$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: Ul2E0OYRE/30nsUdHYztjb8BiHnocfYf8X4EmOwPhCc= Subject key identifier: 77:C8:E3:24:69:93:D0:5D:09:F4:80:58:60:02:E1:D3:B7:46:C9:40 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 0160 Signing time: Mon 21 Jul 2025 04:02:15 +0000 Manifest this update: Mon 21 Jul 2025 04:02:14 +0000 Manifest next update: Mon 28 Jul 2025 04:02:14 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: 0Fy8IGdq98E+mxgqr5l/X+WvZ2D/vn1jkQqCWsq2IYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Jul 21 04:02:14 2025 GMT Not After : Jul 28 04:02:14 2025 GMT Subject: CN=687dbbc7-80eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:9c:02:d3:02:c8:df:60:4b:6b:5c:58:05: 7c:22:88:59:16:2b:a6:50:0f:44:56:e8:7e:36:1b: 49:53:10:9c:9c:6d:da:b8:8e:06:27:13:84:14:c4: ca:8e:8e:60:3d:ad:9e:fc:cd:62:6d:52:df:a5:7d: ec:42:0f:74:2d:ab:6a:3b:75:99:bd:67:f2:f1:4e: f5:1f:44:a7:f6:79:ff:be:ac:67:83:9f:2b:61:62: 69:85:d6:bc:a6:b9:f6:e7:15:b4:57:12:c9:bd:e3: d0:35:2a:3a:f5:17:b0:ad:b3:f3:c4:8f:7a:87:2e: 5d:d9:22:be:d9:37:76:c0:0b:5f:97:eb:cb:b2:5c: cb:6d:b1:d5:d5:e9:0c:0d:31:7d:9d:af:94:df:09: 01:47:8e:f7:9c:95:c0:bf:16:76:55:2f:29:89:36: 1f:1a:1e:a2:bb:e4:3e:b6:47:6f:f2:45:26:c0:e9: c4:84:8e:10:41:42:64:d5:80:84:c4:6e:7d:bd:a7: 7b:76:97:6e:53:6f:49:03:a8:0c:c2:61:c0:f8:95: f4:7a:fd:f5:18:e6:29:e8:10:86:9f:8e:12:82:c1: 7a:28:17:aa:26:6a:5f:ae:66:22:7a:f5:ec:04:7c: 20:59:1a:eb:7a:1b:aa:f4:84:9d:c6:3c:ec:8f:3a: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:E3:24:69:93:D0:5D:09:F4:80:58:60:02:E1:D3:B7:46:C9:40 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0f:9c:e2:28:62:1b:77:72:cd:46:00:fb:52:0c:21:33:13: 5b:46:1f:ea:4e:03:61:a9:c0:d7:9e:af:34:86:0d:4c:2d:89: f9:53:61:73:06:69:6b:a1:21:a8:0d:f8:85:e6:05:51:ac:8a: 5b:f7:63:bf:cb:9e:5c:6f:df:3a:0b:65:35:e5:f4:c3:20:75: 84:6a:73:af:25:fa:cf:93:39:18:7b:00:c3:9d:30:12:22:ea: 9d:2f:e3:6e:6b:15:d3:a5:06:ac:32:d9:db:d5:b5:01:16:e1: 9e:c0:9a:22:c4:9a:f6:05:b2:9f:c1:b4:e0:f8:87:d7:af:16: 15:4a:91:e0:b5:d2:a2:4b:ab:e6:e8:12:3d:19:bb:5d:3d:bf: 67:18:7e:d5:1a:df:54:38:71:0d:e6:59:f8:7a:67:9c:40:4f: 37:dc:cf:d5:e5:9a:0e:41:7f:8a:a9:08:4c:36:70:12:36:9f: 72:c9:e9:ca:91:86:5d:e5:97:c2:ff:d2:13:44:c6:e5:4c:c6: d4:19:22:63:16:05:32:d4:6a:a4:79:76:88:df:8e:93:bc:2f: 65:67:32:2e:f0:c6:62:be:2f:56:49:d3:f2:54:19:a8:df:a6: 53:a0:83:b6:9d:b4:60:c2:03:42:9e:f4:57:c9:c5:c1:34:3d: df:5d:ce:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUwNzIxMDQwMjE0WhcNMjUwNzI4MDQwMjE0WjAYMRYwFAYD VQQDEw02ODdkYmJjNy04MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiWcAtMCyN9gS2tcWAV8IohZFiumUA9EVuh+NhtJUxCcnG3auI4GJxOEFMTK jo5gPa2e/M1ibVLfpX3sQg90LatqO3WZvWfy8U71H0Sn9nn/vqxng58rYWJphda8 prn25xW0VxLJvePQNSo69RewrbPzxI96hy5d2SK+2Td2wAtfl+vLslzLbbHV1ekM DTF9na+U3wkBR473nJXAvxZ2VS8piTYfGh6iu+Q+tkdv8kUmwOnEhI4QQUJk1YCE xG59vad7dpduU29JA6gMwmHA+JX0ev31GOYp6BCGn44SgsF6KBeqJmpfrmYievXs BHwgWRrrehuq9ISdxjzsjzr+BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfI4yRp k9BdCfSAWGAC4dO3RslAMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfD5ziKGIbd3LNRgD7UgwhMxNbRh/qTgNhqcDXnq80hg1MLYn5U2Fz BmlroSGoDfiF5gVRrIpb92O/y55cb986C2U15fTDIHWEanOvJfrPkzkYewDDnTAS IuqdL+NuaxXTpQasMtnb1bUBFuGewJoixJr2BbKfwbTg+IfXrxYVSpHgtdKiS6vm 6BI9GbtdPb9nGH7VGt9UOHEN5ln4emecQE833M/V5ZoOQX+KqQhMNnASNp9yyenK kYZd5ZfC/9ITRMblTMbUGSJjFgUy1GqkeXaI346TvC9lZzIu8MZivi9WSdPyVBmo 36ZToIO2nbRgwgNCnvRXycXBND3fXc52 -----END CERTIFICATE-----Generated at Mon Jul 21 07:06:53 2025 by rpki-client