$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: OpkHEDiuJEwUTHXf5vdhjMxHSp18cTm9r0VO2Qf92ao= Subject key identifier: FA:61:87:58:FB:A6:8D:3C:5F:31:6D:37:FB:B6:D5:D0:4D:4A:E9:23 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 2138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 2138 Signing time: Sat 06 Sep 2025 15:58:37 +0000 Manifest this update: Sat 06 Sep 2025 15:58:37 +0000 Manifest next update: Sat 13 Sep 2025 15:58:37 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: OeveZgeUyTBqlGnELWjronrbeuts5QBYz0bHsvnRJys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8504 (0x2138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Sep 6 15:58:37 2025 GMT Not After : Sep 13 15:58:37 2025 GMT Subject: CN=68bc5a2d-549e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:34:6a:c7:05:10:a5:86:37:f9:71:98:b0: d9:4e:8d:19:91:81:c1:c2:c2:ba:01:b1:73:20:33: d4:e6:f7:44:4e:78:db:6e:51:52:02:a3:73:c4:51: 40:72:e3:ca:86:e4:76:68:fe:89:14:d5:5f:3c:b0: c8:a7:33:86:8d:12:10:96:5a:83:6a:74:d3:0b:37: f5:2c:ac:b0:fe:a2:94:d9:d7:9c:f3:a8:78:f8:01: 06:c5:79:5d:d8:c1:62:21:d7:1c:09:49:5e:68:a2: 51:0a:46:e9:13:94:e5:ff:37:6f:58:0e:bd:f5:1b: c6:c0:e8:87:61:23:07:a0:e6:77:46:e9:e4:db:64: f3:32:27:df:36:ca:b2:8d:3c:cd:d7:c1:0b:98:95: 41:1a:4c:fc:c2:37:a3:f6:42:5a:80:1e:31:e2:6b: bb:fb:5d:3a:a7:66:e7:94:16:7f:cd:7c:45:22:48: 33:2b:ef:f4:7c:14:de:d8:45:75:17:49:37:a3:23: 3a:d6:9b:86:85:bb:db:70:8f:83:f6:a7:84:d6:1c: 24:b8:fa:fe:71:3f:ce:6d:5a:aa:04:f5:b6:04:a5: b0:19:c5:cf:2e:2d:12:69:53:82:1c:4a:eb:a3:73: 8d:17:77:fd:d2:9c:0f:0d:53:fe:61:0a:58:b9:1b: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:87:58:FB:A6:8D:3C:5F:31:6D:37:FB:B6:D5:D0:4D:4A:E9:23 X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:47:72:91:07:34:b8:f1:40:84:da:e7:4d:7a:95:a4:9d:34: f5:40:a3:72:6a:10:cb:d0:57:29:5f:8e:56:a3:de:46:d6:d5: b3:66:9b:d1:e7:5c:10:51:70:fb:37:da:d4:fb:8b:9a:0b:ae: 81:f7:bd:f4:36:d3:27:fd:fc:c4:a5:f0:a1:10:9e:98:ac:9d: e2:49:1d:92:40:b4:b5:41:92:ce:30:50:f5:e5:85:66:0b:cc: 7e:67:dd:95:59:a2:0b:35:b5:b5:c1:15:5a:cd:f5:30:df:e8: 4b:5c:96:cd:f0:e4:12:e0:37:9b:33:82:b7:8c:e9:61:f9:1b: 3c:db:f5:cd:66:bb:34:91:89:1c:2a:b9:1f:8d:98:88:53:0e: 00:b3:22:a6:bb:05:5f:7b:3c:bd:ab:14:e4:ce:53:23:8d:4f: f9:b7:17:49:33:44:4c:12:b5:9f:69:bf:df:07:89:60:f0:5e: 44:12:d5:9a:bb:c3:fa:25:2e:79:53:71:26:08:27:f5:f5:73: 08:bb:ac:29:80:54:f0:d9:95:b1:7c:5a:97:c9:84:2b:34:f0: 7f:4f:98:d4:43:21:4c:86:49:f5:c2:5c:34:5c:f8:ca:62:18: ed:3f:c8:76:36:45:0a:fd:cf:0b:10:ea:5a:f3:33:74:eb:e5: 6a:49:88:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUwOTA2MTU1ODM3WhcNMjUwOTEzMTU1ODM3WjAYMRYwFAYD VQQDEw02OGJjNWEyZC01NDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaQ0ascFEKWGN/lxmLDZTo0ZkYHBwsK6AbFzIDPU5vdETnjbblFSAqNzxFFA cuPKhuR2aP6JFNVfPLDIpzOGjRIQllqDanTTCzf1LKyw/qKU2dec86h4+AEGxXld 2MFiIdccCUleaKJRCkbpE5Tl/zdvWA699RvGwOiHYSMHoOZ3Runk22TzMiffNsqy jTzN18ELmJVBGkz8wjej9kJagB4x4mu7+106p2bnlBZ/zXxFIkgzK+/0fBTe2EV1 F0k3oyM61puGhbvbcI+D9qeE1hwkuPr+cT/ObVqqBPW2BKWwGcXPLi0SaVOCHErr o3ONF3f90pwPDVP+YQpYuRsd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPphh1j7 po08XzFtN/u21dBNSukjMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjR3KRBzS48UCE2udNepWknTT1QKNyahDL0FcpX45Wo95G1tWzZpvR 51wQUXD7N9rU+4uaC66B9730NtMn/fzEpfChEJ6YrJ3iSR2SQLS1QZLOMFD15YVm C8x+Z92VWaILNbW1wRVazfUw3+hLXJbN8OQS4DebM4K3jOlh+Rs82/XNZrs0kYkc KrkfjZiIUw4AsyKmuwVfezy9qxTkzlMjjU/5txdJM0RMErWfab/fB4lg8F5EEtWa u8P6JS55U3EmCCf19XMIu6wpgFTw2ZWxfFqXyYQrNPB/T5jUQyFMhkn1wlw0XPjK YhjtP8h2NkUK/c8LEOpa8zN06+VqSYj7 -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:36 2025 by rpki-client