$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: XV0cjKXc2T2jwWHXoWblG/iKGNj5XIVTuYzUj3htH7A= Subject key identifier: 11:21:07:3C:64:83:16:99:EC:3A:39:08:B7:CA:50:A0:14:9E:FF:17 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 7B Signing time: Wed 17 Sep 2025 07:28:38 +0000 Manifest this update: Wed 17 Sep 2025 07:28:38 +0000 Manifest next update: Wed 24 Sep 2025 07:28:38 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: 5RYdD+GkpkbQER94qojzuG4nMqPH0WXdh1peSnO79bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Sep 17 07:28:38 2025 GMT Not After : Sep 24 07:28:38 2025 GMT Subject: CN=68ca6326-b361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:31:4d:be:15:83:83:32:2c:7b:74:b1:9a: 94:5c:07:63:3b:f1:76:b1:13:03:4f:9a:e4:35:d1: a2:f7:ad:d4:53:11:58:f3:d8:68:70:03:de:34:4a: e3:82:24:dc:00:ef:6b:19:73:50:5e:fc:a3:f8:ff: aa:49:ae:7d:08:8e:4c:07:51:9b:23:d0:2e:45:08: fa:6b:f8:4c:70:f1:da:1d:a5:b0:a6:18:f6:ad:b8: 53:0b:64:ba:40:0f:e5:02:4e:5d:fb:41:b9:62:db: cd:dd:7a:0a:00:de:36:fb:9b:64:2c:6e:cd:03:e8: 5a:b6:85:6e:c2:e8:15:2b:60:1e:0b:23:81:08:e3: ac:7b:9c:c1:b0:01:6c:38:e0:01:9f:c2:ac:6d:3b: 6b:76:c1:8c:69:12:dd:87:cb:79:5a:e4:e7:82:d4: 3d:09:00:a3:14:a1:99:36:bf:35:8f:5e:f3:78:7f: 01:03:5e:5a:fe:25:19:57:cd:87:69:ac:2d:aa:51: 2b:0a:4a:6f:01:89:9b:04:76:f5:9f:0a:2e:81:af: 83:51:71:52:f3:5a:ec:6b:b6:21:15:68:c2:44:1c: 17:ce:49:77:f4:06:fd:09:1a:eb:93:fe:b2:0e:44: ba:a5:d8:02:e3:88:f6:b2:95:74:3a:23:91:f5:51: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:21:07:3C:64:83:16:99:EC:3A:39:08:B7:CA:50:A0:14:9E:FF:17 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3d:f4:8d:e1:cb:54:e6:46:a1:5f:1d:8d:cb:38:c5:e5:53: 9b:23:af:92:6c:67:1c:85:6e:1d:10:6d:42:9c:21:b1:39:5c: f5:56:56:ac:e8:4a:0f:51:f8:2f:87:13:36:bd:0b:c0:02:a4: 36:c4:b0:2e:8e:2c:6d:df:07:de:f0:ca:44:5e:22:fa:d8:96: 73:ff:07:4a:78:ab:dd:c6:24:45:2f:bd:ad:45:5d:f6:5b:86: 38:d2:09:2b:63:f1:34:94:87:8f:b1:c7:2d:86:c1:ac:f1:4a: 37:ec:b4:b2:b1:ed:d9:38:11:bd:9b:74:d0:f3:f8:7f:f1:f0: 51:58:3d:d8:40:6c:84:b4:da:05:da:5f:1b:1e:4d:2a:17:02: 20:ff:2a:db:13:12:e9:0d:39:fb:4d:a6:6d:cf:a5:e5:40:db: f3:93:87:03:d5:4f:5f:27:b4:96:e2:4a:a1:dd:9c:aa:c2:b1: 9d:11:36:6c:f6:e7:0f:12:3c:22:16:00:05:a2:d7:e7:65:5b: 3f:ec:56:17:11:f0:f8:eb:3b:ea:be:6d:44:67:e5:3c:e3:01: a9:51:c9:ba:91:74:23:f1:0b:08:3f:e8:d8:95:b1:72:e8:a7: 3e:37:dc:05:2a:11:7d:da:3a:1a:2f:1b:d6:5f:ea:98:2d:70: bf:76:a6:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA5MTcwNzI4MzhaFw0yNTA5MjQwNzI4MzhaMBgxFjAUBgNV BAMTDTY4Y2E2MzI2LWIzNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR+TFNvhWDgzIse3SxmpRcB2M78XaxEwNPmuQ10aL3rdRTEVjz2GhwA940SuOC JNwA72sZc1Be/KP4/6pJrn0IjkwHUZsj0C5FCPpr+Exw8dodpbCmGPatuFMLZLpA D+UCTl37Qbli283degoA3jb7m2Qsbs0D6Fq2hW7C6BUrYB4LI4EI46x7nMGwAWw4 4AGfwqxtO2t2wYxpEt2Hy3la5OeC1D0JAKMUoZk2vzWPXvN4fwEDXlr+JRlXzYdp rC2qUSsKSm8BiZsEdvWfCi6Br4NRcVLzWuxrtiEVaMJEHBfOSXf0Bv0JGuuT/rIO RLql2ALjiPaylXQ6I5H1UZkPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUESEHPGSD FpnsOjkIt8pQoBSe/xcwHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACI99I3hy1TmRqFfHY3LOMXlU5sjr5JsZxyFbh0QbUKcIbE5XPVWVqzo Sg9R+C+HEza9C8ACpDbEsC6OLG3fB97wykReIvrYlnP/B0p4q93GJEUvva1FXfZb hjjSCStj8TSUh4+xxy2GwazxSjfstLKx7dk4Eb2bdNDz+H/x8FFYPdhAbIS02gXa XxseTSoXAiD/KtsTEukNOftNpm3PpeVA2/OThwPVT18ntJbiSqHdnKrCsZ0RNmz2 5w8SPCIWAAWi1+dlWz/sVhcR8PjrO+q+bURn5TzjAalRybqRdCPxCwg/6NiVsXLo pz433AUqEX3aOhovG9Zf6pgtcL92pu0= -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:47 2025 by rpki-client