$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: RVtxe+4zSwiLKO/dU1MtCcKbEKfvFHSUl9gORtbwMRQ= Subject key identifier: BA:82:5F:1A:EC:75:1B:ED:8C:3D:FA:C5:11:DD:6B:9E:85:74:C7:AB Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B61 Signing time: Thu 18 Sep 2025 16:23:15 +0000 Manifest this update: Thu 18 Sep 2025 16:23:15 +0000 Manifest next update: Thu 25 Sep 2025 16:23:15 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: rkjqp6n0d+Zamn6oqq2Wv1vXqMUY3AshHzQjQm423GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7010 (0x1b62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Sep 18 16:23:15 2025 GMT Not After : Sep 25 16:23:15 2025 GMT Subject: CN=68cc31f3-75fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:f5:de:ef:3a:b7:25:5f:f4:32:b0:25:b4: c8:ac:f5:5d:2e:02:80:ed:5e:b8:72:c4:dd:fd:ae: c6:7a:b1:ef:b4:69:1d:e3:7e:7e:ce:0a:67:d3:a6: 91:00:24:b4:7c:29:35:e3:4a:0f:e0:53:28:fe:ae: 72:3b:32:d2:26:80:d6:bc:08:12:67:f8:aa:66:63: c9:1b:73:70:46:09:30:8d:07:c4:53:84:6e:24:a1: ba:9e:36:8e:43:fb:d3:06:39:da:7d:0d:72:2f:f3: 55:fd:9d:55:e7:e6:9c:63:8f:eb:6b:94:25:ad:63: b3:a8:ce:80:50:fe:df:da:2a:ab:18:f1:46:95:2e: a3:e5:49:59:d5:1d:00:06:76:f8:59:6e:83:30:1d: 9e:33:ee:15:f5:26:b7:95:b1:bb:9f:6b:d9:d9:98: ac:0b:8b:2c:be:a0:b2:79:d2:e2:48:70:e5:a7:53: a0:e0:28:d7:d0:78:d1:ba:90:4b:4d:34:c8:fa:10: 85:86:7c:02:e5:b4:ac:75:80:ee:ce:f4:b4:2f:8e: cf:3d:00:29:56:8e:8f:5c:7d:0d:3c:5c:7c:11:c0: da:1a:2e:11:a7:9a:c7:42:d7:33:d1:b2:dc:f5:29: c8:67:16:55:2e:92:a9:60:2f:4c:b3:14:72:ae:4b: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:82:5F:1A:EC:75:1B:ED:8C:3D:FA:C5:11:DD:6B:9E:85:74:C7:AB X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:35:3f:63:b0:29:a5:cf:bf:be:11:f1:39:d6:b4:f4:2c:e9: 18:8b:ca:61:84:2c:ee:1a:2d:e0:87:31:82:30:66:68:17:db: b4:75:7e:6a:bb:72:7e:6b:6e:cb:93:df:9b:22:ad:38:34:4e: 07:46:b0:15:f2:22:63:46:65:8f:dd:b7:45:7a:c5:39:4c:c9: 24:25:fa:81:b9:49:8e:bd:34:38:7d:8a:f8:34:99:3d:f9:f7: cb:f2:ef:75:f9:fa:cb:9f:7d:d4:a1:a3:7c:b2:7c:95:ac:75: b8:bc:69:f4:f6:ac:5a:1a:41:45:97:01:53:02:59:55:72:88: a6:76:6a:21:36:61:85:11:5c:5f:e6:57:02:72:02:18:d1:f7: c1:06:83:45:61:13:ae:f5:29:1d:53:fc:29:bd:08:03:09:aa: 1a:86:52:39:21:35:27:55:05:90:36:fd:2d:3f:65:a5:19:1d: 02:4d:26:5b:34:07:30:bb:21:55:59:ef:45:19:6b:ad:92:07: c3:b9:97:ac:cf:91:dd:8a:44:c8:61:4f:59:e9:11:96:55:3b: 46:e1:ea:e5:31:b7:14:89:11:c0:7d:c8:0f:26:66:c7:94:c1: 1f:a2:b9:51:ff:70:a4:52:f3:5c:f6:7f:f0:cd:55:33:23:58: 35:ff:d2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUwOTE4MTYyMzE1WhcNMjUwOTI1MTYyMzE1WjAYMRYwFAYD VQQDEw02OGNjMzFmMy03NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJb13u86tyVf9DKwJbTIrPVdLgKA7V64csTd/a7GerHvtGkd435+zgpn06aR ACS0fCk140oP4FMo/q5yOzLSJoDWvAgSZ/iqZmPJG3NwRgkwjQfEU4RuJKG6njaO Q/vTBjnafQ1yL/NV/Z1V5+acY4/ra5QlrWOzqM6AUP7f2iqrGPFGlS6j5UlZ1R0A Bnb4WW6DMB2eM+4V9Sa3lbG7n2vZ2ZisC4ssvqCyedLiSHDlp1Og4CjX0HjRupBL TTTI+hCFhnwC5bSsdYDuzvS0L47PPQApVo6PXH0NPFx8EcDaGi4Rp5rHQtcz0bLc 9SnIZxZVLpKpYC9MsxRyrku2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqCXxrs dRvtjD36xRHda56FdMerMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2NT9jsCmlz7++EfE51rT0LOkYi8phhCzuGi3ghzGCMGZoF9u0dX5q u3J+a27Lk9+bIq04NE4HRrAV8iJjRmWP3bdFesU5TMkkJfqBuUmOvTQ4fYr4NJk9 +ffL8u91+frLn33UoaN8snyVrHW4vGn09qxaGkFFlwFTAllVcoimdmohNmGFEVxf 5lcCcgIY0ffBBoNFYROu9SkdU/wpvQgDCaoahlI5ITUnVQWQNv0tP2WlGR0CTSZb NAcwuyFVWe9FGWutkgfDuZesz5HdikTIYU9Z6RGWVTtG4erlMbcUiRHAfcgPJmbH lMEforlR/3CkUvNc9n/wzVUzI1g1/9KV -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:32 2025 by rpki-client