$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json) Hash identifier: 1Rs2N6U+1isEq8OFmgB+tuy6YILJWPKWpVfnihPdTfw= Subject key identifier: 46:6D:C7:74:62:90:A0:83:73:9F:6A:E1:0A:E1:A1:74:11:96:97:BA Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19 Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19 Certificate serial: 172A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft Manifest number: 207E Signing time: Sun 20 Jul 2025 16:38:44 +0000 Manifest this update: Sun 20 Jul 2025 16:38:43 +0000 Manifest next update: Sun 27 Jul 2025 16:38:43 +0000 Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: rzkqsT+AOXebgkH13wddr66948HKqxRurKcQyVoosEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5930 (0x172a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19 Validity Not Before: Jul 20 16:38:43 2025 GMT Not After : Jul 27 16:38:43 2025 GMT Subject: CN=687d1b94-1c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:ef:26:73:88:31:10:f7:3e:8b:a4:39:65: 5b:c9:9e:56:df:8a:8b:1f:05:3f:9a:0a:3b:f1:43: e8:33:f3:3d:c6:5f:b6:98:f9:59:a5:a1:fa:d0:93: e8:4b:1d:1d:e1:3c:65:7c:41:f9:18:f0:42:12:ac: 37:14:a0:6c:7c:32:5f:89:4f:b1:7a:38:a4:a1:f6: f4:c1:f8:a0:51:e7:f5:94:a9:92:14:f2:ad:ff:dd: bf:40:8c:4b:b0:c8:65:c4:4b:2b:a5:bc:6a:31:f0: 5d:e0:6e:93:ff:72:eb:fa:e1:56:8d:e8:22:a9:07: fb:24:fb:87:a7:cf:09:1f:a2:ab:74:99:2e:93:5a: f8:9a:17:bf:b7:fb:0e:33:3d:7c:85:fa:f5:79:0d: 20:c9:09:ed:5a:cb:07:29:f7:06:b1:4e:f0:a9:e5: b5:11:78:1c:8d:ae:3d:51:5c:61:de:c9:ff:b2:56: 3a:77:8d:72:77:14:b7:9d:55:07:d8:ee:98:8c:96: 93:96:b7:77:00:51:01:bf:f0:64:a3:47:7b:88:c9: d4:9d:05:2d:81:42:33:90:e5:52:35:a0:de:80:27: d6:0e:8e:0e:43:47:8f:54:7e:1e:3f:ef:b8:f7:80: c8:2b:1a:a4:d4:61:4b:35:81:ba:d1:a6:e4:61:f5: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6D:C7:74:62:90:A0:83:73:9F:6A:E1:0A:E1:A1:74:11:96:97:BA X509v3 Authority Key Identifier: keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:f6:bd:03:11:e6:bc:33:7b:4e:d0:9f:37:52:fa:4f:db: d6:63:6f:bf:24:94:b6:64:c4:d3:4a:e4:ff:53:b6:27:e3:b1: 20:8a:bc:71:ee:c0:36:f7:c6:62:db:c8:bc:c7:63:c6:9b:d7: cd:8b:8b:43:f6:c6:34:63:27:39:12:e2:b0:8a:c3:bf:ee:df: af:be:cb:ad:02:dc:78:b6:a3:03:2c:f8:01:91:64:b8:f8:b7: c6:1b:e7:bf:71:bf:e4:f6:1f:19:13:fc:ab:1f:ed:6e:8f:4f: 60:67:e4:1f:f0:71:e7:4b:c4:07:7c:9f:b7:ed:60:b3:c6:6e: 4c:e7:73:54:1b:8d:49:c4:de:8e:ba:30:85:fb:3b:d0:07:41: 75:61:e3:aa:ef:84:65:0d:a0:15:42:79:e5:08:b8:b6:69:37: 3a:55:90:9d:1e:f6:24:62:85:39:f5:3e:57:77:cd:59:03:64: 54:3d:4e:15:c2:6b:77:ae:9e:f9:ed:f2:c0:2d:d5:79:61:7d: 01:d6:b5:30:ca:0f:dd:70:9c:d1:27:eb:73:cd:e7:17:44:bc: 4a:30:6f:91:66:94:13:e2:a5:ff:1b:0f:d2:32:ca:0e:9d:d6: d9:1c:5f:a8:40:1a:af:a6:c7:78:53:7f:b8:7b:58:9e:b9:58: 3e:89:99:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKDZCRDZDOENFODgyMTkwQzgxNjlFODEzNjQ1RTBFREQ5 Qjc1N0VCMTkwHhcNMjUwNzIwMTYzODQzWhcNMjUwNzI3MTYzODQzWjAYMRYwFAYD VQQDEw02ODdkMWI5NC0xYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMvvJnOIMRD3PoukOWVbyZ5W34qLHwU/mgo78UPoM/M9xl+2mPlZpaH60JPo Sx0d4TxlfEH5GPBCEqw3FKBsfDJfiU+xejikofb0wfigUef1lKmSFPKt/92/QIxL sMhlxEsrpbxqMfBd4G6T/3Lr+uFWjegiqQf7JPuHp88JH6KrdJkuk1r4mhe/t/sO Mz18hfr1eQ0gyQntWssHKfcGsU7wqeW1EXgcja49UVxh3sn/slY6d41ydxS3nVUH 2O6YjJaTlrd3AFEBv/Bko0d7iMnUnQUtgUIzkOVSNaDegCfWDo4OQ0ePVH4eP++4 94DIKxqk1GFLNYG60abkYfU8SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZtx3Ri kKCDc59q4QrhoXQRlpe6MB8GA1UdIwQYMBaAFGvWyM6IIZDIFp6BNkXg7dm3V+sZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9hOWJJem9naGtNZ1dub0UyUmVEdDJiZFg2 eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5Ykl6b2doa01nV25vRTJSZUR0MmJkWDZ4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9hOWJJem9naGtN Z1dub0UyUmVEdDJiZFg2eGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfMva9AxHmvDN7TtCfN1L6T9vWY2+/JJS2ZMTTSuT/U7Yn47Egirxx 7sA298Zi28i8x2PGm9fNi4tD9sY0Yyc5EuKwisO/7t+vvsutAtx4tqMDLPgBkWS4 +LfGG+e/cb/k9h8ZE/yrH+1uj09gZ+Qf8HHnS8QHfJ+37WCzxm5M53NUG41JxN6O ujCF+zvQB0F1YeOq74RlDaAVQnnlCLi2aTc6VZCdHvYkYoU59T5Xd81ZA2RUPU4V wmt3rp757fLALdV5YX0B1rUwyg/dcJzRJ+tzzecXRLxKMG+RZpQT4qX/Gw/SMsoO ndbZHF+oQBqvpsd4U3+4e1ieuVg+iZkO -----END CERTIFICATE-----Generated at Mon Jul 21 23:50:39 2025 by rpki-client