$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: AqLKn06xNlhOxXI2ahvOZJQf78jsTFBm3b7513uXpzo= Subject key identifier: 76:52:7A:15:00:05:82:C3:95:DA:C9:1E:77:F3:66:EF:19:4F:E5:7B Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 34B2 Signing time: Sun 24 Aug 2025 14:33:54 +0000 Manifest this update: Sun 24 Aug 2025 14:33:54 +0000 Manifest next update: Sun 31 Aug 2025 14:33:54 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: PWk8Uf9V2OIbFqIOgEOoJKDtrw/ziTu0dYmCIFFRnsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Aug 24 14:33:54 2025 GMT Not After : Aug 31 14:33:54 2025 GMT Subject: CN=68ab22d2-5f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:f5:aa:f3:bd:c7:17:37:d0:dd:48:9e:c6: b4:b6:33:d5:b0:79:5e:7d:99:1b:46:fb:70:2e:04: 4f:7d:0f:13:15:8e:8f:48:4a:a4:74:de:d4:60:2f: fe:19:8b:68:94:0c:0b:d2:2c:74:70:e6:0e:9b:42: 56:92:cb:88:af:31:7f:62:41:90:f4:d2:42:8c:b4: e2:f7:94:d8:85:f3:52:48:ad:a5:fe:63:44:36:31: ce:f2:88:c7:61:c1:4b:92:dd:b0:02:bf:95:fa:e5: 21:56:91:32:94:1c:39:6b:85:6e:77:48:4b:33:bb: 5b:e6:e1:3b:5d:7e:5f:ef:5a:b6:4a:a6:04:39:0a: d3:0d:d2:87:0d:5c:ea:95:0d:83:96:a8:20:e2:c8: b7:53:88:56:03:bc:67:78:91:e5:96:24:69:0e:6c: 6d:d2:a4:16:cd:d3:33:b6:d0:ac:f4:19:ee:72:b8: 09:42:fd:92:e2:ac:64:62:2d:b6:41:1b:90:b9:f1: 43:a9:18:41:ab:7b:63:b9:e1:74:c8:53:5a:bd:24: 27:db:29:a1:06:a7:3a:58:70:06:f5:8d:f9:e2:d5: 50:d1:a1:e6:03:fd:b1:66:44:70:f3:42:b0:d3:8c: 72:b3:ef:91:ce:4a:d1:a9:3e:87:a0:91:e7:56:6e: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:52:7A:15:00:05:82:C3:95:DA:C9:1E:77:F3:66:EF:19:4F:E5:7B X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:2d:f4:6d:5d:53:55:7e:b9:de:b7:b1:3f:67:6d:9f:dd:71: fd:bc:25:73:98:1d:db:44:5a:ab:b0:c4:ab:66:ef:0b:47:90: 7f:c9:99:75:75:48:34:e5:45:17:43:4b:0e:2b:c2:c4:fb:88: 20:1d:ad:c8:23:80:26:00:13:61:f7:dc:2f:48:c3:95:7a:f0: c4:23:c0:35:0f:be:69:01:a3:77:f1:f4:ae:45:08:30:70:bb: 75:4d:98:dd:84:ed:45:d0:df:c8:12:cd:9f:b8:e4:bc:c4:b0: 55:b3:6f:51:2d:c3:68:6a:97:5b:e4:eb:bd:59:4b:c8:68:22: ce:53:13:cc:aa:51:32:fb:bf:d3:c4:4c:f9:66:4a:32:71:b7: 6b:da:1c:78:1f:e4:da:27:c8:a9:a2:51:f2:bd:ce:20:39:b4: 7f:76:5a:42:1f:d8:ce:d2:10:0c:ce:9d:32:7d:eb:88:f5:cc: c9:fa:46:fc:91:9e:14:d7:59:a1:28:fc:2d:11:dd:38:c1:5f: 12:8d:ca:8a:90:b0:aa:41:f7:0f:e2:ac:5c:70:50:20:18:01: 2d:ce:7d:a3:43:87:bc:cf:8c:37:e2:93:4f:6d:49:07:70:1f: f8:dd:af:3c:78:fd:89:de:07:de:78:18:54:57:41:3c:78:5c: 3e:89:bc:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjUwODI0MTQzMzU0WhcNMjUwODMxMTQzMzU0WjAYMRYwFAYD VQQDEw02OGFiMjJkMi01ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvX1qvO9xxc30N1Insa0tjPVsHlefZkbRvtwLgRPfQ8TFY6PSEqkdN7UYC/+ GYtolAwL0ix0cOYOm0JWksuIrzF/YkGQ9NJCjLTi95TYhfNSSK2l/mNENjHO8ojH YcFLkt2wAr+V+uUhVpEylBw5a4Vud0hLM7tb5uE7XX5f71q2SqYEOQrTDdKHDVzq lQ2Dlqgg4si3U4hWA7xneJHlliRpDmxt0qQWzdMzttCs9BnucrgJQv2S4qxkYi22 QRuQufFDqRhBq3tjueF0yFNavSQn2ymhBqc6WHAG9Y354tVQ0aHmA/2xZkRw80Kw 04xys++RzkrRqT6HoJHnVm6tYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZSehUA BYLDldrJHnfzZu8ZT+V7MB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVLfRtXVNVfrnet7E/Z22f3XH9vCVzmB3bRFqrsMSrZu8LR5B/yZl1 dUg05UUXQ0sOK8LE+4ggHa3II4AmABNh99wvSMOVevDEI8A1D75pAaN38fSuRQgw cLt1TZjdhO1F0N/IEs2fuOS8xLBVs29RLcNoapdb5Ou9WUvIaCLOUxPMqlEy+7/T xEz5Zkoycbdr2hx4H+TaJ8ipolHyvc4gObR/dlpCH9jO0hAMzp0yfeuI9czJ+kb8 kZ4U11mhKPwtEd04wV8SjcqKkLCqQfcP4qxccFAgGAEtzn2jQ4e8z4w34pNPbUkH cB/43a88eP2J3gfeeBhUV0E8eFw+ibx7 -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:28 2025 by rpki-client