$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft File: -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json) Hash identifier: V8pa4ieWZ+Y+X0uJ/SWYh8ZRQc+ZrYz4nezlYOqODNI= Subject key identifier: DE:50:29:67:A4:39:A9:82:F6:4C:02:88:F1:9C:B9:89:BA:9D:1A:FD Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 Certificate issuer: /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft Manifest number: 15 Signing time: Thu 21 Aug 2025 08:13:30 +0000 Manifest this update: Thu 21 Aug 2025 08:13:30 +0000 Manifest next update: Thu 28 Aug 2025 08:13:30 +0000 Files and hashes: 1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: tCG/V0gJU/l6p50ShoihssjkwvcnSVnuReTfrcEXGm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Validity Not Before: Aug 21 08:13:30 2025 GMT Not After : Aug 28 08:13:30 2025 GMT Subject: CN=68a6d52a-0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:fd:99:b9:42:b8:a3:1a:4f:7e:1f:ce:05: 0b:1f:21:9d:f0:a2:b6:d0:72:66:ec:f4:42:c9:1a: 02:e1:df:54:16:9c:1d:35:c4:9c:4a:0d:78:b3:a8: 63:21:68:89:20:22:a7:85:e7:b6:d9:44:44:8a:aa: f5:44:f4:85:4c:39:30:11:29:2e:05:54:db:0e:3c: bd:1a:fb:9d:70:90:0d:89:4f:c6:34:67:77:44:12: 1b:7f:70:df:57:fb:32:01:69:0c:29:d8:8b:a3:f8: 83:8c:9e:43:1b:b8:a9:d8:97:45:9f:bb:8d:eb:6b: df:74:08:ab:2a:c9:60:ee:dc:b5:77:ce:1b:46:73: fb:b3:7b:56:fe:05:6d:10:11:f1:c5:4a:d5:81:5f: 83:83:a1:1d:ec:3f:f2:ed:0b:22:b5:e9:92:ee:d9: f7:50:5c:ef:07:ad:5c:a3:28:b0:83:4f:33:b5:cd: 64:33:c7:52:4f:8b:8a:b8:42:ee:a0:3d:b6:bd:d6: 16:88:ba:6d:ac:ab:57:b2:3b:20:8d:cd:45:d3:8c: f7:42:b9:5d:fb:2d:d5:04:cb:7c:1b:b9:f5:2d:8b: b4:ec:e5:2c:65:be:63:a1:5e:82:a1:40:72:10:1c: f4:1b:61:46:40:99:9e:6a:fd:8d:1c:de:80:09:a2: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:50:29:67:A4:39:A9:82:F6:4C:02:88:F1:9C:B9:89:BA:9D:1A:FD X509v3 Authority Key Identifier: keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ee:7b:da:d7:d6:da:fc:5e:1d:fb:e1:45:63:d0:8a:7b:34: 2d:92:32:f9:4c:55:5a:a5:7d:e9:26:50:6e:75:c7:89:24:b1: 29:96:aa:6b:15:16:81:3c:4f:72:c3:8b:1b:6e:b6:11:0c:d4: 15:c3:c4:f1:60:dd:b2:79:cc:05:a9:95:0a:fb:79:22:08:e4: cc:64:72:69:88:73:93:05:58:37:55:14:6c:89:d7:b2:fd:c0: d2:07:05:03:cc:b3:07:29:74:d3:a3:57:83:18:85:a8:4c:6e: 39:73:25:f1:70:ea:ac:c0:38:32:9e:44:1c:84:34:59:c8:69: bc:3b:65:c2:e8:21:e1:36:14:f2:60:c1:b5:dd:88:11:3c:7b: a5:09:aa:a6:9e:fd:f9:75:41:93:37:1a:e2:5e:43:42:06:b6: 34:68:48:e3:55:b8:04:ff:b8:e3:fb:46:56:72:30:d7:26:e5: 95:71:28:d4:87:b5:23:46:3e:59:0f:c3:d0:32:64:1d:ee:db: 8f:09:a5:f4:73:75:be:f6:98:0a:11:81:25:f7:ce:4d:5c:33: 48:e9:61:83:2e:e0:f6:b7:95:7a:d2:0a:0c:e8:1b:e9:d3:f0: f8:87:92:8c:a6:51:5a:4c:ba:0e:7e:0d:5a:be:f2:bc:14:26: 6d:94:1f:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODQxQjExMC8GA1UEBRMoRkFGMjMwQ0UyMkZCRTY0RjY4ODk5OUVGN0NEODk0RERC RDlCODkyNTAeFw0yNTA4MjEwODEzMzBaFw0yNTA4MjgwODEzMzBaMBgxFjAUBgNV BAMTDTY4YTZkNTJhLTA2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDtv2ZuUK4oxpPfh/OBQsfIZ3worbQcmbs9ELJGgLh31QWnB01xJxKDXizqGMh aIkgIqeF57bZRESKqvVE9IVMOTARKS4FVNsOPL0a+51wkA2JT8Y0Z3dEEht/cN9X +zIBaQwp2Iuj+IOMnkMbuKnYl0Wfu43ra990CKsqyWDu3LV3zhtGc/uze1b+BW0Q EfHFStWBX4ODoR3sP/LtCyK16ZLu2fdQXO8HrVyjKLCDTzO1zWQzx1JPi4q4Qu6g Pba91haIum2sq1eyOyCNzUXTjPdCuV37LdUEy3wbufUti7Ts5SxlvmOhXoKhQHIQ HPQbYUZAmZ5q/Y0c3oAJonwXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3lApZ6Q5 qYL2TAKI8Zy5ibqdGv0wHwYDVR0jBBgwFoAU+vIwziL75k9oiZnvfNiU3b2biSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NDFCL0Q1RjExOEVFNjBD MDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5b2labnZmTmlVM2IyYmlT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXZJd3ppTDc1azlvaVpudmZOaVUzYjJiaVNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NDFCL0Q1RjExOEVFNjBDMDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5 b2labnZmTmlVM2IyYmlTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIvue9rX1tr8Xh374UVj0Ip7NC2SMvlMVVqlfekmUG51x4kksSmWqmsV FoE8T3LDixtuthEM1BXDxPFg3bJ5zAWplQr7eSII5MxkcmmIc5MFWDdVFGyJ17L9 wNIHBQPMswcpdNOjV4MYhahMbjlzJfFw6qzAODKeRByENFnIabw7ZcLoIeE2FPJg wbXdiBE8e6UJqqae/fl1QZM3GuJeQ0IGtjRoSONVuAT/uOP7RlZyMNcm5ZVxKNSH tSNGPlkPw9AyZB3u248JpfRzdb72mAoRgSX3zk1cM0jpYYMu4Pa3lXrSCgzoG+nT 8PiHkoymUVpMug5+DVq+8rwUJm2UH/s= -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:38 2025 by rpki-client