$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: UL3cmkRI37VmtwVa1IRfyUNZOxMl4astXRCNjnLih/8= Subject key identifier: CF:A5:34:58:50:7C:F3:93:EF:B3:6B:C2:F3:1E:E7:D4:A0:02:74:BD Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: A2 Signing time: Thu 21 Aug 2025 06:25:53 +0000 Manifest this update: Thu 21 Aug 2025 06:25:52 +0000 Manifest next update: Thu 28 Aug 2025 06:25:52 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: 9CcQmJpejGUUafmGdEynnGsHGFSQo9p0Z6KPOQ9nFD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: Aug 21 06:25:52 2025 GMT Not After : Aug 28 06:25:52 2025 GMT Subject: CN=68a6bbf0-9c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:d0:5b:5d:42:0a:ed:6b:0d:b5:c4:85:25: 78:38:1c:35:7d:17:ad:7f:66:52:0a:e2:8e:99:fc: d0:16:f0:99:69:cb:8e:c0:45:26:33:58:c1:c5:5c: b0:a8:57:d8:a2:99:dc:64:23:18:0a:0f:c0:17:53: 8e:86:b4:96:4f:f5:9e:25:66:cb:7a:3f:32:fb:25: 25:ef:01:3c:5b:67:11:41:a8:35:2a:5d:e5:07:66: 54:88:ae:8e:e1:57:23:ba:39:bc:72:5e:cb:f0:a5: 24:83:eb:e0:37:ec:c5:41:0e:c1:4f:b4:79:fd:67: 32:a1:cd:7d:89:1b:16:93:d8:bf:f8:52:28:7f:13: 3b:4b:90:1a:a9:30:32:3b:e7:f4:23:aa:f5:7f:7f: 3d:83:d0:ad:fb:f6:55:5b:c0:4f:d9:15:89:c5:15: d0:e7:b1:79:6f:44:93:19:7d:5c:03:29:64:16:4f: ef:2b:9b:bb:18:77:68:e3:68:ca:86:06:c6:71:a0: 8f:24:d8:08:eb:39:0f:c9:09:39:e5:13:4d:46:fc: 04:a8:5b:5d:15:88:fb:d7:d9:38:ca:fc:9c:7e:81: 53:61:ca:2a:9b:b9:86:66:76:ef:df:02:b6:c6:01: 5b:ee:6c:3f:47:e8:ca:9d:8a:7f:ea:0a:a7:e3:4a: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:34:58:50:7C:F3:93:EF:B3:6B:C2:F3:1E:E7:D4:A0:02:74:BD X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1b:06:9c:a2:0d:6c:41:08:0f:8d:89:4d:5a:bd:82:3d:8d: 14:53:ba:2c:9e:3b:c3:88:0b:cd:1d:f1:ef:13:2b:a3:e2:7d: ee:ad:5e:d8:2b:b1:3a:0d:3a:79:8f:ce:76:ba:7b:67:c8:2a: 71:3a:06:e1:4a:c2:ea:d0:12:d4:1e:c3:f7:02:7e:3f:f7:3a: 88:75:4c:40:37:b6:9e:6f:09:5e:3a:05:aa:5f:6e:bf:0e:ff: 7c:1a:73:81:4b:34:46:dd:ba:46:7f:d1:91:2f:37:6d:4f:18: aa:37:0e:60:25:63:e9:1d:76:3e:92:ce:06:30:f3:ab:e9:d7: bb:e7:25:1b:92:67:d6:79:05:c0:6f:39:28:48:da:b4:2f:92: ba:28:9c:93:76:ac:f1:9b:a0:e2:7a:be:30:1e:ca:27:30:73: bf:5c:d4:22:2d:3c:09:2c:f0:c8:f6:80:ec:b4:ca:47:60:dd: 9c:f5:3d:2a:38:a7:fa:b9:64:72:7f:81:a5:75:7c:12:9d:3d: c2:9d:e9:a4:fc:4f:11:67:a4:3a:b3:74:51:9d:ee:99:33:77: 2a:98:55:34:fb:5f:4e:2b:79:ca:71:16:f4:14:e2:55:6a:84: a7:21:16:38:ae:f2:94:0b:c2:71:9b:13:60:83:e4:b1:79:70: 91:bf:2a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKEU2MEUyMTQxRDcxREI5RkM4OUZBQkZCNUZEQUQwMzcy REZBMzM3RDAwHhcNMjUwODIxMDYyNTUyWhcNMjUwODI4MDYyNTUyWjAYMRYwFAYD VQQDEw02OGE2YmJmMC05YzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8bQW11CCu1rDbXEhSV4OBw1fRetf2ZSCuKOmfzQFvCZacuOwEUmM1jBxVyw qFfYopncZCMYCg/AF1OOhrSWT/WeJWbLej8y+yUl7wE8W2cRQag1Kl3lB2ZUiK6O 4Vcjujm8cl7L8KUkg+vgN+zFQQ7BT7R5/Wcyoc19iRsWk9i/+FIofxM7S5AaqTAy O+f0I6r1f389g9Ct+/ZVW8BP2RWJxRXQ57F5b0STGX1cAylkFk/vK5u7GHdo42jK hgbGcaCPJNgI6zkPyQk55RNNRvwEqFtdFYj719k4yvycfoFTYcoqm7mGZnbv3wK2 xgFb7mw/R+jKnYp/6gqn40pBZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+lNFhQ fPOT77NrwvMe59SgAnS9MB8GA1UdIwQYMBaAFOYOIUHXHbn8ifq/tf2tA3LfozfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EOTE2NUVCQTg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVmeUotci0xX2EwRGN0LWpO OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EOTE2NUVCQTg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVm eUotci0xX2EwRGN0LWpOOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALGwacog1sQQgPjYlNWr2CPY0UU7osnjvDiAvNHfHvEyuj4n3urV7Y K7E6DTp5j852untnyCpxOgbhSsLq0BLUHsP3An4/9zqIdUxAN7aebwleOgWqX26/ Dv98GnOBSzRG3bpGf9GRLzdtTxiqNw5gJWPpHXY+ks4GMPOr6de75yUbkmfWeQXA bzkoSNq0L5K6KJyTdqzxm6Dier4wHsonMHO/XNQiLTwJLPDI9oDstMpHYN2c9T0q OKf6uWRyf4GldXwSnT3Cnemk/E8RZ6Q6s3RRne6ZM3cqmFU0+19OK3nKcRb0FOJV aoSnIRY4rvKUC8JxmxNgg+SxeXCRvypP -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:37 2025 by rpki-client