$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: sESd90Z83EPemnV9zKcQ/Y7pCmh5wVeIqyTf6t7fFvA= Subject key identifier: 83:39:4B:FF:EF:69:D9:97:38:59:6E:22:69:C5:84:9C:43:71:73:06 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 349B Signing time: Thu 18 Sep 2025 15:23:03 +0000 Manifest this update: Thu 18 Sep 2025 15:23:03 +0000 Manifest next update: Thu 25 Sep 2025 15:23:03 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: V4hN4jU83icK8ldBJrh7Ejgih58KvMjaNQN0egR31to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Sep 18 15:23:03 2025 GMT Not After : Sep 25 15:23:03 2025 GMT Subject: CN=68cc23d7-e7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:54:89:d9:79:cc:7c:bb:ce:a6:fe:a0:00: b5:41:60:bc:e4:a4:a0:41:c9:a1:9e:54:9f:d0:60: 37:4d:f5:5b:22:35:e1:f3:24:ec:e5:78:fb:6c:b0: c6:dd:69:b2:98:5f:30:ed:f4:0f:4e:9f:e9:50:56: 2a:f1:a3:aa:c5:77:e3:66:a1:c6:58:94:88:ea:c7: cc:b4:ec:bc:28:71:99:9f:8b:5d:6a:d6:1f:c7:e2: 87:6f:48:8c:b6:0b:df:1a:27:e3:5a:ad:c9:0c:a9: ca:16:ff:72:89:0f:36:a1:83:d6:d3:33:68:ad:2a: af:82:23:39:d4:56:40:13:ed:f3:81:55:3b:8e:f5: ad:f5:1e:b2:e1:a0:10:fc:c6:df:10:ac:aa:a5:93: af:d2:43:92:ce:4a:5b:66:cf:b0:46:d1:5f:79:2e: dd:51:42:6b:76:b3:f6:5b:c5:24:69:8f:d2:36:b4: bd:d3:8e:f1:c3:d4:1c:3e:1a:7e:51:1e:83:bf:76: 59:82:84:ef:20:d0:be:f8:0a:ae:7b:cc:58:44:79: 73:a4:ff:d2:3e:d5:60:4e:87:a1:30:81:d8:cc:dc: b8:cd:a4:c6:26:de:13:95:cd:fd:f5:dd:1a:e5:fb: ba:e3:8a:cd:64:27:aa:41:49:78:54:98:37:b1:a0: ac:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:39:4B:FF:EF:69:D9:97:38:59:6E:22:69:C5:84:9C:43:71:73:06 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b1:88:f6:b6:84:f4:ad:c7:9b:c9:fe:cb:9a:65:a9:f7:0c: 4e:2b:c6:75:1c:7e:46:88:0d:a4:2c:be:31:74:b3:28:4e:fd: 80:57:41:88:db:69:b2:2b:33:d0:f7:78:ff:c5:99:98:4a:b0: 44:b2:2b:f7:1a:69:43:f1:4a:f9:1c:36:3c:5b:70:53:d5:0f: 97:18:28:73:f5:7c:95:37:f9:18:55:9a:4c:64:e3:7c:16:8f: c3:4f:cf:e8:10:d6:56:ee:e6:a2:fe:10:31:eb:22:3b:50:e4: 56:c5:33:7f:1d:4f:91:7d:5c:35:a5:14:cb:34:10:79:dd:99: 06:af:c7:90:33:c6:1e:ad:34:a4:3f:dd:d6:79:22:e0:87:ba: a5:7e:4f:b4:ef:ef:b3:dd:6e:aa:2b:9f:76:3f:64:28:be:a1: 5e:4f:91:a5:2a:f8:0b:47:38:9e:e2:79:01:02:85:7c:bd:a3: 33:52:09:b6:45:c6:de:86:a8:99:4c:ef:2d:9e:f8:5f:cf:73: 24:d5:70:65:0a:77:81:f9:39:1c:32:44:9e:7e:cd:28:7d:b4: 5b:e2:d4:33:03:4d:c0:d1:71:58:b3:83:a1:8d:28:c1:69:30: 14:3a:fa:ef:c9:da:a2:19:47:7b:43:46:07:3d:f2:6d:24:17: 96:60:30:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUwOTE4MTUyMzAzWhcNMjUwOTI1MTUyMzAzWjAYMRYwFAYD VQQDEw02OGNjMjNkNy1lN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyFUidl5zHy7zqb+oAC1QWC85KSgQcmhnlSf0GA3TfVbIjXh8yTs5Xj7bLDG 3WmymF8w7fQPTp/pUFYq8aOqxXfjZqHGWJSI6sfMtOy8KHGZn4tdatYfx+KHb0iM tgvfGifjWq3JDKnKFv9yiQ82oYPW0zNorSqvgiM51FZAE+3zgVU7jvWt9R6y4aAQ /MbfEKyqpZOv0kOSzkpbZs+wRtFfeS7dUUJrdrP2W8UkaY/SNrS9047xw9QcPhp+ UR6Dv3ZZgoTvINC++Aque8xYRHlzpP/SPtVgToehMIHYzNy4zaTGJt4Tlc399d0a 5fu644rNZCeqQUl4VJg3saCsiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM5S//v admXOFluImnFhJxDcXMGMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8sYj2toT0rcebyf7LmmWp9wxOK8Z1HH5GiA2kLL4xdLMoTv2AV0GI 22myKzPQ93j/xZmYSrBEsiv3GmlD8Ur5HDY8W3BT1Q+XGChz9XyVN/kYVZpMZON8 Fo/DT8/oENZW7uai/hAx6yI7UORWxTN/HU+RfVw1pRTLNBB53ZkGr8eQM8YerTSk P93WeSLgh7qlfk+07++z3W6qK592P2QovqFeT5GlKvgLRzie4nkBAoV8vaMzUgm2 RcbehqiZTO8tnvhfz3Mk1XBlCneB+TkcMkSefs0ofbRb4tQzA03A0XFYs4OhjSjB aTAUOvrvydqiGUd7Q0YHPfJtJBeWYDC3 -----END CERTIFICATE-----Generated at Fri Sep 19 16:10:48 2025 by rpki-client