$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json) Hash identifier: NxRZPF9yY9KefeAtH1UqMt/T/B4lNEe4eesxn6ZB1YQ= Subject key identifier: B3:AF:9D:F2:85:E6:0B:0A:16:71:62:40:BD:06:67:21:58:9C:18:B4 Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Certificate serial: 3286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft Manifest number: 3286 Signing time: Sun 24 Aug 2025 15:23:16 +0000 Manifest this update: Sun 24 Aug 2025 15:23:15 +0000 Manifest next update: Sun 31 Aug 2025 15:23:15 +0000 Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: 5fxApQYgXZ7aZdh6ZFaPJoMCUXNVRmG0UQ3ur4gazgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12934 (0x3286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Validity Not Before: Aug 24 15:23:15 2025 GMT Not After : Aug 31 15:23:15 2025 GMT Subject: CN=68ab2e64-5082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:ef:81:32:70:e3:59:77:24:87:de:8b:fc: 2f:9c:29:91:02:31:dc:8b:e6:18:9a:ee:ec:4f:cd: 0a:1b:63:d8:0f:4b:a4:81:0a:81:8b:a0:73:db:18: 78:01:86:ca:75:e8:08:59:65:1c:42:be:b9:3d:b4: 3b:cc:9e:05:ac:5c:ea:78:a1:b1:74:cc:75:4f:bf: ec:90:fa:6c:21:07:29:0e:cc:be:b5:34:7c:3c:e9: 51:00:a4:b5:47:75:1e:c7:ed:88:63:e1:26:85:05: cf:fd:8b:43:b8:8d:66:bd:1e:38:40:6f:ce:41:7e: c0:37:67:62:6d:7d:1e:78:d3:ec:53:1c:df:a9:13: dd:d1:dc:57:63:61:a2:16:e4:29:2b:17:c3:50:f4: c9:46:bd:c6:c7:58:37:3b:f3:b5:e8:e3:62:29:4f: 5b:d3:49:43:4f:b4:27:53:88:a9:d2:de:c0:d4:40: e1:df:83:aa:90:3a:17:a2:4d:9d:0f:a7:1d:bf:50: 38:77:bb:2e:c8:a5:e1:eb:f2:07:45:99:1a:9b:29: 70:d3:75:46:8f:61:c5:3c:e5:e0:7e:2c:20:dd:1a: 18:ca:c1:f2:0a:c2:ad:1d:ae:31:4d:16:d8:5c:9e: f6:30:fc:08:69:38:51:0d:b1:fc:1b:dc:2e:0e:d0: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:9D:F2:85:E6:0B:0A:16:71:62:40:BD:06:67:21:58:9C:18:B4 X509v3 Authority Key Identifier: keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:3c:8a:8d:77:0b:d3:de:d5:04:5d:08:51:7a:21:34:63:a7: a4:10:11:a8:52:61:91:e4:c4:91:85:ef:1c:66:10:65:87:97: 43:0d:e7:5c:c4:a8:91:00:0f:09:94:0c:29:01:28:b8:ee:fd: ed:ea:81:5b:c4:fb:65:43:6c:7a:d0:0a:e6:d8:b6:71:9a:8d: 61:22:40:c2:07:f9:8a:29:44:4f:34:93:3e:2e:e4:5b:83:a4: 1b:c9:10:4f:e2:5f:01:22:68:5e:f9:32:c9:6e:a3:bb:6d:6d: 57:2e:3b:9f:da:23:9d:be:40:9d:6a:97:a8:ea:22:3b:f8:cc: 43:0a:09:9c:51:67:5a:b3:74:63:2b:a4:a3:c9:2d:53:58:ce: f7:7b:91:c2:37:4c:da:35:82:8c:3f:c8:1f:09:0f:b9:e9:74: d6:90:9b:25:06:d5:2c:00:18:be:80:1a:76:82:41:1c:b2:1f: d8:13:4a:a8:fd:f8:07:77:34:bb:ee:7b:29:a6:fc:ea:fd:d1: e3:0d:79:f1:c5:0d:17:7e:b3:be:e4:39:88:ba:08:6a:e8:4a: 67:03:a4:ac:c6:34:66:8d:07:ac:46:8f:88:dd:ef:1a:4c:74: 2a:2d:db:82:93:b4:02:cf:74:94:97:3f:ab:84:68:1f:2a:2b: 43:2d:d6:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzNEYxMTAvBgNVBAUTKEQ2NUU3RDEwNkM1NzFCNDJFQjZDRTJGODg4NzJERTdB QkNCQUZCQjgwHhcNMjUwODI0MTUyMzE1WhcNMjUwODMxMTUyMzE1WjAYMRYwFAYD VQQDEw02OGFiMmU2NC01MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BXvgTJw41l3JIfei/wvnCmRAjHci+YYmu7sT80KG2PYD0ukgQqBi6Bz2xh4 AYbKdegIWWUcQr65PbQ7zJ4FrFzqeKGxdMx1T7/skPpsIQcpDsy+tTR8POlRAKS1 R3Uex+2IY+EmhQXP/YtDuI1mvR44QG/OQX7AN2dibX0eeNPsUxzfqRPd0dxXY2Gi FuQpKxfDUPTJRr3Gx1g3O/O16ONiKU9b00lDT7QnU4ip0t7A1EDh34OqkDoXok2d D6cdv1A4d7suyKXh6/IHRZkamylw03VGj2HFPOXgfiwg3RoYysHyCsKtHa4xTRbY XJ72MPwIaThRDbH8G9wuDtAOkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOvnfKF 5gsKFnFiQL0GZyFYnBi0MB8GA1UdIwQYMBaAFNZefRBsVxtC62zi+Ihy3nq8uvu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzM0Ri8zNUZCRjVENDhB MDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcwTHJiT0w0aUhMZWVyeTYt N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFsNTlFR3hYRzBMcmJPTDRpSExlZXJ5Ni03Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzM0Ri8zNUZCRjVENDhBMDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcw THJiT0w0aUhMZWVyeTYtN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9PIqNdwvT3tUEXQhReiE0Y6ekEBGoUmGR5MSRhe8cZhBlh5dDDedc xKiRAA8JlAwpASi47v3t6oFbxPtlQ2x60Arm2LZxmo1hIkDCB/mKKURPNJM+LuRb g6QbyRBP4l8BImhe+TLJbqO7bW1XLjuf2iOdvkCdapeo6iI7+MxDCgmcUWdas3Rj K6SjyS1TWM73e5HCN0zaNYKMP8gfCQ+56XTWkJslBtUsABi+gBp2gkEcsh/YE0qo /fgHdzS77nsppvzq/dHjDXnxxQ0XfrO+5DmIughq6EpnA6SsxjRmjQesRo+I3e8a THQqLduCk7QCz3SUlz+rhGgfKitDLdY/ -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:02 2025 by rpki-client