$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: 27tt4cb8N3ErIBBGxrUYyg6V54V6bWKKfy+JckLUj74= Subject key identifier: EB:B2:E2:E5:CA:F7:04:59:D7:09:6D:62:3A:C5:2F:00:15:8E:F7:4F Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 34B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 34B8 Signing time: Sun 24 Aug 2025 14:40:11 +0000 Manifest this update: Sun 24 Aug 2025 14:40:11 +0000 Manifest next update: Sun 31 Aug 2025 14:40:11 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: jOfBa5yziw3SFLgFgcj7/V7JGLC6btMG8xl1nqcjW0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Aug 24 14:40:11 2025 GMT Not After : Aug 31 14:40:11 2025 GMT Subject: CN=68ab244b-a97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:eb:e8:8c:be:a7:f7:84:63:57:ba:84:91: 07:6b:ad:73:fa:4d:01:c8:bb:98:bc:3c:66:bf:ad: d8:cd:0a:13:57:ba:34:0a:69:45:67:a8:bd:df:6a: 7b:a2:c2:cb:84:50:5b:77:8a:47:b2:35:08:cf:7c: a9:38:0a:1c:c4:41:69:69:b5:e3:96:e1:5d:94:22: c8:3b:b2:0d:44:3b:97:7d:92:ff:78:48:54:a8:6f: 92:c1:dc:d3:a7:9b:06:cd:9f:fe:a0:2a:73:0e:dd: 16:97:07:06:f8:01:7b:a7:e8:b1:ad:bd:73:51:00: f4:f5:41:7f:5f:8e:53:30:19:41:b0:ad:a9:fb:cc: 7e:e7:c6:84:a8:52:4d:75:45:69:59:51:dd:f8:ac: c5:73:b7:71:90:05:a3:a1:44:ee:c1:5d:e3:03:6d: 70:13:2c:dc:03:e7:9c:2e:4d:58:dc:9a:51:fe:3c: 09:26:64:53:85:56:da:af:45:b2:f7:3c:74:ac:af: 8e:ad:20:a3:83:42:36:71:d8:42:43:78:17:c5:d7: 08:8d:78:c0:20:07:8e:30:14:96:04:d3:e6:71:3c: 63:67:9b:06:36:14:c3:f2:bb:61:6a:cc:d5:b3:eb: 58:bf:56:f5:a2:9e:8f:d2:37:4c:8c:7c:7c:3e:61: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:E2:E5:CA:F7:04:59:D7:09:6D:62:3A:C5:2F:00:15:8E:F7:4F X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7c:4a:5d:45:ed:27:a3:d3:05:15:c6:9b:b3:46:24:5c:2b: 09:12:e0:63:e2:b9:57:9f:16:26:bb:94:25:8d:0f:ce:e8:ee: 55:14:33:9e:75:20:3d:85:17:ca:6b:de:78:22:5f:8b:32:c3: 28:68:4d:ab:92:8f:33:5a:a8:56:69:70:63:d8:c8:8e:05:97: 75:e1:55:53:4e:23:68:a0:7b:5f:b4:0e:d2:77:01:ed:df:1d: 12:f0:54:c2:ec:ac:67:cb:9c:2a:b5:b2:0e:c9:93:b9:69:59: 1b:26:15:46:8d:0b:35:3f:86:b2:c3:28:1f:1e:5d:ce:c4:67: 7a:14:c2:a0:13:5e:fc:91:3b:d8:41:fb:e9:f6:16:92:08:85: 85:b3:d1:ba:51:0e:55:ce:33:57:a9:f8:16:2d:2a:16:94:4a: 9d:82:4e:61:23:d4:58:fb:41:4e:73:20:59:dc:ee:8f:b4:e6: e2:0a:6d:fe:bc:62:cb:ad:09:1f:78:61:e8:ae:17:4c:bf:bf: 53:c2:ed:83:ff:88:ec:3f:0c:d9:e7:2e:bd:d3:8f:36:e2:41: f3:1e:65:fb:36:3f:5e:b9:db:86:f8:02:e1:ce:9b:75:ae:35: 3e:c3:53:00:cd:d7:5e:0e:9a:2a:87:72:1e:8b:09:6d:d7:b0: 0d:c8:20:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUwODI0MTQ0MDExWhcNMjUwODMxMTQ0MDExWjAYMRYwFAYD VQQDEw02OGFiMjQ0Yi1hOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA263r6Iy+p/eEY1e6hJEHa61z+k0ByLuYvDxmv63YzQoTV7o0CmlFZ6i932p7 osLLhFBbd4pHsjUIz3ypOAocxEFpabXjluFdlCLIO7INRDuXfZL/eEhUqG+SwdzT p5sGzZ/+oCpzDt0WlwcG+AF7p+ixrb1zUQD09UF/X45TMBlBsK2p+8x+58aEqFJN dUVpWVHd+KzFc7dxkAWjoUTuwV3jA21wEyzcA+ecLk1Y3JpR/jwJJmRThVbar0Wy 9zx0rK+OrSCjg0I2cdhCQ3gXxdcIjXjAIAeOMBSWBNPmcTxjZ5sGNhTD8rthaszV s+tYv1b1op6P0jdMjHx8PmFRmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuy4uXK 9wRZ1wltYjrFLwAVjvdPMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7fEpdRe0no9MFFcabs0YkXCsJEuBj4rlXnxYmu5QljQ/O6O5VFDOe dSA9hRfKa954Il+LMsMoaE2rko8zWqhWaXBj2MiOBZd14VVTTiNooHtftA7SdwHt 3x0S8FTC7Kxny5wqtbIOyZO5aVkbJhVGjQs1P4aywygfHl3OxGd6FMKgE178kTvY Qfvp9haSCIWFs9G6UQ5VzjNXqfgWLSoWlEqdgk5hI9RY+0FOcyBZ3O6PtObiCm3+ vGLLrQkfeGHorhdMv79Twu2D/4jsPwzZ5y6904824kHzHmX7Nj9euduG+ALhzpt1 rjU+w1MAzddeDpoqh3Ieiwlt17ANyCDr -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:56 2025 by rpki-client