$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: /GM7i/UsFW9UFHZDov4sQOkWlDetSdj7KxzteGOlOFk= Subject key identifier: 94:4C:70:0F:CC:3A:AE:40:47:4E:88:9B:F4:55:E9:8F:F7:AC:9A:72 Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 07E1 Signing time: Wed 20 Aug 2025 21:07:27 +0000 Manifest this update: Wed 20 Aug 2025 21:07:26 +0000 Manifest next update: Wed 27 Aug 2025 21:07:26 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: Vei4zH5gYQdyO5Xj012j9uZl5hmaYjqXTwb+7wv9QoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: Aug 20 21:07:26 2025 GMT Not After : Aug 27 21:07:26 2025 GMT Subject: CN=68a6390e-ee8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:34:9b:39:81:d3:5c:56:68:d1:e5:c2:1e:a5: d5:08:4e:54:f9:00:cf:fa:80:85:8a:3a:b7:92:0a: f0:51:95:47:b8:80:94:82:a1:47:09:37:3a:04:a1: c1:ef:75:6e:09:31:20:0c:49:6f:3a:ea:f4:ac:fe: 64:3a:9e:c7:33:94:12:1d:5e:04:a1:e2:e3:13:5c: c4:fe:9a:5d:7f:5d:0d:3e:78:67:d7:93:5f:cb:bc: 5b:63:96:10:5d:b8:2d:0e:2c:d2:99:68:a4:1c:35: ff:c5:f2:28:85:73:90:d1:7e:17:ea:4d:5b:d0:67: d4:13:61:be:be:87:83:74:5f:d1:b2:ed:58:b8:13: 04:3a:ba:2d:bd:a1:12:7d:85:be:93:c1:67:04:55: c1:f3:ea:d8:f9:8e:c4:92:01:c0:f4:0f:ff:43:5e: d0:cd:2a:90:ef:57:80:33:45:76:77:95:68:29:21: b4:79:ae:59:9f:95:09:38:29:8d:75:5d:8e:12:42: dc:35:9f:92:df:c4:a8:b9:b9:39:3d:68:a2:80:c5: 38:02:1c:82:1d:61:11:0b:11:84:19:ab:48:6e:e4: ac:21:7c:33:37:0e:ac:69:b9:e5:c6:38:c3:f6:c3: 58:a3:ae:fc:47:87:df:9a:c9:34:a7:2c:14:cd:a7: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4C:70:0F:CC:3A:AE:40:47:4E:88:9B:F4:55:E9:8F:F7:AC:9A:72 X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8c:ad:76:59:35:77:15:f7:26:e2:79:c6:56:ee:57:56:de: 30:3a:df:36:35:11:46:8d:f0:d4:b2:ed:6a:9f:c6:e3:ee:41: 2c:a9:2b:61:1a:31:d5:6a:db:c1:04:f7:f9:82:ab:55:d1:4f: 0f:2c:26:de:d0:59:d5:3d:0f:d6:69:b5:55:35:cf:d2:46:ea: 35:05:07:95:b0:54:6a:58:79:06:1a:2e:e8:d0:0a:a9:91:03: eb:0b:fd:f4:ff:fa:4a:2b:4d:7a:33:71:77:6b:70:20:1a:1f: 94:94:ee:99:56:4d:ce:05:d1:7e:f9:50:0c:be:a2:f8:eb:5f: 9a:cb:73:10:8d:23:e0:54:0e:56:d3:48:a8:2c:5d:38:d1:2d: 83:3c:d7:c9:a5:6e:4f:99:6a:8a:47:9a:e2:ea:8a:13:31:e7: c5:b4:03:bb:cb:18:b1:82:1f:0b:c6:93:3b:90:29:01:25:c1: 71:55:4d:7e:a2:09:a1:da:26:29:64:10:15:13:76:c1:3d:91: f9:d2:a1:24:fd:8f:ea:36:b2:60:40:69:63:3a:5d:0f:01:0e: dd:05:e5:e2:66:af:51:86:bb:24:05:68:e1:78:16:d9:3b:56: 2d:d0:98:fc:77:fe:c4:e6:5f:bc:ff:c9:7b:b4:fa:fc:0f:24: 98:1a:f7:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjUwODIwMjEwNzI2WhcNMjUwODI3MjEwNzI2WjAYMRYwFAYD VQQDEw02OGE2MzkwZS1lZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zSbOYHTXFZo0eXCHqXVCE5U+QDP+oCFijq3kgrwUZVHuICUgqFHCTc6BKHB 73VuCTEgDElvOur0rP5kOp7HM5QSHV4EoeLjE1zE/ppdf10NPnhn15Nfy7xbY5YQ XbgtDizSmWikHDX/xfIohXOQ0X4X6k1b0GfUE2G+voeDdF/Rsu1YuBMEOrotvaES fYW+k8FnBFXB8+rY+Y7EkgHA9A//Q17QzSqQ71eAM0V2d5VoKSG0ea5Zn5UJOCmN dV2OEkLcNZ+S38Soubk5PWiigMU4AhyCHWERCxGEGatIbuSsIXwzNw6sabnlxjjD 9sNYo678R4ffmsk0pywUzafSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRMcA/M Oq5AR06Im/RV6Y/3rJpyMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjK12WTV3Ffcm4nnGVu5XVt4wOt82NRFGjfDUsu1qn8bj7kEsqSth GjHVatvBBPf5gqtV0U8PLCbe0FnVPQ/WabVVNc/SRuo1BQeVsFRqWHkGGi7o0Aqp kQPrC/30//pKK016M3F3a3AgGh+UlO6ZVk3OBdF++VAMvqL461+ay3MQjSPgVA5W 00ioLF040S2DPNfJpW5PmWqKR5ri6ooTMefFtAO7yxixgh8LxpM7kCkBJcFxVU1+ ogmh2iYpZBAVE3bBPZH50qEk/Y/qNrJgQGljOl0PAQ7dBeXiZq9RhrskBWjheBbZ O1Yt0Jj8d/7E5l+8/8l7tPr8DySYGvek -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:13 2025 by rpki-client