$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json) Hash identifier: YdIJ2J4M1pwkbsNOiKuKKPaZjwpvkGzRpAot8Hp+Xn4= Subject key identifier: 9C:E2:51:D5:17:C2:BB:A5:63:97:91:F9:48:6F:A6:E6:53:A8:65:9E Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Certificate serial: 14D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft Manifest number: 14D1 Signing time: Wed 20 Aug 2025 16:55:33 +0000 Manifest this update: Wed 20 Aug 2025 16:55:32 +0000 Manifest next update: Wed 27 Aug 2025 16:55:32 +0000 Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: GEqj0orz59todrfWd72qk/dJPkKzUXf8q8p2kSlXJ2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5329 (0x14d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Validity Not Before: Aug 20 16:55:32 2025 GMT Not After : Aug 27 16:55:32 2025 GMT Subject: CN=68a5fe04-92b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:6d:ec:d3:d4:12:cb:1e:c4:d4:76:db:3a: 03:e8:57:c4:1a:fa:ea:25:ce:53:57:42:39:f1:25: 90:f4:a2:c4:ce:ac:8f:3f:c8:7d:c2:44:25:78:3e: 5c:eb:90:be:a6:d4:13:1b:b3:ee:a4:16:ef:6d:50: c5:9a:e6:da:19:38:0b:c2:53:e7:e1:88:3d:91:30: d3:af:7b:1b:06:09:54:90:17:75:51:c0:01:0d:21: 94:fa:46:1a:57:ab:44:d5:f2:30:e7:a3:44:78:fe: 5b:8f:fb:76:c7:53:ad:94:2f:8f:ed:af:9e:95:bb: 35:6b:13:c9:02:ec:17:db:d0:72:b3:c9:d9:20:77: dd:c6:d6:08:fe:58:34:ea:66:99:15:5b:e6:c1:fb: 53:fe:bd:9a:95:9a:3a:9c:fb:93:42:6d:7e:b9:3e: a4:17:5c:19:28:30:d9:d6:02:56:71:69:51:45:c3: 9b:de:ab:1d:be:39:7e:c1:7f:ca:dc:35:5d:4b:d9: 3b:19:95:10:0f:63:36:53:2e:c6:f0:7b:0a:9d:46: 8c:fd:f7:32:6c:d8:16:95:92:87:00:34:35:65:24: fc:76:29:08:d4:4d:ea:7a:be:57:25:2d:34:0b:fb: 07:d1:f4:58:4a:a5:37:03:0d:f8:eb:5f:e3:72:9c: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E2:51:D5:17:C2:BB:A5:63:97:91:F9:48:6F:A6:E6:53:A8:65:9E X509v3 Authority Key Identifier: keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:04:8a:e3:91:cd:ca:0e:23:b5:11:8b:eb:57:e5:54:c3:32: bf:f1:d8:cb:f0:00:6f:0e:d8:58:e6:0e:d5:5d:0f:1d:d4:6a: 64:b2:4f:b2:a3:f5:95:73:c0:4b:d9:34:ea:fb:af:1a:2d:52: 42:15:3d:6a:c6:e5:0b:76:1a:5f:e5:1b:6c:59:4b:9b:3a:a5: cb:bf:ba:5c:c7:d1:7a:1a:86:34:03:5e:f8:59:36:6f:f1:eb: 1b:8a:f2:ed:98:99:83:dd:33:d3:f7:a1:df:bf:93:4c:67:72: cb:aa:9a:72:60:d7:db:f8:9b:91:3d:fa:02:5b:ae:28:9d:35: f1:8a:cb:de:c4:62:71:7f:68:8d:52:be:78:18:4f:7b:e9:03: bd:4f:cf:a8:19:e2:85:85:63:25:3e:4b:0f:28:6e:8b:32:a3: 55:5b:bd:8f:11:0e:05:63:de:51:37:81:cd:2d:44:c3:6d:98: 56:13:57:2a:66:cb:24:f3:02:7d:f6:1e:44:63:05:92:6f:ef: d5:ef:1e:e2:9e:c2:3d:4a:0f:a7:54:a0:71:c7:5e:01:28:43: d8:1f:dc:26:51:0d:61:c5:b2:8c:d9:a8:9e:27:97:ce:a8:ee: 0d:46:7e:48:f4:ae:c1:84:b4:04:cd:2f:17:35:25:13:45:00: c4:8a:44:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF NzVGQ0I3MTAwHhcNMjUwODIwMTY1NTMyWhcNMjUwODI3MTY1NTMyWjAYMRYwFAYD VQQDEw02OGE1ZmUwNC05MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWpt7NPUEssexNR22zoD6FfEGvrqJc5TV0I58SWQ9KLEzqyPP8h9wkQleD5c 65C+ptQTG7PupBbvbVDFmubaGTgLwlPn4Yg9kTDTr3sbBglUkBd1UcABDSGU+kYa V6tE1fIw56NEeP5bj/t2x1OtlC+P7a+elbs1axPJAuwX29Bys8nZIHfdxtYI/lg0 6maZFVvmwftT/r2alZo6nPuTQm1+uT6kF1wZKDDZ1gJWcWlRRcOb3qsdvjl+wX/K 3DVdS9k7GZUQD2M2Uy7G8HsKnUaM/fcybNgWlZKHADQ1ZST8dikI1E3qer5XJS00 C/sH0fRYSqU3Aw3461/jcpxbYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJziUdUX wrulY5eR+UhvpuZTqGWeMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBIrjkc3KDiO1EYvrV+VUwzK/8djL8ABvDthY5g7VXQ8d1Gpksk+y o/WVc8BL2TTq+68aLVJCFT1qxuULdhpf5RtsWUubOqXLv7pcx9F6GoY0A174WTZv 8esbivLtmJmD3TPT96Hfv5NMZ3LLqppyYNfb+JuRPfoCW64onTXxisvexGJxf2iN Ur54GE976QO9T8+oGeKFhWMlPksPKG6LMqNVW72PEQ4FY95RN4HNLUTDbZhWE1cq Zssk8wJ99h5EYwWSb+/V7x7insI9Sg+nVKBxx14BKEPYH9wmUQ1hxbKM2aieJ5fO qO4NRn5I9K7BhLQEzS8XNSUTRQDEikR2 -----END CERTIFICATE-----Generated at Fri Aug 22 16:23:02 2025 by rpki-client