$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: zqMCO9atesOBh3Id15q7w2TuyPzlgNTA9W2o44QTOxI= Subject key identifier: 21:4D:CB:F8:B5:F2:20:76:8A:65:A7:9F:D7:E9:32:0D:DB:BC:AD:A0 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 34C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 34BD Signing time: Wed 20 Aug 2025 14:59:52 +0000 Manifest this update: Wed 20 Aug 2025 14:59:52 +0000 Manifest next update: Wed 27 Aug 2025 14:59:52 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: IlmrsbFrBqOrt69qaCjZfk5vykebbrFjlP2FjAGKeEI=) 2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 14:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13513 (0x34c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Aug 20 14:59:52 2025 GMT Not After : Aug 27 14:59:52 2025 GMT Subject: CN=68a5e2e8-dd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:f7:7a:8b:79:69:5b:b3:fe:6f:1b:67:1d: db:d4:06:d0:21:be:86:17:10:b5:0f:74:16:f7:a9: 84:e5:a9:f2:bd:a4:0e:c3:ae:4f:0b:6a:d1:11:a4: 04:69:3e:80:4c:f6:6e:e2:93:75:31:6f:c8:2d:0f: 13:2b:96:6d:19:f8:a5:40:dc:c0:1d:ab:c6:d1:be: d1:30:9c:e7:37:4c:85:9c:27:07:c3:54:22:d1:1a: 79:31:d8:db:e5:3b:14:59:14:4b:63:d2:16:e2:82: 16:20:7f:38:56:d4:45:6a:5b:7a:14:ed:7f:73:bb: f0:99:b3:e8:2b:be:a3:29:91:49:bf:c9:01:c7:f5: 17:bb:c1:c9:9f:0b:47:66:0b:99:98:1c:1e:9c:09: 12:36:e0:44:e4:ed:ff:06:b2:24:18:3b:7a:06:02: 0f:21:44:ca:19:e2:03:3b:e4:15:99:43:2c:cb:1d: d6:92:53:35:9e:db:5a:a9:35:99:1b:15:88:b3:17: 24:b6:e2:32:4d:1b:64:25:aa:d6:8d:d6:38:37:76: 04:4f:68:5b:2e:68:e4:5a:4d:47:f1:36:11:27:5c: 39:81:9a:a4:9b:8b:f1:00:32:63:cc:f2:f0:86:40: 80:0b:b3:d7:19:91:fa:20:57:24:ad:78:a0:8a:e2: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4D:CB:F8:B5:F2:20:76:8A:65:A7:9F:D7:E9:32:0D:DB:BC:AD:A0 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2b:91:7a:75:78:09:dd:7c:db:57:a5:d3:8e:40:67:e5:55: 02:83:eb:6e:c5:9e:41:f4:3c:5d:f2:7d:63:00:ea:c3:d1:be: 66:7d:8a:ad:76:29:5c:43:46:fb:74:9c:15:13:da:b8:b3:99: 8e:73:aa:20:2b:f3:00:46:52:fc:d0:72:91:7b:20:33:54:c0: 0f:83:ad:fa:2d:79:a9:e9:29:cb:37:3c:d6:e3:48:80:2c:16: 7f:0e:55:31:ea:e6:ae:64:7b:b4:0c:e0:32:95:8d:7b:a1:17: 3c:17:61:7f:56:d3:12:49:ed:74:de:38:7d:1e:75:1f:4e:d2: 37:81:71:7a:7d:70:2a:48:98:fa:5b:d2:33:fb:dc:00:1e:1f: 1b:01:17:3b:67:ec:2d:17:de:f3:c5:22:6d:9f:e8:17:18:0f: 15:8e:1a:b9:28:d1:5c:25:94:60:30:26:1e:af:33:5d:08:4a: 84:09:4c:04:53:d9:b8:2e:b8:3e:a1:00:27:38:71:1c:43:d1: e7:6d:f1:c6:d1:0d:3b:10:64:8b:76:44:ea:79:2b:76:9b:60: b1:f6:4b:ba:b0:9c:fe:24:1a:b4:01:75:11:f1:72:e7:92:72: 93:77:03:cc:37:71:e0:ad:ca:85:f7:3d:da:22:dd:f2:26:26: 50:39:36:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwODIwMTQ1OTUyWhcNMjUwODI3MTQ1OTUyWjAYMRYwFAYD VQQDEw02OGE1ZTJlOC1kZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsw/3eot5aVuz/m8bZx3b1AbQIb6GFxC1D3QW96mE5anyvaQOw65PC2rREaQE aT6ATPZu4pN1MW/ILQ8TK5ZtGfilQNzAHavG0b7RMJznN0yFnCcHw1Qi0Rp5Mdjb 5TsUWRRLY9IW4oIWIH84VtRFalt6FO1/c7vwmbPoK76jKZFJv8kBx/UXu8HJnwtH ZguZmBwenAkSNuBE5O3/BrIkGDt6BgIPIUTKGeIDO+QVmUMsyx3WklM1nttaqTWZ GxWIsxcktuIyTRtkJarWjdY4N3YET2hbLmjkWk1H8TYRJ1w5gZqkm4vxADJjzPLw hkCAC7PXGZH6IFckrXigiuIwtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFNy/i1 8iB2imWnn9fpMg3bvK2gMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiK5F6dXgJ3XzbV6XTjkBn5VUCg+tuxZ5B9Dxd8n1jAOrD0b5mfYqt dilcQ0b7dJwVE9q4s5mOc6ogK/MARlL80HKReyAzVMAPg636LXmp6SnLNzzW40iA LBZ/DlUx6uauZHu0DOAylY17oRc8F2F/VtMSSe103jh9HnUfTtI3gXF6fXAqSJj6 W9Iz+9wAHh8bARc7Z+wtF97zxSJtn+gXGA8Vjhq5KNFcJZRgMCYerzNdCEqECUwE U9m4Lrg+oQAnOHEcQ9HnbfHG0Q07EGSLdkTqeSt2m2Cx9ku6sJz+JBq0AXUR8XLn knKTdwPMN3HgrcqF9z3aIt3yJiZQOTY9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:13 2025 by rpki-client