$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: 1gSQ8M8XwgnhdkBUMqGATXJ/1mfMiZHLrOSjecKOjYQ= Subject key identifier: 8B:98:C4:68:CE:43:6D:E1:DE:83:62:1A:E4:88:07:D9:53:0A:DC:2A Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 09B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 09B1 Signing time: Sat 06 Sep 2025 16:47:12 +0000 Manifest this update: Sat 06 Sep 2025 16:47:11 +0000 Manifest next update: Sat 13 Sep 2025 16:47:11 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: hJ2PYFfAeHW3B8GlGlwe0tp9bb5O0Tz8l7gQJmAoKwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2481 (0x9b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Sep 6 16:47:11 2025 GMT Not After : Sep 13 16:47:11 2025 GMT Subject: CN=68bc658f-f4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:96:bc:4e:51:03:8b:ec:8c:b0:d4:b6:0c: ca:92:46:49:d2:fa:b3:80:c9:aa:12:f8:13:3d:bd: a2:8a:3e:88:d9:9f:0c:ad:4a:90:66:ff:89:c2:b0: 65:2c:6d:17:12:ce:98:09:ad:29:92:9a:73:fc:e1: f5:de:24:3b:74:86:22:6a:cd:00:51:89:d1:e1:bd: 38:b2:6d:b6:b9:f1:0a:dc:94:c0:95:e0:d8:69:e3: b7:ac:c1:df:ce:9c:b1:2b:4b:4a:5b:7c:c3:af:03: ba:39:46:f0:6b:17:b8:ef:78:39:d9:9d:19:de:c6: ac:73:26:cb:df:2e:89:b0:a5:53:31:9c:40:5c:69: e6:41:51:21:3d:99:32:62:73:bb:50:17:f7:ad:1d: 0d:ab:3b:23:bf:b2:6f:56:07:bf:f1:0e:da:f4:72: 4e:e3:4d:6a:8a:ae:bc:99:e3:3f:3e:85:0e:a9:89: a1:16:1b:e7:04:4f:37:4a:93:cb:4d:0b:bc:d8:e5: 6d:d7:82:05:7a:45:0c:0e:97:f8:c8:82:c4:93:e9: 90:94:30:cd:ed:c8:90:d1:bd:ac:5b:bb:cc:d9:3d: b9:86:51:ba:7d:2a:ff:fb:6e:e1:44:6e:98:c0:2a: dc:48:f3:13:87:e6:05:b3:d1:c8:6b:a6:6c:56:7a: b0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:98:C4:68:CE:43:6D:E1:DE:83:62:1A:E4:88:07:D9:53:0A:DC:2A X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:95:0d:66:76:7e:29:82:48:73:12:71:19:79:2c:c6:7c:fc: 24:37:a9:0b:f3:09:cf:05:20:17:55:08:87:3f:bf:34:60:ba: f3:cf:31:0b:6b:2c:62:8d:de:7d:2b:f0:fb:65:69:99:b5:26: 77:6a:7c:4a:9d:8c:38:b5:30:af:11:38:ad:f0:45:4e:9b:59: 8b:5e:76:d0:f3:d6:f7:ff:79:91:38:29:4f:a2:4d:9b:5f:2e: f2:86:66:94:34:f0:75:08:95:4a:2f:18:d0:d8:6f:d0:d1:ec: b7:b9:ec:0d:d8:66:4d:5a:c7:ef:75:27:07:17:5e:71:7a:58: 74:72:27:23:af:b8:49:41:33:7d:bf:b6:5e:30:d7:34:53:48: 5a:ee:84:56:70:e8:96:56:74:01:7c:40:55:19:5e:e4:4b:df: 04:7d:61:ee:77:ff:0a:06:e6:ad:b3:29:07:ed:3c:dd:a0:48: 0a:e1:83:38:eb:48:2a:d3:eb:d6:97:91:91:a6:57:f0:ad:6a: be:98:56:64:0b:c4:d0:6a:a1:cd:3a:ae:f4:64:7a:d4:50:46: b4:7a:e6:03:30:41:bc:c6:d5:0f:14:c9:91:1f:c9:bd:54:de: f2:fb:2b:26:3c:d9:82:c1:cf:12:8e:d4:59:de:51:aa:92:35: f8:3e:00:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUwOTA2MTY0NzExWhcNMjUwOTEzMTY0NzExWjAYMRYwFAYD VQQDEw02OGJjNjU4Zi1mNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFCWvE5RA4vsjLDUtgzKkkZJ0vqzgMmqEvgTPb2iij6I2Z8MrUqQZv+JwrBl LG0XEs6YCa0pkppz/OH13iQ7dIYias0AUYnR4b04sm22ufEK3JTAleDYaeO3rMHf zpyxK0tKW3zDrwO6OUbwaxe473g52Z0Z3sascybL3y6JsKVTMZxAXGnmQVEhPZky YnO7UBf3rR0Nqzsjv7JvVge/8Q7a9HJO401qiq68meM/PoUOqYmhFhvnBE83SpPL TQu82OVt14IFekUMDpf4yILEk+mQlDDN7ciQ0b2sW7vM2T25hlG6fSr/+27hRG6Y wCrcSPMTh+YFs9HIa6ZsVnqwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuYxGjO Q23h3oNiGuSIB9lTCtwqMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArlQ1mdn4pgkhzEnEZeSzGfPwkN6kL8wnPBSAXVQiHP780YLrzzzEL ayxijd59K/D7ZWmZtSZ3anxKnYw4tTCvETit8EVOm1mLXnbQ89b3/3mROClPok2b Xy7yhmaUNPB1CJVKLxjQ2G/Q0ey3uewN2GZNWsfvdScHF15xelh0cicjr7hJQTN9 v7ZeMNc0U0ha7oRWcOiWVnQBfEBVGV7kS98EfWHud/8KBuatsykH7TzdoEgK4YM4 60gq0+vWl5GRplfwrWq+mFZkC8TQaqHNOq70ZHrUUEa0euYDMEG8xtUPFMmRH8m9 VN7y+ysmPNmCwc8SjtRZ3lGqkjX4PgAz -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:50 2025 by rpki-client