$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: J2SCNrGjpgakQxYT5E9y4CJmImT196yufxJKRrKl71U= Subject key identifier: 2C:8F:97:89:09:6E:E4:E0:F6:B8:AA:B3:A1:ED:0B:1C:E8:D1:9B:6F Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 34B0 Signing time: Sun 24 Aug 2025 15:01:26 +0000 Manifest this update: Sun 24 Aug 2025 15:01:25 +0000 Manifest next update: Sun 31 Aug 2025 15:01:25 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: X/yCN/lfCHL2Hids83wQisnLUMd4QnZno/OyH1Dmvg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Aug 24 15:01:25 2025 GMT Not After : Aug 31 15:01:25 2025 GMT Subject: CN=68ab2945-1d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:e0:6f:bd:f8:5a:78:ca:d5:af:62:1e:8b: 8d:1b:e4:51:2a:20:b1:2c:f3:bb:f5:26:37:df:28: 42:ab:fc:fd:5f:1d:ca:64:d7:ba:7d:f3:00:c6:a6: c4:60:64:37:37:e9:d0:8a:db:19:43:ea:b5:bc:4b: 04:91:c2:b4:f6:80:7c:69:42:8f:3e:1e:cc:3d:60: 36:e3:8a:3d:6d:84:26:79:0f:16:a0:51:1c:d2:12: d2:13:cc:8f:fc:2a:a6:29:13:1a:99:a0:9c:7b:ad: 3a:f7:bf:6c:d5:f1:4d:77:27:e1:9e:4d:78:0b:4b: f0:1b:41:63:8b:1b:1c:e0:72:eb:7b:a0:2b:7a:ae: d1:86:74:66:b2:9b:bc:84:57:e8:c8:0f:c4:46:48: 48:bd:33:a8:e1:ae:33:66:47:cf:41:7d:d7:45:7f: 5c:55:cb:89:1a:6f:cc:4c:a6:f2:fc:8d:c1:08:78: 99:1f:e1:9d:ca:fe:d5:53:4b:5a:ac:54:c1:d7:67: d6:d7:18:87:de:6e:c3:d7:67:24:2e:b9:8c:30:e3: f7:7f:76:29:cc:fc:3e:d9:19:1a:eb:ea:82:2c:f7: 78:af:2c:29:77:78:a7:d6:72:75:f9:17:9b:b6:1b: ba:d2:a9:13:20:66:7f:e3:8f:1b:0b:29:40:eb:c5: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:97:89:09:6E:E4:E0:F6:B8:AA:B3:A1:ED:0B:1C:E8:D1:9B:6F X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ec:37:13:f9:76:2a:91:51:2f:58:4f:8b:19:38:d1:6f:ee: bd:7e:45:90:17:79:3f:a8:c7:69:91:01:59:1b:22:78:4d:d1: 30:f9:ed:2d:19:a1:ad:fa:3a:93:f7:6d:d0:e1:47:78:8e:91: f2:13:ae:3e:d3:54:65:2c:05:b6:ec:31:a8:72:f8:58:84:68: 39:f6:af:19:e4:f6:e6:12:82:25:a5:6f:f9:3f:2e:6e:bc:bf: 36:0a:e2:4f:23:b8:c4:df:ea:98:90:60:5a:ce:40:ff:89:d6: c8:d5:72:69:2a:8a:57:63:e6:79:d8:f2:2d:9b:94:f5:56:6b: 75:9f:de:5f:5a:31:95:6e:8c:7b:eb:cd:83:5d:78:52:83:fd: cf:ff:2b:cc:10:3a:d6:b7:77:ec:65:20:85:18:28:24:08:e4: fb:e8:44:e8:98:88:75:d3:bb:b4:3a:52:5f:60:f3:67:4d:59: 24:48:e8:54:97:0f:4e:8f:e8:58:cb:3c:58:a2:5e:e3:20:4d: 28:cb:72:5e:3c:4f:0a:0d:88:9c:d0:30:61:a8:58:14:c8:b5: b1:3d:98:aa:68:16:ad:85:a5:86:d3:c4:66:ea:e3:8e:3b:d1: 32:4f:57:04:cb:8e:e5:56:4e:6b:ca:f2:7f:09:a8:ac:17:16: 93:96:91:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUwODI0MTUwMTI1WhcNMjUwODMxMTUwMTI1WjAYMRYwFAYD VQQDEw02OGFiMjk0NS0xZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv3gb734WnjK1a9iHouNG+RRKiCxLPO79SY33yhCq/z9Xx3KZNe6ffMAxqbE YGQ3N+nQitsZQ+q1vEsEkcK09oB8aUKPPh7MPWA244o9bYQmeQ8WoFEc0hLSE8yP /CqmKRMamaCce606979s1fFNdyfhnk14C0vwG0Fjixsc4HLre6Areq7RhnRmspu8 hFfoyA/ERkhIvTOo4a4zZkfPQX3XRX9cVcuJGm/MTKby/I3BCHiZH+Gdyv7VU0ta rFTB12fW1xiH3m7D12ckLrmMMOP3f3YpzPw+2Rka6+qCLPd4rywpd3in1nJ1+Reb thu60qkTIGZ/448bCylA68XOtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyPl4kJ buTg9riqs6HtCxzo0ZtvMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ7DcT+XYqkVEvWE+LGTjRb+69fkWQF3k/qMdpkQFZGyJ4TdEw+e0t GaGt+jqT923Q4Ud4jpHyE64+01RlLAW27DGocvhYhGg59q8Z5PbmEoIlpW/5Py5u vL82CuJPI7jE3+qYkGBazkD/idbI1XJpKopXY+Z52PItm5T1Vmt1n95fWjGVbox7 682DXXhSg/3P/yvMEDrWt3fsZSCFGCgkCOT76ETomIh107u0OlJfYPNnTVkkSOhU lw9Oj+hYyzxYol7jIE0oy3JePE8KDYic0DBhqFgUyLWxPZiqaBathaWG08Rm6uOO O9EyT1cEy47lVk5ryvJ/CaisFxaTlpFB -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:00 2025 by rpki-client