9d:be:e8:6b:f3:c8:61:72:e9:c1: 3c:51:0a:86:a7:dd:1f:ce:31:35:c6:cf:d7:8b:22: a3:28:92:7d:34:d4:3e:43:15:f3:5e:6e:c2:76:c1: 7c:4e:5c:69:3c:2d:81:12:6e:0f:c3:02:7c:6e:ed: b1:06:72:23:e9:b7:52:21:84:09:37:e5:ec:45:8e: 23:48:71:e4:5b:5e:02:86:bd:cb:31:71:98:31:fa: e2:3f:72:0d:18:ef:45:f7:71:6a:f5:e6:13:82:ca: e4:0e:f0:ad:62:59:14:06:8c:f1:ec:1f:b2:10:fe: 1b:75:c6:95:b0:6c:69:ca:0d:e7:4b:6b:e4:94:27: f3:44:94:93:30:1c:27:b9:b5:6d:18:0a:22:02:b2: f4:37:44:54:3e:6c:91:aa:6a:55:30:6d:3b:72:22: 55:2d:57:4b:44:3c:6c:3c:01:63:25:02:da:df:bb: 32:76:11:03:66:f9:10:bd:99:f5:0d:96:6c:72:47: 9d:de:dd:9d:a6:db:08:d4:27:7d:23:1a:59:c3:12: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0C:71:65:13:5F:3F:EB:EB:38:3A:CB:7A:D6:82:5C:69:0E:9D:62 X509v3 Authority Key Identifier: keyid:C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5d:76:db:12:44:51:54:a0:6a:9b:e4:89:3b:a0:1c:c6:be: 24:f5:30:66:a5:cb:36:e1:07:85:5e:25:61:93:e9:38:52:7b: 55:6e:fb:fe:c7:91:42:29:13:1f:7f:61:a4:f6:da:bb:64:b7: 18:fe:40:6d:35:f7:36:ce:af:98:63:1a:07:7f:2a:9c:b2:3a: 1c:0f:59:37:ff:53:4f:34:94:ec:eb:7f:e5:cf:3c:af:7d:fc: f1:64:e4:bd:32:ff:5e:8c:f0:76:37:40:44:f5:71:11:25:13: f8:98:e3:0b:91:cf:bb:fb:aa:eb:e2:60:b0:3c:35:2c:95:fa: 32:77:c4:26:69:a1:eb:ab:dd:a4:d4:d6:5e:0d:ca:ab:38:ab: c9:a1:ec:fd:59:9f:dd:74:28:96:46:3f:78:42:c5:51:bf:60: 37:eb:b5:6e:78:99:bf:ad:4a:52:c8:cd:12:c7:97:2b:88:b7: 03:b4:93:43:ab:0f:31:b2:c3:98:92:4d:21:85:0d:b1:af:2a: 9f:6b:bf:f3:dd:39:bd:11:01:bc:a7:70:a6:72:82:9f:82:bb: 53:70:67:cb:3d:78:fd:98:c6:42:2e:19:fc:12:a5:45:f8:14: 0a:0c:b0:40:28:34:72:a8:b8:e5:86:65:03:50:d6:9c:55:c7: 7b:28:a9:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoQzdBRDYzQjE0N0U0OTk1NEQ2NTc1MUVGRkM2MjczRjFD NzcwNTJDRDAeFw0yNTA4MjMwODA4NTNaFw0yNTA4MzAwODA4NTNaMBgxFjAUBgNV BAMTDTY4YTk3NzE1LWE3YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbWSUsVOqWxn4UJYDz1T8JNMGZBCwji9zjRpQ2GXxwCGf7WugSWuFrsZWFFxjf 0r7inb7oa/PIYXLpwTxRCoan3R/OMTXGz9eLIqMokn001D5DFfNebsJ2wXxOXGk8 LYESbg/DAnxu7bEGciPpt1IhhAk35exFjiNIceRbXgKGvcsxcZgx+uI/cg0Y70X3 cWr15hOCyuQO8K1iWRQGjPHsH7IQ/ht1xpWwbGnKDedLa+SUJ/NElJMwHCe5tW0Y CiICsvQ3RFQ+bJGqalUwbTtyIlUtV0tEPGw8AWMlAtrfuzJ2EQNm+RC9mfUNlmxy R53e3Z2m2wjUJ30jGlnDEm7JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzgxxZRNf P+vrODrLetaCXGkOnWIwHwYDVR0jBBgwFoAUx61jsUfkmVTWV1Hv/GJz8cdwUs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzRELzA0QjczMUM2NThE RTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZUV1YxSHZfR0p6OGNkd1Vz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDYxanNVZmttVlRXVjFIdl9HSno4Y2R3VXMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzRELzA0QjczMUM2NThERTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZU V1YxSHZfR0p6OGNkd1VzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhddtsSRFFUoGqb5Ik7oBzGviT1MGalyzbhB4VeJWGT6ThSe1Vu+/7H kUIpEx9/YaT22rtktxj+QG019zbOr5hjGgd/KpyyOhwPWTf/U080lOzrf+XPPK99 /PFk5L0y/16M8HY3QET1cRElE/iY4wuRz7v7quviYLA8NSyV+jJ3xCZpoeur3aTU 1l4Nyqs4q8mh7P1Zn910KJZGP3hCxVG/YDfrtW54mb+tSlLIzRLHlyuItwO0k0Or DzGyw5iSTSGFDbGvKp9rv/PdOb0RAbyncKZygp+Cu1NwZ8s9eP2YxkIuGfwSpUX4 FAoMsEAoNHKouOWGZQNQ1pxVx3soqXs= -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:33 2025 by rpki-client