$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: iHlwl6qweFW1qBvy58bQM+ckdQ+Ppt/ewbt334V1e4E= Subject key identifier: 48:30:9A:61:5B:BB:B8:44:75:7A:ED:AD:3C:50:5B:A8:8A:34:1E:2E Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 07DD Signing time: Thu 04 Sep 2025 21:21:51 +0000 Manifest this update: Thu 04 Sep 2025 21:21:50 +0000 Manifest next update: Thu 11 Sep 2025 21:21:50 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: fg3KVPegGWAKmIcaJ3+7Nz+KXQONekljBeSWhkHj9SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Sep 4 21:21:50 2025 GMT Not After : Sep 11 21:21:50 2025 GMT Subject: CN=68ba02ee-3c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:cc:5b:33:84:27:10:25:90:b6:4d:c7:96: 24:94:2d:65:f8:cc:75:7c:15:ea:f5:3f:45:83:b7: 57:72:fe:6f:ba:8a:e7:32:75:77:6f:83:c4:30:50: fa:2a:c6:f1:08:ed:a9:eb:d8:73:e7:f8:69:b5:a2: d1:d0:97:81:ca:87:8d:02:f4:1f:94:cb:0d:28:1c: 53:b8:c1:1e:e2:ad:e2:6b:f2:eb:07:db:45:bb:40: 5c:5a:67:90:39:18:c8:59:4c:ff:9b:ec:db:90:2b: a6:e4:91:08:fd:16:af:a6:80:b8:e2:e5:36:dd:68: ef:b8:21:2a:a7:e2:19:14:7a:25:d2:a4:8e:d2:05: 1e:d8:9c:19:f7:4b:17:2e:01:e4:fc:93:b1:dc:54: d1:fb:d0:7c:da:e3:d0:b6:b3:7e:49:28:b6:f4:47: 0e:ff:da:eb:d7:2b:9f:8f:39:ec:8a:93:2a:ba:c0: bd:c6:14:04:29:be:93:75:c1:5c:b8:32:0c:4f:10: c8:5a:de:4e:2b:7b:3e:e0:b0:eb:f5:25:30:fd:d0: 2c:83:33:67:82:13:ed:42:f0:20:f7:82:e7:2a:59: c8:69:33:7a:74:6e:28:8c:5c:f7:12:79:56:d2:47: 82:97:c0:c4:8b:33:81:79:37:af:90:4b:b8:43:a6: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:30:9A:61:5B:BB:B8:44:75:7A:ED:AD:3C:50:5B:A8:8A:34:1E:2E X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b7:e7:13:9f:8c:db:91:d9:38:ed:8a:b0:c2:a3:87:16:08: f3:d2:b6:65:df:27:c3:9a:02:e0:ff:bb:b7:65:30:b0:9e:32: c9:e3:f4:1a:22:45:3f:71:72:13:96:f6:30:12:78:06:d9:c4: f0:5a:3e:75:d8:e9:3f:b2:97:6a:a2:41:13:bc:ca:ec:f7:3b: 44:e3:22:5e:aa:36:c5:4c:c6:78:fd:4e:3f:5c:5a:bc:35:33: 22:0f:dc:c7:0f:05:10:eb:81:b1:ce:74:ae:e2:b3:c4:a4:b4: f6:80:d5:87:06:84:05:90:31:7d:da:0e:36:81:ad:1f:ef:8e: 6d:d7:26:59:72:bc:85:43:35:25:a7:2a:f6:1d:f5:b8:f0:79: e9:64:fb:3e:65:dc:99:38:ca:c4:b1:ec:fc:7d:cb:2d:d1:fc: 46:ef:e4:70:95:56:6a:33:c1:02:77:25:a0:3d:1f:ce:d8:34: 55:0f:0b:6e:cd:99:84:81:b8:d9:aa:89:1f:66:d7:9a:8a:05: 36:7e:7b:e9:ac:c8:8c:6b:c0:21:bf:af:7a:af:86:de:41:78: 2c:4b:89:5a:4b:f0:4a:c4:71:32:ec:95:66:69:5f:4b:9f:6c: 37:b0:0b:ce:9b:0a:b0:f0:83:89:9d:38:7b:59:68:39:d8:0a: d2:d1:7e:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwOTA0MjEyMTUwWhcNMjUwOTExMjEyMTUwWjAYMRYwFAYD VQQDEw02OGJhMDJlZS0zYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9zMWzOEJxAlkLZNx5YklC1l+Mx1fBXq9T9Fg7dXcv5vuornMnV3b4PEMFD6 KsbxCO2p69hz5/hptaLR0JeByoeNAvQflMsNKBxTuMEe4q3ia/LrB9tFu0BcWmeQ ORjIWUz/m+zbkCum5JEI/RavpoC44uU23WjvuCEqp+IZFHol0qSO0gUe2JwZ90sX LgHk/JOx3FTR+9B82uPQtrN+SSi29EcO/9rr1yufjznsipMqusC9xhQEKb6TdcFc uDIMTxDIWt5OK3s+4LDr9SUw/dAsgzNnghPtQvAg94LnKlnIaTN6dG4ojFz3EnlW 0keCl8DEizOBeTevkEu4Q6a0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgwmmFb u7hEdXrtrTxQW6iKNB4uMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYt+cTn4zbkdk47YqwwqOHFgjz0rZl3yfDmgLg/7u3ZTCwnjLJ4/Qa IkU/cXITlvYwEngG2cTwWj512Ok/spdqokETvMrs9ztE4yJeqjbFTMZ4/U4/XFq8 NTMiD9zHDwUQ64GxznSu4rPEpLT2gNWHBoQFkDF92g42ga0f745t1yZZcryFQzUl pyr2HfW48HnpZPs+ZdyZOMrEsez8fcst0fxG7+RwlVZqM8ECdyWgPR/O2DRVDwtu zZmEgbjZqokfZteaigU2fnvprMiMa8Ahv696r4beQXgsS4laS/BKxHEy7JVmaV9L n2w3sAvOmwqw8IOJnTh7WWg52ArS0X66 -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:29 2025 by rpki-client