$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json) Hash identifier: 8zSdc8Ifcx78lo/coz5KfV3o7g18mGicp8e3PsMzxKc= Subject key identifier: 46:B9:15:39:7B:58:B8:B0:E7:31:5F:04:A0:E5:26:60:CD:9E:E5:9B Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft Manifest number: 34B1 Signing time: Sun 24 Aug 2025 15:05:08 +0000 Manifest this update: Sun 24 Aug 2025 15:05:08 +0000 Manifest next update: Sun 31 Aug 2025 15:05:08 +0000 Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: 5vPexcjf9y4zSt5HDIGi5iaqFX/gXy2O8w20loq1ZIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Validity Not Before: Aug 24 15:05:08 2025 GMT Not After : Aug 31 15:05:08 2025 GMT Subject: CN=68ab2a24-1a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2f:a6:6f:9f:ac:31:1b:b9:92:f2:21:76:40: 95:3e:69:29:13:ca:f4:08:f4:89:97:1e:a8:bc:3a: 85:03:af:82:ea:32:55:e3:5c:d6:96:6e:70:c5:0c: be:98:2d:04:72:cf:f6:66:40:9b:e0:16:7b:a8:c8: 6d:d9:b7:3b:36:d9:e8:cc:59:72:f8:0f:11:3b:fc: 70:df:38:1d:5c:c1:6e:e2:a7:3a:7e:58:25:ac:51: df:4f:f9:09:ca:db:6b:85:93:99:b1:17:23:16:f6: f9:48:98:0a:b1:53:4d:0b:68:0a:9f:96:19:08:54: b7:d3:0c:23:e5:a8:7c:1a:e2:96:03:31:34:0a:0f: 13:24:53:9c:d5:a3:b2:aa:a0:46:8e:02:fc:0c:4a: 29:7c:e2:19:b4:36:1d:fa:02:f7:7f:17:68:aa:d6: 6d:e8:b4:59:75:db:59:c6:01:ff:bc:cb:aa:34:f5: d4:fe:3d:44:a3:29:be:95:c0:be:5c:0b:b6:e8:ca: 7a:9b:16:2b:35:21:97:a9:41:99:e0:0d:2a:5d:ae: 12:8f:f7:ef:9f:29:45:fe:a2:34:3f:57:a1:e4:aa: 6f:40:b4:95:18:70:b8:3e:b8:85:f4:0c:15:71:25: 4c:33:e2:0b:a6:1c:79:ba:c0:ae:9d:15:82:7a:95: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B9:15:39:7B:58:B8:B0:E7:31:5F:04:A0:E5:26:60:CD:9E:E5:9B X509v3 Authority Key Identifier: keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:9f:ba:3e:b1:f7:a0:30:56:3a:f8:27:8a:e2:3f:31:97:7e: 7d:f6:8c:65:ed:65:3f:da:4f:83:bf:f3:38:c5:0e:c7:ef:cb: 3a:d9:ed:06:0c:e8:60:e3:2f:20:18:11:55:93:28:c6:cb:3e: 82:9b:52:52:15:96:d0:a0:f9:6f:14:4a:60:df:85:28:a2:c9: b2:64:ef:fc:c6:9b:f5:7b:26:c6:28:97:af:03:46:4e:ae:7d: 73:1c:97:a5:3b:22:8a:23:c9:59:02:40:a5:2c:f0:50:1b:ac: 43:1b:bc:c6:0a:ac:50:be:b4:df:83:bc:77:9d:1f:9a:4d:c2: 7f:68:b2:36:05:64:92:66:85:2a:64:d5:b1:97:0a:c5:3d:e0: 2f:a6:75:19:2f:e1:78:6d:fa:b8:80:6d:16:7a:d1:1e:e4:15: 5d:32:99:e6:51:2f:06:eb:15:18:13:97:88:e4:53:69:05:33: d4:81:60:08:32:ee:e4:af:f2:b2:9a:4d:b8:33:39:5f:ab:d0: f7:8c:f3:31:61:58:32:b2:8b:27:36:8e:68:61:4c:5c:ab:a1: d7:8a:b4:a4:7a:31:f0:a8:84:d0:93:78:72:94:e5:5c:d7:65: da:4f:b4:be:58:15:34:50:9c:f4:71:84:02:36:3c:ca:ee:bc: 4d:2b:6f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDNjcxMTAvBgNVBAUTKDdGRkM1QTI5RTc1RjlFQkUwNzlEMDUyNDdGMERGRjBD Rjk4N0YxQzIwHhcNMjUwODI0MTUwNTA4WhcNMjUwODMxMTUwNTA4WjAYMRYwFAYD VQQDEw02OGFiMmEyNC0xYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8i+mb5+sMRu5kvIhdkCVPmkpE8r0CPSJlx6ovDqFA6+C6jJV41zWlm5wxQy+ mC0Ecs/2ZkCb4BZ7qMht2bc7NtnozFly+A8RO/xw3zgdXMFu4qc6flglrFHfT/kJ yttrhZOZsRcjFvb5SJgKsVNNC2gKn5YZCFS30wwj5ah8GuKWAzE0Cg8TJFOc1aOy qqBGjgL8DEopfOIZtDYd+gL3fxdoqtZt6LRZddtZxgH/vMuqNPXU/j1Eoym+lcC+ XAu26Mp6mxYrNSGXqUGZ4A0qXa4Sj/fvnylF/qI0P1eh5KpvQLSVGHC4PriF9AwV cSVMM+ILphx5usCunRWCepWFXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa5FTl7 WLiw5zFfBKDlJmDNnuWbMB8GA1UdIwQYMBaAFH/8WinnX56+B50FJH8N/wz5h/HC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEM2Ny9CRjNGQzJGQTFE QTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5yNEhuUVVrZnczX0RQbUg4 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeGFLZWRmbnI0SG5RVWtmdzNfRFBtSDhjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEM2Ny9CRjNGQzJGQTFEQTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5y NEhuUVVrZnczX0RQbUg4Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbn7o+sfegMFY6+CeK4j8xl3599oxl7WU/2k+Dv/M4xQ7H78s62e0G DOhg4y8gGBFVkyjGyz6Cm1JSFZbQoPlvFEpg34UoosmyZO/8xpv1eybGKJevA0ZO rn1zHJelOyKKI8lZAkClLPBQG6xDG7zGCqxQvrTfg7x3nR+aTcJ/aLI2BWSSZoUq ZNWxlwrFPeAvpnUZL+F4bfq4gG0WetEe5BVdMpnmUS8G6xUYE5eI5FNpBTPUgWAI Mu7kr/Kymk24Mzlfq9D3jPMxYVgysosnNo5oYUxcq6HXirSkejHwqITQk3hylOVc 12XaT7S+WBU0UJz0cYQCNjzK7rxNK2+U -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:25 2025 by rpki-client