$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: C9zxA60LoGkWlgm+1MjRdCtNFRY0+T+6tQjMRX4vQ1k= Subject key identifier: 0E:37:08:64:9F:FF:64:AC:0E:84:06:D1:D4:41:CA:09:7A:88:B4:C1 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 0222 Signing time: Wed 17 Sep 2025 02:27:09 +0000 Manifest this update: Wed 17 Sep 2025 02:27:08 +0000 Manifest next update: Wed 24 Sep 2025 02:27:08 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: s153skQNaVG3xSQVuKWUxbgPGlt+yYHmcntZVGKYxe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Sep 17 02:27:08 2025 GMT Not After : Sep 24 02:27:08 2025 GMT Subject: CN=68ca1c7d-dfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:0d:56:92:f3:af:86:0c:f8:3f:14:a0:c7: 7d:6d:6f:6b:9b:f7:ec:60:dc:ab:1c:86:07:42:3b: 94:b4:83:31:ea:0a:bd:ed:60:8f:24:9b:ad:ff:72: e1:4c:a2:30:01:2a:fc:17:9a:a6:a4:67:8d:f2:53: 7c:1a:a4:b0:d5:f4:03:7c:0b:62:bc:80:b6:94:52: 59:e6:44:32:71:24:df:96:44:94:41:4c:19:a7:0b: 5a:e0:fa:35:0e:53:18:a5:d5:2c:91:bf:0e:7c:09: f7:8f:13:54:d5:87:bc:7d:3d:4d:05:24:15:d5:6b: be:00:9c:71:71:c1:3a:ba:38:63:5d:cf:27:ec:6a: 35:1a:a4:a0:4e:8e:be:8b:aa:b2:88:4d:36:17:ca: 9d:eb:a6:30:02:ab:d2:7b:ed:b9:b6:f0:39:83:f2: d1:90:19:e7:43:d9:76:e7:e0:40:cc:97:41:77:5b: c8:0e:18:46:f2:94:e1:7e:63:b5:84:e2:29:b5:3a: 69:de:1e:60:df:d3:a6:28:2f:72:61:c1:34:c2:f5: cc:51:69:61:11:7f:ab:4a:1f:93:c9:04:61:71:2d: 54:ff:59:e9:84:ca:7c:f1:7b:3c:50:15:21:1f:0e: 2a:51:7f:ed:97:5c:ba:ee:d9:55:14:1a:bd:0d:72: 50:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:08:64:9F:FF:64:AC:0E:84:06:D1:D4:41:CA:09:7A:88:B4:C1 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:0d:6b:a9:1d:f4:17:29:a3:15:2f:98:3c:74:7c:0e:db:3e: 36:47:b0:68:15:90:85:25:26:e3:98:00:da:e4:e3:e1:52:66: 41:e8:ca:e4:4a:6f:92:bd:fe:0e:9c:ae:b0:eb:72:ca:21:42: be:b0:91:3b:c2:14:39:be:a7:f1:83:01:a5:bf:9a:d5:ba:9f: c9:0e:33:af:ad:e2:7a:69:1e:28:81:55:6e:16:83:6a:77:a4: c5:c0:2e:69:33:e0:ee:4b:ae:64:fa:32:97:08:fb:46:00:9b: 16:55:1e:56:4d:0e:7e:3a:59:10:43:69:50:19:ab:71:05:a4: 7b:8d:8b:f3:c9:f0:6f:10:21:85:9d:bd:6a:77:61:05:8a:01: 34:7c:2c:51:50:d6:64:4f:49:78:03:84:93:10:fb:74:36:f1: 95:64:a4:25:c6:e5:42:28:ea:37:a1:18:de:e3:84:11:89:23: 72:3e:ca:6f:5a:a9:fd:25:ac:49:b6:72:06:46:e1:b0:a9:30: 2e:e5:80:69:16:f4:14:d6:23:a1:04:1f:c2:3a:3a:08:66:85: c0:25:d0:67:6a:c1:7f:b1:35:3b:9d:e1:48:cd:eb:1b:44:e8: 56:67:37:08:c4:b9:5f:09:c4:ee:aa:9d:5e:7d:7a:0a:b5:43: ed:27:98:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUwOTE3MDIyNzA4WhcNMjUwOTI0MDIyNzA4WjAYMRYwFAYD VQQDEw02OGNhMWM3ZC1kZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbgNVpLzr4YM+D8UoMd9bW9rm/fsYNyrHIYHQjuUtIMx6gq97WCPJJut/3Lh TKIwASr8F5qmpGeN8lN8GqSw1fQDfAtivIC2lFJZ5kQycSTflkSUQUwZpwta4Po1 DlMYpdUskb8OfAn3jxNU1Ye8fT1NBSQV1Wu+AJxxccE6ujhjXc8n7Go1GqSgTo6+ i6qyiE02F8qd66YwAqvSe+25tvA5g/LRkBnnQ9l25+BAzJdBd1vIDhhG8pThfmO1 hOIptTpp3h5g39OmKC9yYcE0wvXMUWlhEX+rSh+TyQRhcS1U/1nphMp88Xs8UBUh Hw4qUX/tl1y67tlVFBq9DXJQVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA43CGSf /2SsDoQG0dRBygl6iLTBMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHDWupHfQXKaMVL5g8dHwO2z42R7BoFZCFJSbjmADa5OPhUmZB6Mrk Sm+Svf4OnK6w63LKIUK+sJE7whQ5vqfxgwGlv5rVup/JDjOvreJ6aR4ogVVuFoNq d6TFwC5pM+DuS65k+jKXCPtGAJsWVR5WTQ5+OlkQQ2lQGatxBaR7jYvzyfBvECGF nb1qd2EFigE0fCxRUNZkT0l4A4STEPt0NvGVZKQlxuVCKOo3oRje44QRiSNyPspv Wqn9JaxJtnIGRuGwqTAu5YBpFvQU1iOhBB/COjoIZoXAJdBnasF/sTU7neFIzesb ROhWZzcIxLlfCcTuqp1efXoKtUPtJ5ja -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:13 2025 by rpki-client