$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json) Hash identifier: k8Ilm5pzJ4zAKewbWZW2RRppUBeWKCcvdwAh84tRsVk= Subject key identifier: 0C:3B:B3:B6:0A:EE:36:64:60:10:5F:B4:22:20:2F:7E:4C:1E:12:0C Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft Manifest number: 34AE Signing time: Wed 20 Aug 2025 14:54:35 +0000 Manifest this update: Wed 20 Aug 2025 14:54:35 +0000 Manifest next update: Wed 27 Aug 2025 14:54:35 +0000 Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: SQgOzsnbCDoSnz1Fd5JtL6OwL3lN0dGqreaRpIAdGUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 14:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Validity Not Before: Aug 20 14:54:35 2025 GMT Not After : Aug 27 14:54:35 2025 GMT Subject: CN=68a5e1ab-554d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:cf:08:8e:0b:d8:64:66:37:77:92:9a:40: 68:21:54:62:cd:9a:3b:3d:8c:20:df:a3:52:4c:f6: c7:cb:ea:c2:6e:69:d3:ac:4b:d4:19:d0:d1:3e:f3: 41:b9:74:eb:fb:94:12:66:4b:a6:3b:09:1d:28:7a: 75:5d:4b:12:cb:b1:c8:ac:57:86:f2:3e:1f:b1:76: d1:da:fc:78:bd:43:d4:4b:4a:83:29:c3:70:61:2d: f2:e2:28:39:8e:d3:0d:ab:0b:4a:73:0c:61:8a:fd: fb:79:7d:4f:95:3c:0e:d6:11:a4:4f:f9:e5:37:fb: 1c:fe:80:87:b5:c5:8c:ce:c0:74:91:e9:75:9a:df: 36:e6:63:2d:7b:79:3a:3e:be:3a:66:e5:c1:f2:f3: 9d:01:7a:61:81:d6:b0:ae:38:65:8f:83:36:67:34: 3d:cf:56:28:93:bb:f0:66:9f:94:7f:e6:d6:a9:7f: 6a:ab:ae:ae:fd:67:1e:12:5c:85:d0:9e:c1:5c:08: b0:02:44:88:0f:1c:be:1d:0f:b4:b7:31:e3:42:9e: 34:46:37:7d:ee:89:97:aa:86:0b:a3:3c:d7:a6:1d: 2b:85:52:69:fb:1d:34:6d:63:a1:2b:f2:54:10:27: 95:04:7d:3c:a2:30:ae:79:27:08:7b:29:50:8f:78: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:B3:B6:0A:EE:36:64:60:10:5F:B4:22:20:2F:7E:4C:1E:12:0C X509v3 Authority Key Identifier: keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b3:76:73:9d:a6:7c:89:0a:f0:7a:a0:b4:ae:22:f1:ab:8e: 8a:e4:1a:3a:dc:bf:a3:00:3b:e3:d3:1a:04:80:20:b1:bb:f4: 32:40:2a:f5:bf:77:09:94:8c:10:5d:9d:ac:a5:62:81:57:2d: 08:c9:b9:3f:4f:b6:2c:ad:23:60:8a:4b:1b:ba:54:dd:3f:e1: 2b:d2:5a:5e:c0:23:55:61:8c:eb:27:a4:34:24:d0:50:67:ac: 09:ad:51:fe:3b:cd:67:22:c1:dc:c0:1f:b2:ad:4a:59:ad:e7: c3:35:ae:81:3a:e3:33:08:9f:fe:6b:6c:e9:f6:44:bc:02:0a: 95:50:fa:af:97:a9:0c:a1:9c:97:26:97:3f:82:26:50:11:85: 86:04:86:e8:f6:46:d5:f5:c7:42:50:d7:30:ba:c8:19:41:68: d6:34:86:59:da:f2:33:8b:fa:72:cd:1e:fa:e1:9f:36:d4:e5: a7:21:41:f1:fd:fa:68:16:04:61:72:89:c8:1d:0d:87:11:e5: c0:9b:4e:67:8c:c9:12:05:fb:e9:79:df:e7:52:1b:49:ac:72: a0:5e:a9:65:91:6d:e2:12:b9:d4:d9:3d:0e:11:12:8c:66:25: 30:db:04:f9:fb:0d:3f:f5:3e:d5:b6:e1:d8:d6:1c:37:04:38: 0c:d9:02:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDk4NTI2QUYxOEE4M0EzMzRGNTc5OTgyQTMxNzlCNkRE MUU5N0RFMkUwHhcNMjUwODIwMTQ1NDM1WhcNMjUwODI3MTQ1NDM1WjAYMRYwFAYD VQQDEw02OGE1ZTFhYi01NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2L3PCI4L2GRmN3eSmkBoIVRizZo7PYwg36NSTPbHy+rCbmnTrEvUGdDRPvNB uXTr+5QSZkumOwkdKHp1XUsSy7HIrFeG8j4fsXbR2vx4vUPUS0qDKcNwYS3y4ig5 jtMNqwtKcwxhiv37eX1PlTwO1hGkT/nlN/sc/oCHtcWMzsB0kel1mt825mMte3k6 Pr46ZuXB8vOdAXphgdawrjhlj4M2ZzQ9z1Yok7vwZp+Uf+bWqX9qq66u/WceElyF 0J7BXAiwAkSIDxy+HQ+0tzHjQp40Rjd97omXqoYLozzXph0rhVJp+x00bWOhK/JU ECeVBH08ojCueScIeylQj3juEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw7s7YK 7jZkYBBftCIgL35MHhIMMB8GA1UdIwQYMBaAFJhSavGKg6M09XmYKjF5tt0el94u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8yNTdDRjcyNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96VDFlWmdxTVhtMjNSNlgz aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GSnE4WXFEb3pUMWVaZ3FNWG0yM1I2WDNpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8yNTdDRjcyNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96 VDFlWmdxTVhtMjNSNlgzaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBas3ZznaZ8iQrweqC0riLxq46K5Bo63L+jADvj0xoEgCCxu/QyQCr1 v3cJlIwQXZ2spWKBVy0Iybk/T7YsrSNgiksbulTdP+Er0lpewCNVYYzrJ6Q0JNBQ Z6wJrVH+O81nIsHcwB+yrUpZrefDNa6BOuMzCJ/+a2zp9kS8AgqVUPqvl6kMoZyX Jpc/giZQEYWGBIbo9kbV9cdCUNcwusgZQWjWNIZZ2vIzi/pyzR764Z821OWnIUHx /fpoFgRhconIHQ2HEeXAm05njMkSBfvped/nUhtJrHKgXqllkW3iErnU2T0OERKM ZiUw2wT5+w0/9T7VtuHY1hw3BDgM2QLD -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client