$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: jtMAktyVNhe7KfB0l9qzuZxuzfS9iHlIGBV0bqTtPGU= Subject key identifier: C1:0C:3D:C9:04:8A:6E:CA:AB:9E:B6:7E:56:72:24:8E:20:78:EA:6E Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3C0E Signing time: Sun 24 Aug 2025 14:35:07 +0000 Manifest this update: Sun 24 Aug 2025 14:35:06 +0000 Manifest next update: Sun 31 Aug 2025 14:35:06 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: EEdPcSVNGsAUM3QfMWnRChX7T8R/NDnlv6cs93iU7d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: Aug 24 14:35:06 2025 GMT Not After : Aug 31 14:35:06 2025 GMT Subject: CN=68ab231a-ea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f6:a6:66:6f:2d:f4:16:02:6c:c4:6e:5c:a3: 1a:2c:c3:6c:ce:12:45:c2:df:ad:48:17:9f:2c:50: 74:71:a9:77:3a:85:b3:4e:58:88:7f:f3:da:13:3a: eb:e8:5b:9f:65:3f:3b:e8:bf:c5:eb:c3:f6:68:14: c9:c8:b7:cc:48:e7:d3:e8:59:7d:26:aa:c7:e0:46: 35:92:36:d3:dd:86:63:bc:4c:47:2c:65:5d:38:58: ef:20:62:c5:03:ad:37:b5:be:8e:9d:f2:a1:9c:4c: bd:f3:6b:1e:6e:b0:f2:5a:f6:6e:7d:e2:46:33:eb: fa:4a:46:7e:41:9f:c3:0b:9a:24:d6:20:6d:e6:1f: 4f:ca:02:a7:18:5e:59:93:7f:b4:d6:9a:e0:03:20: 07:f2:da:4d:1d:f7:ef:74:81:eb:1e:64:18:4a:68: de:c8:02:3c:97:aa:be:b1:86:0c:f2:66:1e:66:ad: 95:07:a5:38:e0:be:f7:33:49:dd:12:da:e1:d8:6c: 06:d6:18:cb:87:61:97:c7:37:2f:09:86:75:7f:7c: c0:bc:49:f1:61:1e:e1:f2:bb:5b:5f:9d:5b:86:f4: f0:93:dc:ed:74:0e:a2:38:16:d5:7c:c8:a3:1d:be: 11:60:cd:18:a1:84:bd:06:36:2f:5d:45:07:07:9c: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:3D:C9:04:8A:6E:CA:AB:9E:B6:7E:56:72:24:8E:20:78:EA:6E X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a0:20:b4:4e:a6:7a:08:ab:50:76:0f:f0:21:46:35:64:e1: 5d:ae:0e:f7:4b:e0:5f:fe:aa:b6:e7:be:bd:01:a6:ea:cd:9f: 9e:80:9b:1f:95:dd:16:ae:e1:b2:51:2f:f8:63:97:cb:ad:1c: f1:d8:3c:eb:1a:e8:f7:15:34:c2:ee:dd:9b:c7:f1:e9:59:f8: 7c:af:83:59:f0:73:ab:49:eb:dd:2c:90:b5:c8:f5:5e:6f:3b: 2c:ef:6f:fe:f2:0c:66:e0:3c:f3:55:97:06:69:90:cd:5e:57: 3f:cc:d1:d5:b4:94:58:8e:5e:48:82:aa:17:52:32:b4:d9:92: a0:b4:e1:db:1c:3e:c8:d4:d2:b5:5f:2b:8b:30:f0:2a:48:8c: 48:e5:68:1d:c5:c1:a1:14:6d:bb:44:e2:7c:01:9e:69:39:6c: e7:91:bf:e2:23:91:16:37:54:21:0b:19:6a:2a:3d:7e:d8:e4: 5d:85:1f:8a:e8:a6:71:c1:1c:e7:94:05:0e:be:4f:ef:7f:b3: f6:25:bf:e0:43:b0:3a:d6:64:9c:b9:41:e1:35:65:22:87:d5: 8f:ea:ba:60:16:f4:b8:5e:f1:fb:60:8c:36:0b:c0:e0:32:ff: 58:26:24:97:85:2d:cf:6a:71:97:c5:fe:41:37:76:b2:18:32: 8d:a2:7f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjUwODI0MTQzNTA2WhcNMjUwODMxMTQzNTA2WjAYMRYwFAYD VQQDEw02OGFiMjMxYS1lYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vamZm8t9BYCbMRuXKMaLMNszhJFwt+tSBefLFB0cal3OoWzTliIf/PaEzrr 6FufZT876L/F68P2aBTJyLfMSOfT6Fl9JqrH4EY1kjbT3YZjvExHLGVdOFjvIGLF A603tb6OnfKhnEy982sebrDyWvZufeJGM+v6SkZ+QZ/DC5ok1iBt5h9PygKnGF5Z k3+01prgAyAH8tpNHffvdIHrHmQYSmjeyAI8l6q+sYYM8mYeZq2VB6U44L73M0nd Etrh2GwG1hjLh2GXxzcvCYZ1f3zAvEnxYR7h8rtbX51bhvTwk9ztdA6iOBbVfMij Hb4RYM0YoYS9BjYvXUUHB5wkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEMPckE im7Kq562flZyJI4geOpuMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBboCC0TqZ6CKtQdg/wIUY1ZOFdrg73S+Bf/qq25769AabqzZ+egJsf ld0WruGyUS/4Y5fLrRzx2DzrGuj3FTTC7t2bx/HpWfh8r4NZ8HOrSevdLJC1yPVe bzss72/+8gxm4DzzVZcGaZDNXlc/zNHVtJRYjl5IgqoXUjK02ZKgtOHbHD7I1NK1 XyuLMPAqSIxI5WgdxcGhFG27ROJ8AZ5pOWznkb/iI5EWN1QhCxlqKj1+2ORdhR+K 6KZxwRznlAUOvk/vf7P2Jb/gQ7A61mScuUHhNWUih9WP6rpgFvS4XvH7YIw2C8Dg Mv9YJiSXhS3PanGXxf5BN3ayGDKNon8T -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:52 2025 by rpki-client