$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: KODOg98x8o/6d7WUz60m19fH5mRvhu0GZWPrr+t/MQQ= Subject key identifier: 61:2D:37:7D:AD:D2:62:12:32:F8:F3:21:8D:25:24:84:9B:A7:A5:26 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 1315 Signing time: Sun 20 Jul 2025 18:38:59 +0000 Manifest this update: Sun 20 Jul 2025 18:38:58 +0000 Manifest next update: Sun 27 Jul 2025 18:38:58 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: YmuFOWuKcQpZ/hPhy8o3klpIzOt4t9CSascTxWdRD+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Jul 20 18:38:58 2025 GMT Not After : Jul 27 18:38:58 2025 GMT Subject: CN=687d37c3-c40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:a0:8c:bd:b9:fe:d8:14:72:f9:39:ae:76: bd:e0:22:44:35:66:7b:d2:9c:b9:1a:c6:90:ac:60: c9:69:5a:35:7b:f3:27:d6:99:74:65:f4:1f:37:be: 38:25:3a:9e:6a:6a:81:b0:2b:7e:1a:e8:cd:f5:94: 85:0c:30:b4:55:b9:c0:5d:ad:8a:53:08:70:84:75: 00:ec:5f:62:00:3d:32:da:97:6b:fd:75:a2:ab:e4: 32:06:9a:5d:73:99:62:68:22:7b:e1:90:9a:76:0f: e7:24:05:b2:d1:28:7a:d8:73:92:35:35:c7:dc:f1: 60:59:66:35:aa:a3:1a:28:99:8b:56:5a:de:c1:c3: c3:3e:38:48:8d:64:1f:35:b3:42:ea:31:3b:de:78: 78:4b:0b:c6:a1:0b:78:a1:5a:68:33:3d:7c:8b:b0: 90:0f:11:59:b7:7a:8e:ec:4c:a4:32:68:36:3f:2d: 77:f8:ca:d9:3a:85:dc:c6:85:e4:15:2a:bb:77:a9: d5:c4:7e:5a:a8:15:48:e7:77:b3:e0:d1:7d:a4:67: 91:49:7d:d7:b7:46:40:e9:fe:eb:db:9c:69:e8:17: a5:13:f2:47:b9:17:02:95:ab:14:1f:36:d1:0c:f1: 0c:b4:37:8e:4f:b9:24:16:a3:19:9c:f1:e8:e4:bc: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2D:37:7D:AD:D2:62:12:32:F8:F3:21:8D:25:24:84:9B:A7:A5:26 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:65:28:db:32:43:a7:ac:6f:89:25:10:14:f0:c6:d6:73:98: f6:fd:59:21:be:fd:8b:3d:1f:eb:64:5f:f0:0e:f1:76:1a:b0: f4:81:69:45:bd:3b:28:76:1e:75:3a:6a:6e:9d:51:18:48:0a: 16:3b:45:e3:f6:37:d0:91:8d:c5:7e:fe:83:53:c3:c3:7d:b0: e8:e8:15:7a:fc:f1:ad:fc:e7:a9:7c:1a:74:0f:e4:50:a8:aa: b2:32:d9:bc:52:f7:90:da:78:db:ca:98:5d:24:6b:44:00:03: d8:32:d3:2b:34:d4:d1:28:d1:73:64:f8:e9:b3:64:a9:99:c6: b1:b8:d5:89:cd:43:cd:53:a3:33:06:b3:79:db:1b:f0:23:8f: a4:fc:54:12:c9:20:56:52:4f:3f:12:45:ea:92:9f:33:15:7f: 09:a7:6a:11:ec:5b:50:c1:e2:44:32:4a:a2:66:31:9a:e4:b7: f7:ec:75:cc:a6:3b:81:3a:fa:95:89:76:db:7f:0c:00:84:9d: 62:11:ae:d1:f3:3d:48:6c:a4:a8:9d:45:ff:f4:18:94:91:23: 37:d2:97:27:e7:0a:ef:c9:c9:66:fe:89:15:60:e4:5c:96:67: e6:c3:f1:1c:0a:42:f6:ac:53:91:41:45:cf:6e:c0:04:c6:fa: 42:9b:7c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUwNzIwMTgzODU4WhcNMjUwNzI3MTgzODU4WjAYMRYwFAYD VQQDEw02ODdkMzdjMy1jNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3KgjL25/tgUcvk5rna94CJENWZ70py5GsaQrGDJaVo1e/Mn1pl0ZfQfN744 JTqeamqBsCt+GujN9ZSFDDC0VbnAXa2KUwhwhHUA7F9iAD0y2pdr/XWiq+QyBppd c5liaCJ74ZCadg/nJAWy0Sh62HOSNTXH3PFgWWY1qqMaKJmLVlrewcPDPjhIjWQf NbNC6jE73nh4SwvGoQt4oVpoMz18i7CQDxFZt3qO7EykMmg2Py13+MrZOoXcxoXk FSq7d6nVxH5aqBVI53ez4NF9pGeRSX3Xt0ZA6f7r25xp6BelE/JHuRcClasUHzbR DPEMtDeOT7kkFqMZnPHo5LxTZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEtN32t 0mISMvjzIY0lJISbp6UmMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGZSjbMkOnrG+JJRAU8MbWc5j2/Vkhvv2LPR/rZF/wDvF2GrD0gWlF vTsodh51OmpunVEYSAoWO0Xj9jfQkY3Ffv6DU8PDfbDo6BV6/PGt/OepfBp0D+RQ qKqyMtm8UveQ2njbyphdJGtEAAPYMtMrNNTRKNFzZPjps2SpmcaxuNWJzUPNU6Mz BrN52xvwI4+k/FQSySBWUk8/EkXqkp8zFX8Jp2oR7FtQweJEMkqiZjGa5Lf37HXM pjuBOvqViXbbfwwAhJ1iEa7R8z1IbKSonUX/9BiUkSM30pcn5wrvyclm/okVYORc lmfmw/EcCkL2rFORQUXPbsAExvpCm3yN -----END CERTIFICATE-----Generated at Mon Jul 21 06:52:36 2025 by rpki-client