$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: IRShq2TEw3H6QO9tRdVNocAC3ZsZ1CICa2lxM5kkve4= Subject key identifier: 1A:17:F0:E7:C7:54:32:E8:C8:86:F5:0F:AB:8D:7F:12:5C:17:61:C7 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D12 Signing time: Wed 20 Aug 2025 18:08:22 +0000 Manifest this update: Wed 20 Aug 2025 18:08:22 +0000 Manifest next update: Wed 27 Aug 2025 18:08:22 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: muU3No1ljbmvFB4ZfJWiqndg5wVxLua7Zs/XY1J2Cgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Aug 20 18:08:22 2025 GMT Not After : Aug 27 18:08:22 2025 GMT Subject: CN=68a60f16-0263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:6a:bf:11:a8:f2:52:00:98:d8:b0:e2:17: d6:ae:a9:b1:8a:56:00:32:fa:72:85:7a:4d:ff:cd: dd:28:35:ca:fd:35:24:96:08:f0:fe:63:24:d9:53: af:05:71:37:3d:bb:5c:54:e5:83:77:f3:9d:44:0b: 2c:6a:06:ff:ba:ec:6f:1a:51:e4:2c:86:67:5e:9e: 9f:fb:e3:e8:bb:7a:b4:6e:0e:8a:af:56:f6:24:f4: 4a:a6:a3:b5:ff:c6:44:b8:5b:55:ab:7d:5f:22:ce: 3b:07:fc:28:5d:ed:a5:88:e9:a1:46:07:e7:78:38: 8f:20:01:d0:f0:be:ed:7a:32:e2:4a:1d:fd:b7:1f: 07:98:e2:9f:74:15:68:9a:57:8b:0e:df:5a:a2:6e: 1b:36:7f:58:b6:f4:07:a9:2d:cc:52:2f:f3:0e:76: d4:6d:11:8f:25:69:a5:db:96:1f:9a:9f:90:6d:79: ff:0e:96:09:31:c6:c8:91:fe:00:bc:43:8d:e0:5c: 31:30:bd:dd:c0:bb:af:d5:a1:0b:aa:d1:57:7b:7c: 42:2a:d8:d9:8a:68:2b:51:fd:b9:ff:ea:f2:2c:ef: 5a:88:df:0d:88:48:9f:dd:88:8d:c4:a1:5a:2b:d8: 8b:86:ff:17:66:8c:4d:e4:08:74:09:32:6d:2d:aa: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:17:F0:E7:C7:54:32:E8:C8:86:F5:0F:AB:8D:7F:12:5C:17:61:C7 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:3c:b9:06:93:cc:8b:96:6d:1c:dc:00:ee:a7:33:70:6e:44: 6b:57:6c:ab:5a:72:2a:42:d7:5d:31:f3:14:61:ed:de:7f:1e: 3a:4f:7b:68:21:e6:ee:09:ed:1b:e5:fb:06:60:7d:3a:9b:76: f0:d0:20:de:b5:ac:03:9b:63:d3:d4:3b:c7:57:09:4a:8e:04: a5:22:21:01:cb:eb:83:f5:62:24:f2:c7:ea:c5:0c:f8:fe:9c: 01:fd:a4:f7:6c:8c:ea:5c:8d:e4:1e:45:77:e9:f8:77:dc:85: c0:a9:a2:be:5d:95:c9:df:40:09:74:b2:0d:ee:e8:36:a5:b9: 08:94:c0:08:5f:1c:58:e9:94:3e:cf:d8:2e:7d:7e:02:71:5d: fe:bf:e9:02:5b:4a:40:20:eb:7a:1d:9f:2e:b3:de:5d:66:41: 67:40:bf:59:a4:7d:90:40:a4:fc:2f:04:15:36:6c:e9:6b:41: 92:0b:84:45:f8:f3:4d:af:f1:28:8d:d7:71:9e:80:f5:12:f7: d6:ca:dd:85:f5:aa:be:31:9d:06:85:71:63:54:1f:23:c2:ad: 40:06:80:12:66:be:2e:25:f4:65:b6:78:f3:0a:0c:18:67:f8: f0:02:1c:88:88:22:77:07:ef:98:80:b2:12:b1:ee:71:7c:82: 25:18:42:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUwODIwMTgwODIyWhcNMjUwODI3MTgwODIyWjAYMRYwFAYD VQQDEw02OGE2MGYxNi0wMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA655qvxGo8lIAmNiw4hfWrqmxilYAMvpyhXpN/83dKDXK/TUklgjw/mMk2VOv BXE3PbtcVOWDd/OdRAssagb/uuxvGlHkLIZnXp6f++Pou3q0bg6Kr1b2JPRKpqO1 /8ZEuFtVq31fIs47B/woXe2liOmhRgfneDiPIAHQ8L7tejLiSh39tx8HmOKfdBVo mleLDt9aom4bNn9YtvQHqS3MUi/zDnbUbRGPJWml25Yfmp+QbXn/DpYJMcbIkf4A vEON4FwxML3dwLuv1aELqtFXe3xCKtjZimgrUf25/+ryLO9aiN8NiEif3YiNxKFa K9iLhv8XZoxN5Ah0CTJtLarFaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoX8OfH VDLoyIb1D6uNfxJcF2HHMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGPLkGk8yLlm0c3ADupzNwbkRrV2yrWnIqQtddMfMUYe3efx46T3to IebuCe0b5fsGYH06m3bw0CDetawDm2PT1DvHVwlKjgSlIiEBy+uD9WIk8sfqxQz4 /pwB/aT3bIzqXI3kHkV36fh33IXAqaK+XZXJ30AJdLIN7ug2pbkIlMAIXxxY6ZQ+ z9gufX4CcV3+v+kCW0pAIOt6HZ8us95dZkFnQL9ZpH2QQKT8LwQVNmzpa0GSC4RF +PNNr/EojddxnoD1EvfWyt2F9aq+MZ0GhXFjVB8jwq1ABoASZr4uJfRltnjzCgwY Z/jwAhyIiCJ3B++YgLISse5xfIIlGEI/ -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client