$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: LNdV0uf0WZGpUEQ9tQXldBXNI6pK4SmvQy1YDD7Bz1c= Subject key identifier: 1F:1A:8F:E0:E3:98:E9:75:1E:33:D1:9A:3E:4D:77:3D:CA:6A:A7:CD Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34AE Signing time: Sun 24 Aug 2025 14:53:55 +0000 Manifest this update: Sun 24 Aug 2025 14:53:55 +0000 Manifest next update: Sun 31 Aug 2025 14:53:55 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: TWrkZnInfJZUvJhVGvzA1CzX9DWBvgw5AOlbfjvKwPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Aug 24 14:53:55 2025 GMT Not After : Aug 31 14:53:55 2025 GMT Subject: CN=68ab2783-d69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:b2:64:02:81:78:23:db:f8:ed:5d:6a:a3: 98:c8:86:ac:95:bd:8e:48:69:7c:b1:07:f7:a8:13: 92:96:ab:15:70:49:a2:a0:86:52:8a:c3:df:47:2f: 43:d8:06:46:22:be:20:eb:a7:1a:9e:15:af:11:01: 5a:1c:3f:c4:e7:c9:ff:9e:1a:72:da:ee:5e:bb:9f: 28:09:6e:32:2b:fd:2b:bc:3c:21:58:2e:4b:86:80: f3:7d:b1:f5:b2:2d:c2:b9:af:80:e8:6f:66:4a:cd: c7:00:1a:c3:f4:b6:3e:d4:f4:8d:0b:c0:3a:c7:0e: 83:1d:e0:87:18:64:ac:36:0f:d9:ff:8e:bf:83:29: 8c:8f:74:98:a3:7f:7d:b4:ca:84:54:e1:55:ab:b6: 0c:20:93:09:d9:23:6c:97:06:58:52:3b:07:87:48: 1f:ca:af:4e:07:dd:e8:92:26:19:05:f1:3f:ac:16: 33:94:f5:a7:d6:b1:d0:95:25:64:77:06:12:bf:2d: fc:d7:37:f0:1a:92:de:69:02:87:3b:51:1b:6b:e9: c0:0d:79:46:e9:29:75:96:b2:08:f0:c1:a7:84:41: f7:1c:dd:49:c7:30:a9:5e:a7:e7:8d:c5:93:8c:3e: 45:80:1a:0b:97:2b:d2:f8:0d:5e:69:72:53:27:c9: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:8F:E0:E3:98:E9:75:1E:33:D1:9A:3E:4D:77:3D:CA:6A:A7:CD X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:82:df:60:ba:d0:35:76:3e:ba:78:84:df:ad:ce:f4:9a:c2: e8:1c:93:38:e2:b0:c4:82:c5:53:83:df:71:de:3b:56:a0:54: 93:87:83:aa:bf:ff:15:19:39:28:b4:9e:d0:ac:cd:eb:56:d8: 95:4e:e7:35:ea:fe:1f:28:e9:53:c4:72:ef:b4:65:db:22:78: bd:cb:a0:6d:de:fd:4d:13:83:80:93:29:1b:76:29:f7:b6:0d: 26:25:0a:d5:94:fd:33:23:e1:b6:fc:bc:58:d7:4d:94:fa:13: 88:03:96:ee:b4:fb:95:05:b7:14:00:b1:23:51:dd:d9:f0:9f: b2:31:50:6e:3c:cb:11:d5:dc:e9:cd:64:3b:74:6e:18:80:75: d7:0c:07:c3:25:dc:2d:15:3e:03:d8:99:40:5a:5a:8b:c6:1a: a8:8e:27:36:58:35:b0:42:83:1d:20:ab:d3:c9:e3:57:34:b2: 59:37:a5:28:0c:ae:d5:87:fe:af:d9:20:f9:c4:5f:cc:d0:13: 08:44:24:34:3f:8a:04:13:5a:e9:6e:af:86:4f:1b:65:8a:90: 7e:37:f1:08:08:88:b2:82:47:c2:ca:55:db:fa:99:60:d1:0d: ff:83:a6:69:04:26:30:0d:c8:4f:3f:10:0d:4a:c0:9b:97:1c: eb:bd:e2:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUwODI0MTQ1MzU1WhcNMjUwODMxMTQ1MzU1WjAYMRYwFAYD VQQDEw02OGFiMjc4My1kNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hKyZAKBeCPb+O1daqOYyIaslb2OSGl8sQf3qBOSlqsVcEmioIZSisPfRy9D 2AZGIr4g66canhWvEQFaHD/E58n/nhpy2u5eu58oCW4yK/0rvDwhWC5LhoDzfbH1 si3Cua+A6G9mSs3HABrD9LY+1PSNC8A6xw6DHeCHGGSsNg/Z/46/gymMj3SYo399 tMqEVOFVq7YMIJMJ2SNslwZYUjsHh0gfyq9OB93okiYZBfE/rBYzlPWn1rHQlSVk dwYSvy381zfwGpLeaQKHO1Eba+nADXlG6Sl1lrII8MGnhEH3HN1JxzCpXqfnjcWT jD5FgBoLlyvS+A1eaXJTJ8k/GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8aj+Dj mOl1HjPRmj5Ndz3KaqfNMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdgt9gutA1dj66eITfrc70msLoHJM44rDEgsVTg99x3jtWoFSTh4Oq v/8VGTkotJ7QrM3rVtiVTuc16v4fKOlTxHLvtGXbIni9y6Bt3v1NE4OAkykbdin3 tg0mJQrVlP0zI+G2/LxY102U+hOIA5butPuVBbcUALEjUd3Z8J+yMVBuPMsR1dzp zWQ7dG4YgHXXDAfDJdwtFT4D2JlAWlqLxhqojic2WDWwQoMdIKvTyeNXNLJZN6Uo DK7Vh/6v2SD5xF/M0BMIRCQ0P4oEE1rpbq+GTxtlipB+N/EICIiygkfCylXb+plg 0Q3/g6ZpBCYwDchPPxANSsCblxzrveLt -----END CERTIFICATE-----Generated at Sun Aug 24 21:31:12 2025 by rpki-client