$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: 4CQnZFupgIz/b56EnSJPgsgYMCkpwgtkkKNigxZvCCw= Subject key identifier: DD:23:8E:75:0E:1D:09:FC:AA:27:EF:8E:B4:F7:E0:18:F5:B6:26:8B Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 34D9 Signing time: Sat 06 Sep 2025 15:02:39 +0000 Manifest this update: Sat 06 Sep 2025 15:02:39 +0000 Manifest next update: Sat 13 Sep 2025 15:02:38 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: KC531Dggpi3TUW1hW/NkXvqmBD1tXghsaNKavbueTZw=) 2: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (hash: rz7KWjBZEYdZagJgiTo6rpG1kH3c3NzFacklKm2JF8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Sep 6 15:02:39 2025 GMT Not After : Sep 13 15:02:38 2025 GMT Subject: CN=68bc4d0f-0b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:b3:bf:29:92:89:ae:68:8c:cb:bf:e7:c2: 25:f1:c2:e9:09:78:8e:5b:a6:f3:87:e6:95:84:0a: e1:c3:c9:81:51:8d:9d:22:43:a8:59:24:e0:12:ad: fd:2e:75:82:3c:43:1e:b2:00:ff:b5:c5:59:60:57: 2d:19:f0:ae:02:27:61:fc:1b:f3:c1:6a:d3:b2:ab: 8e:82:8f:1d:bb:8c:85:39:37:77:b5:2f:b4:83:c5: af:09:1e:d8:e2:9c:fa:54:98:f8:cc:d1:6d:a4:a2: 2d:81:5f:70:08:00:4e:e6:93:c0:97:68:37:5c:c8: c7:d5:c8:0e:0f:b4:87:b1:af:65:00:7e:a2:a4:96: 0e:df:ce:af:86:58:06:1f:ed:99:48:64:13:54:12: c2:2d:c3:28:a5:d1:14:11:e7:f0:c4:b0:4f:a0:2e: 6b:36:9d:4a:a7:95:8e:11:1c:5a:5e:81:f7:62:12: f2:69:0f:c9:60:6d:0c:af:e3:cb:fb:3f:d2:b3:92: d4:e3:9b:9f:7a:d5:b9:a5:cb:24:17:32:cc:85:92: 74:f0:de:75:65:55:a0:7c:99:3e:bc:64:91:97:a1: 0d:40:a3:a7:10:76:b0:85:01:63:db:06:24:cf:5d: 83:6e:79:18:f8:f2:59:24:4b:de:98:80:23:0a:29: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:23:8E:75:0E:1D:09:FC:AA:27:EF:8E:B4:F7:E0:18:F5:B6:26:8B X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:08:67:45:eb:dc:ca:b2:76:5d:57:df:8d:93:37:05:5b:f9: ee:eb:ec:e7:66:58:4a:ca:47:f5:02:59:52:b7:99:48:6f:4f: fc:14:32:fe:17:40:ac:d3:c2:66:58:cb:97:7e:12:78:24:be: fe:66:fd:16:17:45:c0:bd:53:2a:b5:a9:ab:34:3c:5d:ce:57: 7f:72:62:c3:db:ce:e1:bd:e9:b7:48:0f:fa:55:92:fc:3c:47: 98:c9:2f:c5:d8:c0:ba:3e:c7:8a:4d:b3:41:1a:7a:47:6c:50: 05:56:51:8b:13:05:c5:b4:31:86:68:b9:40:0f:c7:21:b3:4f: e8:63:27:47:e0:24:2b:c0:75:61:e3:85:e7:4a:a2:cb:39:2c: 77:89:46:e5:2f:9a:94:27:75:0b:da:a0:4e:f6:38:f0:8a:c8: 02:81:46:23:50:9e:94:96:4d:5b:81:47:7e:67:94:6e:cd:98: 95:0d:2d:1b:a0:1f:74:48:4d:14:e9:48:02:59:8c:62:38:6e: 92:af:d7:71:d2:d0:f9:bb:c6:f0:fc:46:28:00:c5:a6:d9:ae: ec:16:1b:fa:00:97:23:24:ab:28:a6:d3:96:91:1c:d7:46:46: a5:02:5a:9e:72:b2:60:07:fa:50:91:3f:a2:a8:da:d8:fa:9c: 0a:24:17:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjUwOTA2MTUwMjM5WhcNMjUwOTEzMTUwMjM4WjAYMRYwFAYD VQQDEw02OGJjNGQwZi0wYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ECzvymSia5ojMu/58Il8cLpCXiOW6bzh+aVhArhw8mBUY2dIkOoWSTgEq39 LnWCPEMesgD/tcVZYFctGfCuAidh/BvzwWrTsquOgo8du4yFOTd3tS+0g8WvCR7Y 4pz6VJj4zNFtpKItgV9wCABO5pPAl2g3XMjH1cgOD7SHsa9lAH6ipJYO386vhlgG H+2ZSGQTVBLCLcMopdEUEefwxLBPoC5rNp1Kp5WOERxaXoH3YhLyaQ/JYG0Mr+PL +z/Ss5LU45ufetW5pcskFzLMhZJ08N51ZVWgfJk+vGSRl6ENQKOnEHawhQFj2wYk z12DbnkY+PJZJEvemIAjCimCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0jjnUO HQn8qifvjrT34Bj1tiaLMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDICGdF69zKsnZdV9+NkzcFW/nu6+znZlhKykf1AllSt5lIb0/8FDL+ F0Cs08JmWMuXfhJ4JL7+Zv0WF0XAvVMqtamrNDxdzld/cmLD287hvem3SA/6VZL8 PEeYyS/F2MC6PseKTbNBGnpHbFAFVlGLEwXFtDGGaLlAD8chs0/oYydH4CQrwHVh 44XnSqLLOSx3iUblL5qUJ3UL2qBO9jjwisgCgUYjUJ6Ulk1bgUd+Z5RuzZiVDS0b oB90SE0U6UgCWYxiOG6Sr9dx0tD5u8bw/EYoAMWm2a7sFhv6AJcjJKsoptOWkRzX RkalAlqecrJgB/pQkT+iqNrY+pwKJBcO -----END CERTIFICATE-----Generated at Mon Sep 8 02:24:47 2025 by rpki-client