$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: zPwyDUxJjt/n2m+oOcyPBFX5hC24wwn5J73L9326rqM= Subject key identifier: 44:CD:46:28:98:AB:61:22:07:D1:55:AF:A7:BC:35:8E:65:73:C0:CF Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0674 Signing time: Thu 04 Sep 2025 22:32:30 +0000 Manifest this update: Thu 04 Sep 2025 22:32:29 +0000 Manifest next update: Thu 11 Sep 2025 22:32:29 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: Lk4RCONc961ZidDOIYDS/QXQgoyAOO8j+Bxn97QqLO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Sep 4 22:32:29 2025 GMT Not After : Sep 11 22:32:29 2025 GMT Subject: CN=68ba137d-69bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:20:97:66:5d:fb:53:12:57:4c:4f:e0:ce: cc:53:3e:8c:b7:f3:e4:ee:ee:e2:77:55:55:59:ab: d1:a5:cb:fb:38:63:67:68:99:b8:6d:3c:57:bb:63: 85:3d:c2:a0:bb:34:87:32:c9:81:81:8f:80:b3:8a: 08:9b:48:92:80:97:9d:e3:8c:ef:82:3c:f7:a0:91: 84:0c:0d:2f:39:1f:cf:40:48:93:e0:3e:78:f9:ad: d7:10:52:ca:50:1a:f0:ee:d1:e9:5f:f5:a7:cd:e4: a0:1a:64:35:f6:d8:2f:ce:f1:2d:e6:22:c2:50:9a: 29:70:c2:cc:e3:22:82:1d:26:ff:21:22:f8:1b:9a: 75:ec:f1:6e:7f:71:58:43:5c:23:53:3d:a8:23:b2: 8f:af:40:7a:98:75:e6:69:0e:b7:2e:ce:2a:01:a0: 9e:7d:de:f6:de:ce:f9:3f:43:55:71:33:65:90:bb: 82:32:02:da:e7:8e:d8:17:a8:0c:a0:09:14:89:db: 0c:70:f4:9b:18:f6:c0:e5:12:71:06:58:e1:47:19: 20:51:89:14:db:8c:91:8a:36:1b:29:55:97:21:57: 7d:41:57:1a:ac:bf:8e:d1:91:1e:f1:8c:1c:06:29: f7:60:3f:68:53:c3:42:45:ca:6d:23:b2:94:80:92: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CD:46:28:98:AB:61:22:07:D1:55:AF:A7:BC:35:8E:65:73:C0:CF X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cc:c2:34:13:58:d0:cc:de:6c:43:5e:bc:65:77:fe:92:75: c7:35:33:96:f0:8c:7f:23:c2:d6:86:86:aa:bd:dc:d9:c2:ae: ce:b8:dc:17:f6:1c:b1:cc:7f:0d:b5:e4:d3:fc:f2:3c:75:63: fb:dd:91:76:11:12:96:b8:41:ac:01:d8:bf:63:24:a2:ee:fe: aa:18:19:d8:59:e7:97:96:61:ec:13:c1:e9:0d:0c:88:81:0c: 1e:22:01:d8:fa:0e:e9:29:79:06:02:c5:00:08:d1:2e:42:ae: 9d:59:1e:c8:4b:de:42:8f:7d:2c:a8:7e:99:8e:80:19:cb:7b: 72:29:62:71:57:2c:07:96:9a:7f:a7:d2:3c:29:42:db:65:c1: db:41:9f:bb:6f:c8:cd:25:70:0c:ca:87:e3:c4:06:77:8b:72: 80:bf:b1:1b:a1:9f:98:71:85:bb:8f:27:81:cf:8b:54:a7:51: ce:78:24:91:18:47:2d:f2:2c:6c:08:f5:8d:06:60:e6:d9:73: df:63:c3:d0:51:28:3c:bf:bb:31:37:d5:d4:99:1c:6b:a3:96: 27:cb:36:79:89:0d:18:19:0a:0f:3d:2c:17:ae:c0:c2:7f:36: 9f:f1:d6:5f:3d:ac:93:4a:ce:3e:53:01:9d:ed:4c:dc:8a:24: 8a:a3:71:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwOTA0MjIzMjI5WhcNMjUwOTExMjIzMjI5WjAYMRYwFAYD VQQDEw02OGJhMTM3ZC02OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Vcgl2Zd+1MSV0xP4M7MUz6Mt/Pk7u7id1VVWavRpcv7OGNnaJm4bTxXu2OF PcKguzSHMsmBgY+As4oIm0iSgJed44zvgjz3oJGEDA0vOR/PQEiT4D54+a3XEFLK UBrw7tHpX/WnzeSgGmQ19tgvzvEt5iLCUJopcMLM4yKCHSb/ISL4G5p17PFuf3FY Q1wjUz2oI7KPr0B6mHXmaQ63Ls4qAaCefd723s75P0NVcTNlkLuCMgLa547YF6gM oAkUidsMcPSbGPbA5RJxBljhRxkgUYkU24yRijYbKVWXIVd9QVcarL+O0ZEe8Ywc Bin3YD9oU8NCRcptI7KUgJLcfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETNRiiY q2EiB9FVr6e8NY5lc8DPMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMzMI0E1jQzN5sQ168ZXf+knXHNTOW8Ix/I8LWhoaqvdzZwq7OuNwX 9hyxzH8NteTT/PI8dWP73ZF2ERKWuEGsAdi/YySi7v6qGBnYWeeXlmHsE8HpDQyI gQweIgHY+g7pKXkGAsUACNEuQq6dWR7IS95Cj30sqH6ZjoAZy3tyKWJxVywHlpp/ p9I8KULbZcHbQZ+7b8jNJXAMyofjxAZ3i3KAv7EboZ+YcYW7jyeBz4tUp1HOeCSR GEct8ixsCPWNBmDm2XPfY8PQUSg8v7sxN9XUmRxro5YnyzZ5iQ0YGQoPPSwXrsDC fzaf8dZfPayTSs4+UwGd7UzciiSKo3Gs -----END CERTIFICATE-----Generated at Sat Sep 6 15:21:33 2025 by rpki-client