$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: HaejQ9G2Q1HnkSidBtv11IsxWh/JlTUEH8Yw9V6PXAU= Subject key identifier: 89:8F:7E:A4:6E:38:9E:3F:75:87:FE:88:CD:FF:FD:91:39:F1:8D:0F Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34B3 Signing time: Sun 24 Aug 2025 14:35:36 +0000 Manifest this update: Sun 24 Aug 2025 14:35:35 +0000 Manifest next update: Sun 31 Aug 2025 14:35:35 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: XdNvPSwUl0KAL8FHjZ2OP+UOZOTtN0OS86idoaHWQRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Aug 24 14:35:35 2025 GMT Not After : Aug 31 14:35:35 2025 GMT Subject: CN=68ab2337-acd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:69:75:70:2b:c7:43:93:47:1f:33:a0:a5: 31:7f:ef:e4:b0:a8:4b:34:b3:3c:c2:8e:20:86:be: 6e:21:58:13:f0:68:7b:91:8a:16:20:3a:37:4c:23: a4:8b:4b:14:6b:e1:f2:27:04:cd:5b:3c:6d:71:2e: f2:d2:67:ed:87:fc:c3:c3:01:81:a3:e3:23:91:db: c2:7e:a9:45:49:f5:7a:67:5f:e6:ae:6b:a7:51:fe: 01:cc:f1:0b:58:66:91:02:61:ec:9a:07:71:a9:b6: 99:92:d3:38:01:f4:94:36:f6:fc:d4:38:dc:fb:16: f0:86:52:58:b5:9d:02:51:33:53:18:52:2b:b6:d6: dc:40:75:e0:8c:ac:df:02:07:37:47:b9:c9:08:24: 50:2f:cf:52:62:83:8d:4d:65:45:ef:4f:c4:c9:5e: 9a:55:bc:17:b2:55:be:d6:ba:bf:4e:18:ef:f9:5b: 3e:f3:4d:0f:60:08:30:e4:56:00:22:0b:a7:72:14: 59:6c:39:b4:61:fd:9a:20:89:d9:d0:cf:cb:1b:69: 9f:7f:06:fc:04:65:7b:23:9c:62:b3:09:b1:ea:b4: a8:6c:f5:a7:57:b6:c2:41:ad:1d:bc:fc:13:7b:e2: a0:6f:c8:00:f6:9b:2a:4c:c9:25:b1:d8:5b:9c:f9: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8F:7E:A4:6E:38:9E:3F:75:87:FE:88:CD:FF:FD:91:39:F1:8D:0F X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8f:bc:9a:24:96:99:b9:27:ae:cf:6c:53:bb:de:64:c2:55: 92:72:14:e4:a9:f5:2b:e3:21:52:18:77:55:bb:00:db:11:f2: c6:5e:74:bf:83:db:e9:99:07:b7:59:40:c5:9d:de:5a:32:c5: 49:c1:ac:3b:e5:af:a6:1c:ca:54:54:8d:0a:3a:54:7c:99:76: f3:25:3d:a9:b0:27:55:50:7c:12:14:de:59:85:e0:a5:be:d9: f5:62:47:07:93:97:2d:47:5f:05:db:bf:9e:64:fc:e4:cc:d8: f5:d3:d9:4f:62:70:7e:6d:19:f2:7c:13:f1:a7:9c:7c:e3:62: 2f:81:ce:76:b7:db:95:bc:f7:dc:a1:cd:53:f3:69:31:82:dc: 78:7c:4f:54:ef:ef:c8:ec:4b:93:1d:e4:eb:48:8f:b1:6c:aa: 7d:75:da:75:50:af:5f:26:ab:c5:65:7b:9d:03:b4:a0:80:d0: e7:ce:b0:2a:97:70:76:66:40:99:15:44:90:a0:f5:e1:1a:14: 8d:5f:bf:8d:ac:15:46:1b:42:63:89:0d:d8:00:bb:65:08:f4: fb:3e:b4:0b:15:7b:96:5a:96:29:f8:0d:fd:03:63:64:10:7a: dd:96:68:58:09:3c:6d:5f:72:81:35:92:62:cd:46:5f:db:9e: 9e:f4:6b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUwODI0MTQzNTM1WhcNMjUwODMxMTQzNTM1WjAYMRYwFAYD VQQDEw02OGFiMjMzNy1hY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMdpdXArx0OTRx8zoKUxf+/ksKhLNLM8wo4ghr5uIVgT8Gh7kYoWIDo3TCOk i0sUa+HyJwTNWzxtcS7y0mfth/zDwwGBo+MjkdvCfqlFSfV6Z1/mrmunUf4BzPEL WGaRAmHsmgdxqbaZktM4AfSUNvb81Djc+xbwhlJYtZ0CUTNTGFIrttbcQHXgjKzf Agc3R7nJCCRQL89SYoONTWVF70/EyV6aVbwXslW+1rq/Thjv+Vs+800PYAgw5FYA IgunchRZbDm0Yf2aIInZ0M/LG2mffwb8BGV7I5xiswmx6rSobPWnV7bCQa0dvPwT e+Kgb8gA9psqTMklsdhbnPkL+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImPfqRu OJ4/dYf+iM3//ZE58Y0PMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkj7yaJJaZuSeuz2xTu95kwlWSchTkqfUr4yFSGHdVuwDbEfLGXnS/ g9vpmQe3WUDFnd5aMsVJwaw75a+mHMpUVI0KOlR8mXbzJT2psCdVUHwSFN5ZheCl vtn1YkcHk5ctR18F27+eZPzkzNj109lPYnB+bRnyfBPxp5x842Ivgc52t9uVvPfc oc1T82kxgtx4fE9U7+/I7EuTHeTrSI+xbKp9ddp1UK9fJqvFZXudA7SggNDnzrAq l3B2ZkCZFUSQoPXhGhSNX7+NrBVGG0JjiQ3YALtlCPT7PrQLFXuWWpYp+A39A2Nk EHrdlmhYCTxtX3KBNZJizUZf256e9Gte -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:07 2025 by rpki-client