$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: GBG/K3CkWQhftr9gHSRPebxRMY9z1yPOxw3/+mcTCaE= Subject key identifier: AB:C9:2F:80:22:B4:EC:80:3E:03:D7:7E:17:0A:50:FE:94:71:5A:57 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 02AC Signing time: Thu 21 Aug 2025 02:52:53 +0000 Manifest this update: Thu 21 Aug 2025 02:52:52 +0000 Manifest next update: Thu 28 Aug 2025 02:52:52 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: dBSUiDWTX7fUNp1cN/i72mWdwDW0Kxsboau2SgLLcto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Aug 21 02:52:52 2025 GMT Not After : Aug 28 02:52:52 2025 GMT Subject: CN=68a68a05-a1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:de:a2:af:4d:71:79:c8:f0:95:00:88:a0: 53:bb:27:6e:94:12:41:de:fe:73:b5:95:57:04:ab: 95:d1:a8:29:b0:3f:37:8c:c8:e2:17:db:83:67:ac: d4:6b:72:45:aa:4b:24:23:bc:8d:2c:3c:ab:45:7f: 22:00:39:dd:9f:82:fd:20:ba:9d:97:f3:cc:67:b7: 6b:94:1b:f6:8e:6d:3c:21:ec:bb:52:54:21:be:80: 71:84:31:1b:e6:e6:c6:7c:1f:03:3a:68:02:40:08: b6:3f:76:51:8f:e8:1a:ae:5a:34:45:cb:a0:20:19: b7:32:db:9f:a0:03:ef:aa:d2:74:ef:a3:47:27:f5: f5:09:02:f8:a2:00:45:12:e3:53:6a:f7:28:7f:cb: 0d:f6:71:90:0c:d3:16:47:f5:88:88:7d:53:1c:98: 5f:fe:76:c6:c4:64:0b:5a:dc:0e:a2:6a:cf:b6:b4: 95:61:79:a8:82:3f:37:a7:94:a3:a9:3b:d0:a3:53: 31:a3:4a:83:32:4f:ec:15:1a:d4:4d:67:36:47:26: 1f:05:a3:f7:7c:d5:e0:8d:4b:8a:1d:c0:c3:52:e6: d2:3b:e4:42:ab:81:08:b9:a2:d9:e2:2f:b2:c0:dd: 76:00:f7:d6:88:c5:16:7d:a8:6f:bb:8e:e2:f7:1d: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:2F:80:22:B4:EC:80:3E:03:D7:7E:17:0A:50:FE:94:71:5A:57 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2d:c7:e3:2b:ad:bd:43:c7:f8:34:d8:c3:64:d6:4f:9f:7e: 39:10:1e:02:c1:6d:80:34:18:fa:c2:0c:b7:e9:e4:09:77:f5: 68:07:cf:d9:1d:0a:e3:ac:65:64:ea:70:81:e2:fb:df:87:60: 47:fc:ee:22:02:f6:f2:61:d7:4e:39:ae:1e:ee:b0:de:8e:53: 1c:6a:b1:05:4d:91:a4:a1:03:d4:dd:1f:b7:e6:79:d5:c8:37: 45:4b:93:60:0e:52:5b:92:c6:a6:d7:fb:98:ed:fb:88:85:1e: 82:f2:76:77:d2:45:90:68:4a:66:17:33:6a:bc:3f:15:95:6f: f3:d6:56:e2:c7:ac:d1:da:fc:be:f9:aa:1d:ac:b0:dc:32:22: db:a0:03:17:7e:19:a4:a7:64:fd:78:e0:eb:a1:49:d6:f9:e7: 1d:6e:4f:03:1c:9f:58:46:a6:6c:99:f0:1b:fc:dc:af:ba:f8: bc:23:4a:58:c6:a6:12:50:2c:e2:b9:20:67:31:7d:29:a8:88: ac:46:ab:9b:41:15:f8:84:41:9f:eb:76:a3:af:7c:c7:ce:3f: aa:24:9b:25:cd:77:d7:55:fb:f3:c2:bb:11:d2:3b:d5:e8:07: ce:ea:84:08:ea:d0:d4:7a:40:5a:f6:be:00:45:61:c9:17:41: 07:05:f8:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUwODIxMDI1MjUyWhcNMjUwODI4MDI1MjUyWjAYMRYwFAYD VQQDEw02OGE2OGEwNS1hMWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxffeoq9NcXnI8JUAiKBTuydulBJB3v5ztZVXBKuV0agpsD83jMjiF9uDZ6zU a3JFqkskI7yNLDyrRX8iADndn4L9ILqdl/PMZ7drlBv2jm08Iey7UlQhvoBxhDEb 5ubGfB8DOmgCQAi2P3ZRj+garlo0RcugIBm3MtufoAPvqtJ076NHJ/X1CQL4ogBF EuNTavcof8sN9nGQDNMWR/WIiH1THJhf/nbGxGQLWtwOomrPtrSVYXmogj83p5Sj qTvQo1Mxo0qDMk/sFRrUTWc2RyYfBaP3fNXgjUuKHcDDUubSO+RCq4EIuaLZ4i+y wN12APfWiMUWfahvu47i9x1WPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvJL4Ai tOyAPgPXfhcKUP6UcVpXMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfLcfjK629Q8f4NNjDZNZPn345EB4CwW2ANBj6wgy36eQJd/VoB8/Z HQrjrGVk6nCB4vvfh2BH/O4iAvbyYddOOa4e7rDejlMcarEFTZGkoQPU3R+35nnV yDdFS5NgDlJbksam1/uY7fuIhR6C8nZ30kWQaEpmFzNqvD8VlW/z1lbix6zR2vy+ +aodrLDcMiLboAMXfhmkp2T9eODroUnW+ecdbk8DHJ9YRqZsmfAb/Nyvuvi8I0pY xqYSUCziuSBnMX0pqIisRqubQRX4hEGf63ajr3zHzj+qJJslzXfXVfvzwrsR0jvV 6AfO6oQI6tDUekBa9r4ARWHJF0EHBfh9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:45 2025 by rpki-client