$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: 5reufHPX9UbCbA1+nzPYwFJV1C22FjIwpxz38wDLbu0= Subject key identifier: CE:49:AF:CE:1A:33:F1:AF:B7:F3:22:9B:AF:B9:35:60:C3:27:BA:12 Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 2A Signing time: Thu 21 Aug 2025 07:57:55 +0000 Manifest this update: Thu 21 Aug 2025 07:57:55 +0000 Manifest next update: Thu 28 Aug 2025 07:57:55 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: UqItHiaCMdD835ZBHVMEWb98ey8uE5b58o1t9PN5mAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Aug 21 07:57:55 2025 GMT Not After : Aug 28 07:57:55 2025 GMT Subject: CN=68a6d183-1474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:ef:88:38:ba:05:5c:f6:14:5a:0f:11:3a: 9c:07:72:03:39:d9:ef:6d:66:f2:bf:00:52:ea:9d: 3a:97:f6:0d:68:65:24:6f:16:62:a9:4f:87:db:2f: 65:1c:37:75:b5:e2:28:8e:dc:d9:59:c5:9e:33:65: 18:40:4f:1a:f5:87:ff:5a:54:f8:7d:d6:b4:84:75: 86:13:03:bc:03:56:16:8d:fe:60:d2:64:52:0e:ac: 6a:95:9e:02:c3:e6:1d:43:03:73:cb:fb:36:24:1c: 4c:09:46:a3:23:ff:70:59:9d:a1:a8:c6:ad:c9:40: 82:66:88:39:4c:fe:04:64:3f:0c:18:90:86:78:a3: 7b:64:f4:d6:e6:e1:a2:70:ee:1d:44:9b:49:bc:2a: 90:58:3f:c6:93:3d:61:07:f2:75:86:59:91:94:9b: 8e:92:65:e6:48:1b:cb:8f:41:87:57:8b:04:ef:7c: b1:b1:c6:cb:a2:7f:5b:8d:80:d0:51:ff:1a:a9:87: c9:8b:bc:5a:36:15:d0:af:3c:d1:8d:06:2c:4c:29: ab:c1:56:50:76:a1:4a:ff:21:90:d6:23:73:1b:8f: 58:ec:95:5a:eb:06:56:8f:74:a9:cd:58:ca:3f:4b: 1d:10:b2:ec:33:d6:75:29:68:dd:6c:af:55:8f:88: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:49:AF:CE:1A:33:F1:AF:B7:F3:22:9B:AF:B9:35:60:C3:27:BA:12 X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5b:44:b5:d9:4f:28:0b:1e:93:22:25:8c:1b:40:2a:cd:0f: a8:c9:96:c9:95:a8:f1:01:54:7d:00:a6:e5:7c:d9:ae:2e:0d: fd:79:73:a4:b3:0b:ae:0b:a4:5c:d7:f2:17:7d:c2:b1:be:0f: c3:46:9d:96:0b:89:12:12:30:3f:4d:2e:3e:3c:3f:44:88:af: fc:2d:d2:18:15:1e:24:69:53:cf:be:46:1f:b9:44:4e:65:11: b4:62:88:b6:16:a7:8f:59:c6:4e:f5:ea:4c:78:16:6f:6e:b7: f8:9e:4f:de:0c:49:78:74:02:b9:76:cb:fc:a8:f7:78:25:45: 51:51:ae:63:2c:f0:47:da:70:e1:76:6a:0b:d2:73:ac:22:2f: fc:a2:09:29:67:26:f6:68:9a:6d:93:51:94:64:03:d5:d1:8a: fb:4c:bd:1d:d4:a0:fb:69:f8:a5:e1:9a:43:59:e6:b0:7d:3b: fd:e2:bf:6f:b6:ef:e5:d1:d0:73:e1:32:b5:ae:7f:96:f4:11: 4e:82:0c:f2:e5:e7:8b:dd:eb:eb:c4:c8:c6:9e:cf:f1:eb:05: 2a:55:61:b5:f7:bf:c7:b6:10:70:a4:21:e1:89:67:13:2c:9b: 14:44:f8:3b:5d:b8:ef:d5:9f:27:07:ba:ee:90:33:1b:be:1d: a6:d4:29:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTA4MjEwNzU3NTVaFw0yNTA4MjgwNzU3NTVaMBgxFjAUBgNV BAMTDTY4YTZkMTgzLTE0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaQu+IOLoFXPYUWg8ROpwHcgM52e9tZvK/AFLqnTqX9g1oZSRvFmKpT4fbL2Uc N3W14iiO3NlZxZ4zZRhATxr1h/9aVPh91rSEdYYTA7wDVhaN/mDSZFIOrGqVngLD 5h1DA3PL+zYkHEwJRqMj/3BZnaGoxq3JQIJmiDlM/gRkPwwYkIZ4o3tk9Nbm4aJw 7h1Em0m8KpBYP8aTPWEH8nWGWZGUm46SZeZIG8uPQYdXiwTvfLGxxsuif1uNgNBR /xqph8mLvFo2FdCvPNGNBixMKavBVlB2oUr/IZDWI3Mbj1jslVrrBlaPdKnNWMo/ Sx0Qsuwz1nUpaN1sr1WPiAOTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzkmvzhoz 8a+38yKbr7k1YMMnuhIwHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1bRLXZTygLHpMiJYwbQCrND6jJlsmVqPEBVH0ApuV82a4uDf15c6Sz C64LpFzX8hd9wrG+D8NGnZYLiRISMD9NLj48P0SIr/wt0hgVHiRpU8++Rh+5RE5l EbRiiLYWp49Zxk716kx4Fm9ut/ieT94MSXh0Arl2y/yo93glRVFRrmMs8EfacOF2 agvSc6wiL/yiCSlnJvZomm2TUZRkA9XRivtMvR3UoPtp+KXhmkNZ5rB9O/3iv2+2 7+XR0HPhMrWuf5b0EU6CDPLl54vd6+vEyMaez/HrBSpVYbX3v8e2EHCkIeGJZxMs mxRE+DtduO/VnycHuu6QMxu+HabUKYY= -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:11 2025 by rpki-client