$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: X8qk9jx1kM6OgDceJokcLiCfozjgGd9DV47vELzwHks= Subject key identifier: B9:F8:08:AB:7E:EA:8E:27:E7:E5:E0:3A:C0:5C:68:3B:57:90:CA:2E Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 34B1 Signing time: Sun 24 Aug 2025 15:10:28 +0000 Manifest this update: Sun 24 Aug 2025 15:10:28 +0000 Manifest next update: Sun 31 Aug 2025 15:10:28 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: sQJGNzrIMlaYarmIHTFzBiUi5gj8GmPYvqmS/2NK9XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Aug 24 15:10:28 2025 GMT Not After : Aug 31 15:10:28 2025 GMT Subject: CN=68ab2b64-f24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:7d:b5:42:10:fb:82:7b:15:6b:d8:55:96: 0f:e7:55:15:3d:ab:a5:9f:48:9b:49:e4:d9:e2:6a: 1b:9a:09:90:5a:48:89:73:07:bd:a7:65:c4:1d:21: 9d:a7:58:08:86:37:3f:15:aa:5e:e9:b7:f8:3a:4e: 89:17:ff:27:06:7a:bd:e7:5f:b3:41:36:09:aa:8d: df:a4:20:95:a5:9c:d1:65:90:43:1d:f3:8d:b5:c3: ea:8c:2e:ea:9e:4d:a9:62:bf:3f:37:98:17:27:6a: 7f:16:4c:ca:d0:0d:fa:98:22:2e:06:bb:b7:ba:6a: 70:a2:9e:7e:e3:cc:01:29:0a:f1:21:73:68:f0:48: 41:29:f7:41:4e:60:a8:4d:ef:92:b7:e3:91:7e:b5: 73:76:e0:9d:17:88:9c:9c:fb:47:79:29:62:56:39: df:70:f1:85:bc:b5:83:64:01:11:df:7e:51:c2:79: d6:09:ac:db:cd:f2:2c:cf:98:f5:1e:a9:1d:91:ab: 86:fe:30:83:8e:a4:75:6a:27:50:5f:99:31:8d:be: 69:b3:7b:a4:c9:bd:67:90:2e:da:4b:53:02:e0:cf: c1:a1:c3:3e:ce:a5:2b:34:f4:7c:f7:a4:45:20:3f: e6:de:b7:2e:82:d0:a0:11:1d:94:d3:93:25:3c:a9: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:08:AB:7E:EA:8E:27:E7:E5:E0:3A:C0:5C:68:3B:57:90:CA:2E X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:99:05:76:65:09:54:e5:a4:4f:d7:f9:17:8b:fa:84:2c:0a: db:da:2d:a3:aa:3a:75:12:ae:0b:01:55:08:5e:ac:ef:f1:6a: 9f:ae:1b:6b:18:e3:0c:66:be:e1:5a:63:65:f5:05:cc:40:9c: e8:a2:16:53:66:3a:13:dc:ce:02:eb:14:a5:90:6c:23:67:7e: 0c:83:72:14:62:06:0e:9f:77:1f:b4:8d:03:d3:75:50:00:de: 5c:de:a3:3f:df:62:90:39:50:de:af:06:16:23:bd:28:5e:81: 4d:36:b9:60:2c:31:1d:4c:e2:fb:31:42:a6:b4:4c:b0:82:68: 8a:22:56:60:d3:0e:53:0d:30:8a:6c:2e:0a:8d:a8:bb:71:89: 30:25:39:80:91:d0:7c:d4:77:65:d7:c2:e2:fe:1c:aa:89:8d: 1b:c5:f4:fa:d4:2b:9b:16:2c:d1:a2:b2:c7:70:d8:e1:74:f3: 34:0d:11:d3:1a:20:f9:f4:b2:27:78:9c:31:bc:d2:6d:df:60: c0:ff:ed:c1:2d:f9:25:04:25:5d:d0:7e:b5:c4:f0:58:30:0e: 5c:dd:3a:58:ef:15:65:95:40:7e:96:17:5d:79:01:b3:1e:ce: cd:a3:16:d3:3e:58:db:b2:fa:ca:10:ed:ce:af:8e:b6:60:18: 1e:d0:45:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwODI0MTUxMDI4WhcNMjUwODMxMTUxMDI4WjAYMRYwFAYD VQQDEw02OGFiMmI2NC1mMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6a59tUIQ+4J7FWvYVZYP51UVPauln0ibSeTZ4mobmgmQWkiJcwe9p2XEHSGd p1gIhjc/Fape6bf4Ok6JF/8nBnq951+zQTYJqo3fpCCVpZzRZZBDHfONtcPqjC7q nk2pYr8/N5gXJ2p/FkzK0A36mCIuBru3umpwop5+48wBKQrxIXNo8EhBKfdBTmCo Te+St+ORfrVzduCdF4icnPtHeSliVjnfcPGFvLWDZAER335RwnnWCazbzfIsz5j1 HqkdkauG/jCDjqR1aidQX5kxjb5ps3ukyb1nkC7aS1MC4M/BocM+zqUrNPR896RF ID/m3rcugtCgER2U05MlPKmCpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn4CKt+ 6o4n5+XgOsBcaDtXkMouMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWmQV2ZQlU5aRP1/kXi/qELArb2i2jqjp1Eq4LAVUIXqzv8Wqfrhtr GOMMZr7hWmNl9QXMQJzoohZTZjoT3M4C6xSlkGwjZ34Mg3IUYgYOn3cftI0D03VQ AN5c3qM/32KQOVDerwYWI70oXoFNNrlgLDEdTOL7MUKmtEywgmiKIlZg0w5TDTCK bC4Kjai7cYkwJTmAkdB81Hdl18Li/hyqiY0bxfT61CubFizRorLHcNjhdPM0DRHT GiD59LIneJwxvNJt32DA/+3BLfklBCVd0H61xPBYMA5c3TpY7xVllUB+lhddeQGz Hs7NoxbTPljbsvrKEO3Or462YBge0EVR -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:35 2025 by rpki-client