$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft File: sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json) Hash identifier: u6k45k+MIlurIGaQSEjjPltuC7Cu89lOwdvBxcbk3lQ= Subject key identifier: D4:39:34:DF:A8:4F:BC:5E:5D:30:A9:A4:E1:F5:44:21:A1:C9:78:60 Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 Certificate issuer: /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft Manifest number: 06F5 Signing time: Fri 22 Aug 2025 22:08:08 +0000 Manifest this update: Fri 22 Aug 2025 22:08:07 +0000 Manifest next update: Fri 29 Aug 2025 22:08:07 +0000 Files and hashes: 1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: OBYzH2L5HifoL0y3MgHz+4eqoZj1BEGd+Ih6uLHXReo=) 2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: rRipsWIPpFCqvwU6GU8CPWQ7Gw24E8Icdhb0XLzQIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F5, serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Validity Not Before: Aug 22 22:08:07 2025 GMT Not After : Aug 29 22:08:07 2025 GMT Subject: CN=68a8ea48-aad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:ca:42:54:7a:e7:80:62:a3:d4:93:1e:bf: f8:d6:b3:41:bf:d2:ec:4e:61:75:af:5a:28:ad:9c: 4d:72:bc:a0:b7:47:dc:83:33:66:18:a2:98:cf:f0: a2:ce:34:27:cf:4a:71:85:e3:a1:bb:3a:9a:0c:18: 91:40:e0:40:ff:87:26:f0:7c:d7:00:47:70:90:93: 89:4c:79:9f:4f:df:a9:a0:a1:c9:84:e1:8d:45:5b: da:87:2d:a8:be:87:f7:8b:32:60:2b:6f:eb:af:e3: e1:56:5c:61:fc:d1:16:da:b8:4a:80:0e:b5:6e:aa: ba:c8:84:62:e2:53:85:fd:e1:f8:db:3e:a0:b6:cf: 69:50:9f:84:dd:70:43:3a:ff:3e:e4:21:09:d2:17: d3:0b:7f:8e:c3:10:b7:e7:d4:b0:a5:f7:bd:ae:4b: ed:2d:9f:7d:40:81:c8:84:a3:44:89:b2:ac:7c:52: a3:96:52:ba:61:56:57:0f:de:ad:d4:f7:bf:6c:c5: cc:ee:a6:86:98:17:f5:81:18:2a:12:0a:57:02:d4: 76:01:44:24:15:23:63:1a:3a:7a:91:54:1b:db:bd: 3a:b1:c6:e1:e3:cb:b2:36:4b:b4:9a:29:2e:b9:05: 2a:1a:bc:0b:c0:13:dc:70:45:ad:cb:ee:48:0e:4e: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:34:DF:A8:4F:BC:5E:5D:30:A9:A4:E1:F5:44:21:A1:C9:78:60 X509v3 Authority Key Identifier: keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8c:e7:af:35:f9:6d:20:05:17:fb:20:e7:a4:67:a3:c6:bc: e3:d9:91:46:e2:20:ad:1b:50:6b:e5:7e:95:69:57:ef:5f:12: 43:18:6d:40:fa:db:d7:43:9b:0c:95:c3:ea:70:f0:49:b1:b2: 87:ec:8c:ba:59:32:8d:c5:34:99:d1:04:42:f3:87:32:cb:a2: 2a:51:38:bd:f1:00:6e:a3:14:c7:28:29:56:3f:81:af:8b:ee: d3:3a:86:f5:f4:9f:ad:9e:e8:3a:1c:62:ff:54:2b:f2:fc:ee: 22:c6:d4:43:65:20:be:f5:61:85:7b:ba:27:fe:7d:0b:93:81: 0e:28:32:ba:12:f5:34:af:6e:ea:7d:af:2f:b5:e0:e2:1f:38: 26:9f:82:49:9d:20:24:20:6b:9e:5c:16:60:d7:6e:b4:be:ed: 63:31:e3:82:69:f3:15:f1:dd:37:f4:d9:d4:00:f2:4f:61:49: 50:d6:61:da:52:1d:a4:12:2e:5d:aa:75:0e:1c:10:5e:25:3c: 27:c6:f6:c5:e6:56:a4:66:9b:b7:07:7b:17:cd:89:3c:52:4f: 73:fa:b4:f3:a6:98:4c:32:ac:d5:af:69:86:9a:e8:a3:98:3f: 16:db:96:bf:7a:16:7c:8f:88:bf:1f:5e:b9:26:27:71:49:de: 7a:0b:69:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjUxMTAvBgNVBAUTKEIwNkY4Mjk2NUFGRUUzQUJEQTFCM0ExRjJENjAxN0Uw MDcyNzhDRTUwHhcNMjUwODIyMjIwODA3WhcNMjUwODI5MjIwODA3WjAYMRYwFAYD VQQDEw02OGE4ZWE0OC1hYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9XKQlR654Bio9STHr/41rNBv9LsTmF1r1oorZxNcrygt0fcgzNmGKKYz/Ci zjQnz0pxheOhuzqaDBiRQOBA/4cm8HzXAEdwkJOJTHmfT9+poKHJhOGNRVvahy2o vof3izJgK2/rr+PhVlxh/NEW2rhKgA61bqq6yIRi4lOF/eH42z6gts9pUJ+E3XBD Ov8+5CEJ0hfTC3+OwxC359Swpfe9rkvtLZ99QIHIhKNEibKsfFKjllK6YVZXD96t 1Pe/bMXM7qaGmBf1gRgqEgpXAtR2AUQkFSNjGjp6kVQb2706scbh48uyNku0miku uQUqGrwLwBPccEWty+5IDk5CjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ5NN+o T7xeXTCppOH1RCGhyXhgMB8GA1UdIwQYMBaAFLBvgpZa/uOr2hs6Hy1gF+AHJ4zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGNS9FQzQwNUUxNjVD NkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2dmFHem9mTFdBWDRBY25q T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHLUNsbHItNDZ2YUd6b2ZMV0FYNEFjbmpPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGNS9FQzQwNUUxNjVDNkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2 dmFHem9mTFdBWDRBY25qT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSjOevNfltIAUX+yDnpGejxrzj2ZFG4iCtG1Br5X6VaVfvXxJDGG1A +tvXQ5sMlcPqcPBJsbKH7Iy6WTKNxTSZ0QRC84cyy6IqUTi98QBuoxTHKClWP4Gv i+7TOob19J+tnug6HGL/VCvy/O4ixtRDZSC+9WGFe7on/n0Lk4EOKDK6EvU0r27q fa8vteDiHzgmn4JJnSAkIGueXBZg1260vu1jMeOCafMV8d039NnUAPJPYUlQ1mHa Uh2kEi5dqnUOHBBeJTwnxvbF5lakZpu3B3sXzYk8Uk9z+rTzpphMMqzVr2mGmuij mD8W25a/ehZ8j4i/H165JidxSd56C2k3 -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:15 2025 by rpki-client