$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: NlLBzGkTPmyMyk6C4USyKOYpBce1BB5AYFe/ajqszek= Subject key identifier: B9:E8:09:CD:1C:40:C8:42:AE:63:F4:ED:27:D6:83:51:E7:F4:CF:67 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0C75 Signing time: Sun 20 Jul 2025 19:31:43 +0000 Manifest this update: Sun 20 Jul 2025 19:31:42 +0000 Manifest next update: Sun 27 Jul 2025 19:31:42 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: ddEVa7ywfJvAcvQnaylXzZHGkbgN2L24dsrhu8ZNv58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Jul 20 19:31:42 2025 GMT Not After : Jul 27 19:31:42 2025 GMT Subject: CN=687d441f-3f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:9a:77:b2:26:9d:9f:fb:4d:25:bb:e9:2d: ed:fd:c1:a1:3a:69:ba:50:ae:02:29:93:e9:ee:7c: fd:ba:e6:13:cb:ad:f0:ee:e3:b3:41:1a:d9:b5:eb: 32:47:82:26:8b:8c:c5:40:e4:de:ef:c3:14:49:f4: e7:0f:36:bf:22:e7:d8:4c:0a:29:c2:e0:97:5f:e7: b4:04:2e:fd:35:96:8e:81:0d:8f:26:fd:f5:81:3b: 09:55:7c:69:8e:4b:6f:bf:20:68:95:6a:59:dd:34: af:f5:b5:ae:83:92:9e:04:ca:b4:ae:ab:25:c6:3a: d0:bc:9c:7a:3f:3a:00:06:c1:07:45:fa:8c:4e:43: 80:c7:05:a8:04:5a:fb:4c:97:ee:f1:8b:1e:7e:1c: b5:65:d5:59:78:ca:db:a4:1d:b1:74:1e:ef:cc:d2: 84:f6:ba:93:be:4b:bc:11:a6:c9:64:1d:5b:6f:61: 3b:a2:37:c6:5e:b1:3f:73:74:55:0c:53:20:ef:de: 6a:28:9b:6e:3d:b9:c6:fb:be:f7:f2:ab:6c:cf:0a: 52:10:39:60:f1:60:84:35:09:58:43:5e:e1:67:d0: 28:fd:34:9a:08:a9:ab:0c:9a:6f:c8:c9:ad:eb:b9: a6:ad:42:cb:bb:82:66:9e:cf:f0:df:26:ac:50:48: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:09:CD:1C:40:C8:42:AE:63:F4:ED:27:D6:83:51:E7:F4:CF:67 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:82:6e:3e:0e:df:e9:9f:12:97:05:91:a5:40:61:d6:02:ff: 5b:01:a6:39:c7:6a:56:60:b2:60:7a:88:6b:f6:a4:8a:8a:0e: cf:db:57:e9:bd:82:9e:bf:65:51:5a:0c:b1:2b:64:9a:e2:47: f9:69:67:cb:68:64:b0:4e:41:3e:b8:ca:4c:34:ee:4c:3b:f0: 78:61:d4:56:e6:2e:d5:09:c7:9f:b2:46:29:c0:ba:8c:22:2f: 7b:ae:e0:58:57:54:8d:97:8a:a9:c7:29:27:9a:be:e3:b3:88: be:8c:05:72:4a:66:30:e7:ee:46:ff:b9:75:79:20:a3:c5:5e: 40:5d:96:4a:39:9b:69:15:2f:9f:02:e9:db:b1:d1:45:81:19: e7:ed:a9:5f:26:f6:70:3d:5c:cb:49:8d:6b:80:0a:67:78:b9: 4f:d1:c8:e4:0b:be:71:05:a2:d4:12:8d:f2:21:49:9a:1d:c2: 8a:12:e6:83:f5:5a:c2:6d:50:bf:c1:f3:6d:f1:e5:87:23:07: b6:d6:0c:ce:12:10:4b:ec:61:3f:57:46:25:b4:3d:09:31:1d: ba:75:53:c9:b4:24:f8:10:d0:3a:63:37:b3:46:0e:1e:5b:89: 9d:6a:c3:db:c3:9d:1a:11:ed:a4:f0:15:a6:82:f3:c2:fb:94: 83:6b:c2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUwNzIwMTkzMTQyWhcNMjUwNzI3MTkzMTQyWjAYMRYwFAYD VQQDEw02ODdkNDQxZi0zZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ6ad7ImnZ/7TSW76S3t/cGhOmm6UK4CKZPp7nz9uuYTy63w7uOzQRrZtesy R4Imi4zFQOTe78MUSfTnDza/IufYTAopwuCXX+e0BC79NZaOgQ2PJv31gTsJVXxp jktvvyBolWpZ3TSv9bWug5KeBMq0rqslxjrQvJx6PzoABsEHRfqMTkOAxwWoBFr7 TJfu8Ysefhy1ZdVZeMrbpB2xdB7vzNKE9rqTvku8EabJZB1bb2E7ojfGXrE/c3RV DFMg795qKJtuPbnG+7738qtszwpSEDlg8WCENQlYQ17hZ9Ao/TSaCKmrDJpvyMmt 67mmrULLu4Jmns/w3yasUEi9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnoCc0c QMhCrmP07SfWg1Hn9M9nMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpgm4+Dt/pnxKXBZGlQGHWAv9bAaY5x2pWYLJgeohr9qSKig7P21fp vYKev2VRWgyxK2Sa4kf5aWfLaGSwTkE+uMpMNO5MO/B4YdRW5i7VCcefskYpwLqM Ii97ruBYV1SNl4qpxyknmr7js4i+jAVySmYw5+5G/7l1eSCjxV5AXZZKOZtpFS+f AunbsdFFgRnn7alfJvZwPVzLSY1rgApneLlP0cjkC75xBaLUEo3yIUmaHcKKEuaD 9VrCbVC/wfNt8eWHIwe21gzOEhBL7GE/V0YltD0JMR26dVPJtCT4ENA6YzezRg4e W4mdasPbw50aEe2k8BWmgvPC+5SDa8IL -----END CERTIFICATE-----Generated at Mon Jul 21 23:48:55 2025 by rpki-client