$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: 16zs4C9uFhOqcjcuS0360ihO8CYeiP8CXEBVvFkhxkk= Subject key identifier: 3B:B4:F4:DF:5C:A6:D9:9E:DA:4E:4B:9B:40:23:D4:37:E8:A3:49:93 Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 34B0 Signing time: Sun 24 Aug 2025 14:41:52 +0000 Manifest this update: Sun 24 Aug 2025 14:41:52 +0000 Manifest next update: Sun 31 Aug 2025 14:41:52 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: RLRi6VOe93K7foYIiqzA0pUZqoVGa+i++iHzcxZLxZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Aug 24 14:41:52 2025 GMT Not After : Aug 31 14:41:52 2025 GMT Subject: CN=68ab24b0-a771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:18:37:4a:8b:a6:1d:c3:51:29:21:cf:ba: 46:c6:a7:47:6c:a9:ed:f8:c5:c8:0c:29:16:79:08: c4:56:15:d4:18:0c:2e:06:ad:ff:9e:3b:a2:fe:fa: ba:2c:ca:cf:92:74:e9:49:32:ba:90:f2:d8:45:9e: 18:40:c6:8a:58:a2:c0:cb:02:70:4d:24:50:57:20: b8:57:ec:b9:a4:8c:32:b0:7a:b5:18:3a:cf:16:b6: d8:1a:7d:98:81:2a:ae:e4:1b:c4:40:86:14:21:63: 34:2e:c8:2d:cd:b7:a4:4a:de:f4:51:6b:57:8f:d4: b4:35:e0:fa:95:c3:a6:55:54:cd:e2:93:e7:80:e0: 39:98:cc:4d:64:0b:29:d3:5b:71:62:dc:3c:7e:60: 96:57:e9:4d:80:24:68:5b:43:e4:76:f3:92:f1:38: 34:bd:0b:99:43:7a:75:0f:3a:cf:a8:21:39:42:96: ea:bc:a6:17:65:9c:1c:67:a8:37:3b:4d:f0:d4:33: 24:56:98:ea:b8:9a:31:3e:ae:2d:17:5d:d7:b1:42: 2d:59:93:ba:81:c8:45:c2:3f:a8:0d:08:27:5f:46: da:f4:ef:cd:1d:2a:94:9c:82:fa:79:cb:a6:ed:18: 34:5e:71:2b:c2:0f:98:a6:43:11:58:12:d9:7a:60: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:F4:DF:5C:A6:D9:9E:DA:4E:4B:9B:40:23:D4:37:E8:A3:49:93 X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:97:f4:63:34:70:40:32:57:05:9c:60:8e:00:7a:e3:14:bc: 43:6c:db:b0:d9:70:43:ff:a9:fa:7a:70:df:2c:e0:6b:2f:d8: f2:81:1c:90:07:59:08:9d:f5:c9:c3:03:f4:28:e6:27:e0:68: 0d:37:e4:63:d9:be:4a:47:a6:9c:2c:2f:c0:81:65:6f:17:ee: df:45:f5:33:e1:06:af:13:5d:35:fe:7e:1f:16:9d:38:93:3d: 5e:2d:39:ba:ca:cd:93:5d:41:e7:b8:7a:c4:5b:2e:22:d9:20: 3e:27:81:b5:ad:13:1c:90:f2:9b:73:4f:22:1d:ce:61:53:e5: f2:33:60:57:1f:24:0b:f7:8c:d9:e6:b6:21:8d:15:3d:88:d8: 5a:bf:1a:af:57:b0:11:5c:c8:98:7c:b0:52:21:5e:0e:1f:bb: c2:cc:2f:fa:42:df:81:89:a6:d0:26:c3:0a:88:09:06:60:3a: 6b:7f:e4:c9:f8:21:12:c4:26:27:a3:b7:dd:40:0f:3e:8d:97: fa:da:c3:1d:37:6d:80:80:ff:8d:d6:3f:68:0a:a8:7d:c4:b8: 8e:88:8f:3d:77:e9:bc:7b:49:89:f4:77:3c:7b:24:23:3f:9a: 0b:c8:3e:1e:90:6c:30:60:b3:9a:47:4f:ea:7a:c6:2c:16:7f: 13:7c:ac:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjUwODI0MTQ0MTUyWhcNMjUwODMxMTQ0MTUyWjAYMRYwFAYD VQQDEw02OGFiMjRiMC1hNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq8YN0qLph3DUSkhz7pGxqdHbKnt+MXIDCkWeQjEVhXUGAwuBq3/njui/vq6 LMrPknTpSTK6kPLYRZ4YQMaKWKLAywJwTSRQVyC4V+y5pIwysHq1GDrPFrbYGn2Y gSqu5BvEQIYUIWM0LsgtzbekSt70UWtXj9S0NeD6lcOmVVTN4pPngOA5mMxNZAsp 01txYtw8fmCWV+lNgCRoW0PkdvOS8Tg0vQuZQ3p1DzrPqCE5QpbqvKYXZZwcZ6g3 O03w1DMkVpjquJoxPq4tF13XsUItWZO6gchFwj+oDQgnX0ba9O/NHSqUnIL6ecum 7Rg0XnErwg+YpkMRWBLZemCDwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu09N9c ptme2k5Lm0Aj1Dfoo0mTMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCel/RjNHBAMlcFnGCOAHrjFLxDbNuw2XBD/6n6enDfLOBrL9jygRyQ B1kInfXJwwP0KOYn4GgNN+Rj2b5KR6acLC/AgWVvF+7fRfUz4QavE101/n4fFp04 kz1eLTm6ys2TXUHnuHrEWy4i2SA+J4G1rRMckPKbc08iHc5hU+XyM2BXHyQL94zZ 5rYhjRU9iNhavxqvV7ARXMiYfLBSIV4OH7vCzC/6Qt+BiabQJsMKiAkGYDprf+TJ +CESxCYno7fdQA8+jZf62sMdN22AgP+N1j9oCqh9xLiOiI89d+m8e0mJ9Hc8eyQj P5oLyD4ekGwwYLOaR0/qesYsFn8TfKx0 -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:54 2025 by rpki-client