$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: es5+5Uf7gIt4ClhLeZJrr8CyzlVq6e0LufqAmrZvjQU= Subject key identifier: 15:81:E8:23:D0:3C:3F:93:DA:E5:1E:78:0C:30:CD:1A:50:99:6F:E1 Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 1A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 2567 Signing time: Sun 24 Aug 2025 16:18:38 +0000 Manifest this update: Sun 24 Aug 2025 16:18:38 +0000 Manifest next update: Sun 31 Aug 2025 16:18:38 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: FR6wxB/RLkPqwEH9w1ozHIeEUn8Ait/rOHVdHDU6hl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6801 (0x1a91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: Aug 24 16:18:38 2025 GMT Not After : Aug 31 16:18:38 2025 GMT Subject: CN=68ab3b5e-0966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:70:8a:c5:dc:4e:39:d7:a4:0f:a5:a7:c9: 6a:36:0d:ca:18:a4:2d:16:3c:88:d5:dc:ce:74:bf: cf:7b:6a:75:8d:74:39:bd:ae:72:6d:69:fb:eb:13: c4:78:89:77:f1:93:67:66:ce:37:26:51:c3:51:3c: 15:4a:5c:ff:22:1c:0e:a9:a1:df:27:d5:b6:7b:5a: 7b:c6:24:3c:a5:3f:bb:f8:52:bb:d9:99:63:62:0c: 30:59:52:8d:82:92:0e:37:fd:86:02:ae:48:1f:66: c5:15:82:62:3d:cc:7e:7c:a8:05:6e:04:da:66:2d: 9c:2c:15:78:37:f0:83:e1:dd:9e:91:dc:b4:37:a4: ed:57:0a:08:9d:6d:7a:41:aa:69:ff:ce:94:74:3b: 9b:ab:c0:8b:a5:2b:1c:ef:61:96:74:18:01:c6:5b: 29:05:b8:89:4c:4e:73:7e:f7:b7:89:fd:24:92:7f: 0c:37:36:0c:b9:38:8e:ab:c7:17:4c:2f:ca:07:a3: 37:a1:26:c8:70:99:69:69:c4:59:b6:b8:e9:82:31: 4f:c2:dc:69:b2:ce:33:56:12:dd:20:bc:dc:40:76: dc:06:eb:da:15:a9:f0:2b:b2:4a:b5:b3:5b:dd:dc: 3b:5b:e5:aa:4d:12:5c:1b:26:95:7b:3e:45:cd:07: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:81:E8:23:D0:3C:3F:93:DA:E5:1E:78:0C:30:CD:1A:50:99:6F:E1 X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b5:ca:12:64:a8:1e:f0:bc:49:f8:b2:2c:c3:16:e5:1d:f0: b7:f4:07:d2:5f:ce:bc:2b:ba:39:19:cb:8f:8d:d8:49:df:22: 67:c3:d9:c5:8f:db:08:6a:d2:17:48:f7:cf:c3:04:50:c6:84: b4:79:2e:70:54:e1:7c:01:4a:9c:79:cf:af:0f:96:25:cd:cc: a6:a5:1c:dc:37:01:ee:db:f8:fb:d0:09:fe:0e:e9:04:40:cd: 53:a1:fb:a4:87:ed:c1:70:99:70:42:52:9d:c2:fa:60:28:e7: 87:2d:54:f5:27:0f:5d:f0:a3:66:ec:52:93:1b:d9:63:a9:80: 02:5f:4f:b8:65:db:44:b9:52:74:44:9b:70:8f:3b:61:f2:ed: 75:33:3b:aa:db:41:68:b3:7b:89:ca:73:3e:07:c7:3b:96:4c: 91:09:88:28:89:17:72:4e:b0:28:2a:6d:7e:af:2e:f7:95:6d: 43:32:04:fe:7c:fa:14:ed:b9:94:d0:de:e8:93:bd:fe:25:a8: 88:2f:f7:3b:0b:7d:6f:ab:a0:87:37:ec:50:90:7a:06:d2:82: b4:fb:3e:48:66:0a:7f:c5:6d:15:00:77:48:57:cc:b5:38:9d: 35:84:27:8c:52:1c:6e:ea:6a:e1:f8:22:5d:2b:c3:e3:5c:77: 41:ea:72:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjUwODI0MTYxODM4WhcNMjUwODMxMTYxODM4WjAYMRYwFAYD VQQDEw02OGFiM2I1ZS0wOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqURwisXcTjnXpA+lp8lqNg3KGKQtFjyI1dzOdL/Pe2p1jXQ5va5ybWn76xPE eIl38ZNnZs43JlHDUTwVSlz/IhwOqaHfJ9W2e1p7xiQ8pT+7+FK72ZljYgwwWVKN gpION/2GAq5IH2bFFYJiPcx+fKgFbgTaZi2cLBV4N/CD4d2ekdy0N6TtVwoInW16 Qapp/86UdDubq8CLpSsc72GWdBgBxlspBbiJTE5zfve3if0kkn8MNzYMuTiOq8cX TC/KB6M3oSbIcJlpacRZtrjpgjFPwtxpss4zVhLdILzcQHbcBuvaFanwK7JKtbNb 3dw7W+WqTRJcGyaVez5FzQc8rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWB6CPQ PD+T2uUeeAwwzRpQmW/hMB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgtcoSZKge8LxJ+LIswxblHfC39AfSX868K7o5GcuPjdhJ3yJnw9nF j9sIatIXSPfPwwRQxoS0eS5wVOF8AUqcec+vD5YlzcympRzcNwHu2/j70An+DukE QM1Tofukh+3BcJlwQlKdwvpgKOeHLVT1Jw9d8KNm7FKTG9ljqYACX0+4ZdtEuVJ0 RJtwjzth8u11Mzuq20Fos3uJynM+B8c7lkyRCYgoiRdyTrAoKm1+ry73lW1DMgT+ fPoU7bmU0N7ok73+JaiIL/c7C31vq6CHN+xQkHoG0oK0+z5IZgp/xW0VAHdIV8y1 OJ01hCeMUhxu6mrh+CJdK8PjXHdB6nI2 -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:44 2025 by rpki-client