$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: FFhKXgIIM0G6qePZcdQ8pLlPsyADc9RabJxEEJxVHeQ= Subject key identifier: 70:CD:FB:78:96:51:E2:09:1F:BF:A8:A4:02:EF:E0:45:40:7F:06:73 Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 18C7 Signing time: Thu 18 Sep 2025 17:44:40 +0000 Manifest this update: Thu 18 Sep 2025 17:44:39 +0000 Manifest next update: Thu 25 Sep 2025 17:44:39 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: lLuV2YBDWqJQY24rLHIRtWg2ak/kAf0FpY/Y62dP8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Sep 18 17:44:39 2025 GMT Not After : Sep 25 17:44:39 2025 GMT Subject: CN=68cc4507-175e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:a4:55:58:06:be:31:f2:fc:fe:50:13:b5: 83:d5:fa:e1:84:7e:27:99:0e:1f:44:f5:f2:62:19: e2:95:b1:5f:e6:e8:7a:9e:d5:fc:eb:25:bf:fd:78: 11:1c:64:c3:ef:b7:a6:e5:58:50:7f:2e:09:d4:bd: 97:5d:4d:16:c4:c7:13:29:ce:08:20:1b:95:ee:a5: d2:c8:e6:26:5a:87:38:83:0c:8b:ba:d5:df:7a:79: 25:6a:59:a2:65:75:82:10:5d:8c:11:a6:17:d2:0d: c9:4e:8b:7a:f9:9f:59:71:da:65:06:b6:cd:46:e0: 80:06:d8:6e:1f:50:cb:41:24:f1:6e:42:d2:2e:32: 75:05:b6:a0:d2:2d:36:ed:76:83:2b:a3:a8:ec:5b: c3:81:94:1a:dd:ac:cf:40:84:31:63:2c:4a:de:90: 77:a0:40:c2:a0:87:f0:cf:82:3e:47:40:25:3a:1e: c2:4d:aa:73:ec:67:25:71:75:0b:af:a2:a9:67:bf: 10:4f:2f:a5:81:ee:3a:88:be:97:46:fb:93:a2:94: a4:a5:8a:2b:bf:bf:26:20:d5:85:af:47:9d:ce:1e: 4d:81:bd:c6:21:42:f5:6f:8f:3f:e5:62:90:ba:23: da:58:05:c9:f2:18:3d:42:eb:27:5c:75:99:7b:54: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CD:FB:78:96:51:E2:09:1F:BF:A8:A4:02:EF:E0:45:40:7F:06:73 X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:df:64:85:17:54:c7:6d:3f:80:3f:99:a7:dc:00:f9:2f:09: 12:fb:55:8e:65:5a:ac:7f:11:f2:06:23:a9:3e:50:2f:c4:79: 34:fd:6d:3c:0c:7e:b0:ad:03:86:cc:47:98:6b:21:d5:4a:e2: fd:43:a3:1d:63:c9:8f:c0:9f:ee:9d:db:83:2e:5b:20:8c:13: 2d:40:ca:ec:93:e1:13:eb:4f:29:55:69:da:48:18:3c:24:9c: 70:b3:32:a6:48:ba:7b:bf:ec:c5:42:92:be:3e:d2:ad:c6:94: 39:50:49:98:0c:24:ed:b8:19:7e:b4:b2:6b:83:e1:c5:44:63: 28:3d:5e:85:73:54:1c:b3:32:d3:12:8b:22:b3:41:db:65:fe: 51:2d:3a:f3:f8:13:d3:d8:4c:87:32:a6:c8:14:87:fd:dc:36: 7f:40:43:08:39:47:1b:22:0d:90:c3:17:46:7c:66:c2:11:68: 66:3a:0a:69:01:3c:81:fc:c0:c3:3b:5b:46:cc:07:64:f5:15: 55:68:2d:76:6d:8e:0b:ba:a8:f7:bc:3d:57:57:de:31:ff:16: 0d:dc:8b:41:eb:81:1c:67:ab:de:0c:1b:a5:44:11:ed:36:d1: 24:2a:33:46:aa:04:07:74:cc:9b:ed:07:cb:9e:f0:8a:ad:a5: e3:47:d7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUwOTE4MTc0NDM5WhcNMjUwOTI1MTc0NDM5WjAYMRYwFAYD VQQDEw02OGNjNDUwNy0xNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1CkVVgGvjHy/P5QE7WD1frhhH4nmQ4fRPXyYhnilbFf5uh6ntX86yW//XgR HGTD77em5VhQfy4J1L2XXU0WxMcTKc4IIBuV7qXSyOYmWoc4gwyLutXfenklalmi ZXWCEF2MEaYX0g3JTot6+Z9ZcdplBrbNRuCABthuH1DLQSTxbkLSLjJ1Bbag0i02 7XaDK6Oo7FvDgZQa3azPQIQxYyxK3pB3oEDCoIfwz4I+R0AlOh7CTapz7GclcXUL r6KpZ78QTy+lge46iL6XRvuTopSkpYorv78mINWFr0edzh5Ngb3GIUL1b48/5WKQ uiPaWAXJ8hg9QusnXHWZe1SYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDN+3iW UeIJH7+opALv4EVAfwZzMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB32SFF1THbT+AP5mn3AD5LwkS+1WOZVqsfxHyBiOpPlAvxHk0/W08 DH6wrQOGzEeYayHVSuL9Q6MdY8mPwJ/unduDLlsgjBMtQMrsk+ET608pVWnaSBg8 JJxwszKmSLp7v+zFQpK+PtKtxpQ5UEmYDCTtuBl+tLJrg+HFRGMoPV6Fc1QcszLT Eosis0HbZf5RLTrz+BPT2EyHMqbIFIf93DZ/QEMIOUcbIg2QwxdGfGbCEWhmOgpp ATyB/MDDO1tGzAdk9RVVaC12bY4Luqj3vD1XV94x/xYN3ItB64EcZ6veDBulRBHt NtEkKjNGqgQHdMyb7QfLnvCKraXjR9cP -----END CERTIFICATE-----Generated at Fri Sep 19 02:42:16 2025 by rpki-client