$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: zI1oSkUsBgBljf9A1l9V+7X6+nFFdKLC4eHZwG0H6C8= Subject key identifier: 31:F3:B4:79:26:E8:40:1B:36:15:27:3E:F8:2D:BC:BA:4C:BB:5A:E8 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0CA3 Signing time: Wed 20 Aug 2025 18:39:31 +0000 Manifest this update: Wed 20 Aug 2025 18:39:31 +0000 Manifest next update: Wed 27 Aug 2025 18:39:31 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: YXErgLGLYtz8BpP1rZ1nWstxXpIfQ6HjcFIePU6yifE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Aug 20 18:39:31 2025 GMT Not After : Aug 27 18:39:31 2025 GMT Subject: CN=68a61663-5ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:b9:f5:62:6d:f0:bd:03:b3:b0:6c:6a:c8: 49:b3:ab:39:88:c7:30:23:13:02:56:4f:66:e9:25: 3a:02:2a:6f:96:6e:00:3f:a1:22:b8:6e:2d:23:1b: bb:b7:de:cd:c6:71:b4:39:8e:9a:d4:1b:06:07:af: ed:1c:9e:94:fb:9a:77:00:b5:a9:25:d8:35:b5:73: be:77:e6:63:5d:13:61:92:be:09:0c:7d:6d:74:29: 9e:83:d9:c6:39:07:8f:e8:be:c5:74:03:45:3d:e8: 83:f3:d4:af:86:be:b2:39:93:4c:41:94:f3:e7:f4: d5:c9:c9:d9:ec:36:3e:ab:c1:94:25:09:d8:87:71: 61:a6:a5:ae:60:d5:1d:f7:e7:b8:bb:86:32:a4:a3: bf:14:83:d2:1b:d4:44:78:a4:e6:32:67:16:6d:14: 00:0a:a2:6e:57:9d:f5:a6:54:a6:3a:91:08:5d:72: 01:62:60:56:39:79:2b:4f:1e:6c:b2:ae:dd:3f:f9: 93:2d:3d:50:63:af:db:4d:de:ae:b0:5e:ef:5b:95: b3:f3:7a:e3:73:2f:1a:0f:86:fb:45:23:37:36:e5: 5c:ff:23:b5:f6:e4:04:ab:d4:ae:76:6c:83:94:c1: 70:7e:1e:6b:84:b5:6f:6e:d5:fd:54:eb:14:6c:c5: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:B4:79:26:E8:40:1B:36:15:27:3E:F8:2D:BC:BA:4C:BB:5A:E8 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:77:8a:71:b9:e2:22:29:07:84:e3:51:72:69:74:c9:60:2f: 14:1f:0f:01:1a:a8:b3:ec:27:8b:1c:84:06:78:8e:be:74:9b: 33:5c:e7:d2:09:f7:30:f1:67:32:37:9d:0b:5c:7f:80:8b:42: e3:fa:4f:e2:89:ac:e4:00:e5:3a:20:be:73:ad:b2:5b:7c:ae: 0b:fa:2e:2c:4f:86:3e:5e:77:f7:f4:b9:8b:cf:ec:32:a8:3c: cf:ed:9b:2c:ee:10:7d:74:c5:bc:5a:28:50:84:c5:a9:90:e9: 2a:2a:12:c1:c2:eb:05:0d:4b:64:f1:4a:f5:f4:97:17:54:4d: bc:90:85:b2:a3:f6:06:16:1d:d1:0d:4a:dd:57:94:d4:6a:01: 9d:75:d7:ee:a5:79:ec:8a:4c:19:a4:46:22:b7:99:e7:23:1d: b4:93:57:6f:1c:6f:09:74:db:02:8b:4a:40:e0:38:61:3e:69: 3c:8f:a7:4a:85:f0:71:db:e7:4a:d5:23:82:d5:c5:e6:87:0a: 83:3e:9f:a7:7c:14:29:61:f4:ac:d5:91:04:74:92:86:63:8c: 21:b2:96:00:88:dc:14:98:da:e5:ad:01:4d:83:3a:a6:2d:4d: 27:d2:62:e2:ca:63:5c:8d:d2:08:08:d4:12:02:d9:ec:37:53: b3:e6:ac:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUwODIwMTgzOTMxWhcNMjUwODI3MTgzOTMxWjAYMRYwFAYD VQQDEw02OGE2MTY2My01ZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Em59WJt8L0Ds7BsashJs6s5iMcwIxMCVk9m6SU6Aipvlm4AP6EiuG4tIxu7 t97NxnG0OY6a1BsGB6/tHJ6U+5p3ALWpJdg1tXO+d+ZjXRNhkr4JDH1tdCmeg9nG OQeP6L7FdANFPeiD89Svhr6yOZNMQZTz5/TVycnZ7DY+q8GUJQnYh3FhpqWuYNUd 9+e4u4YypKO/FIPSG9REeKTmMmcWbRQACqJuV531plSmOpEIXXIBYmBWOXkrTx5s sq7dP/mTLT1QY6/bTd6usF7vW5Wz83rjcy8aD4b7RSM3NuVc/yO19uQEq9SudmyD lMFwfh5rhLVvbtX9VOsUbMU+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHztHkm 6EAbNhUnPvgtvLpMu1roMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1d4pxueIiKQeE41FyaXTJYC8UHw8BGqiz7CeLHIQGeI6+dJszXOfS Cfcw8WcyN50LXH+Ai0Lj+k/iiazkAOU6IL5zrbJbfK4L+i4sT4Y+Xnf39LmLz+wy qDzP7Zss7hB9dMW8WihQhMWpkOkqKhLBwusFDUtk8Ur19JcXVE28kIWyo/YGFh3R DUrdV5TUagGdddfupXnsikwZpEYit5nnIx20k1dvHG8JdNsCi0pA4DhhPmk8j6dK hfBx2+dK1SOC1cXmhwqDPp+nfBQpYfSs1ZEEdJKGY4whspYAiNwUmNrlrQFNgzqm LU0n0mLiymNcjdIICNQSAtnsN1Oz5qwd -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:28 2025 by rpki-client