$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: xtZFXAOJ7AVyay/qcWeugPKM0eccSZhJA2lx+Xh39OU= Subject key identifier: 8D:0F:7A:3E:58:D5:26:2D:D4:C2:D7:C9:EC:01:2C:7D:1A:A8:0B:85 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34AB Signing time: Sun 24 Aug 2025 15:07:22 +0000 Manifest this update: Sun 24 Aug 2025 15:07:21 +0000 Manifest next update: Sun 31 Aug 2025 15:07:21 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: V2FVogOgMp2OLR4XkNSX3PdnlYJOZbvylF3y485lcyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Aug 24 15:07:21 2025 GMT Not After : Aug 31 15:07:21 2025 GMT Subject: CN=68ab2aa9-9325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:67:ad:b2:cf:28:e5:59:70:ac:cf:06:11: e1:3c:e7:8b:7c:a4:8c:9f:c9:66:b4:52:9a:4b:12: bd:c9:cf:78:63:76:2a:35:a3:5f:e6:b2:a3:6b:2d: d9:29:59:d0:be:f4:7d:d7:cf:c3:d4:6b:9e:e7:f1: 83:88:7d:8d:e6:a1:08:80:4a:ee:cd:ae:5c:68:dd: 0d:f9:15:cf:dc:cf:d9:93:ce:21:cd:bc:e4:b2:05: bf:d1:69:32:1e:c1:9d:d0:76:e4:8a:8d:ff:2d:ec: 6e:53:2e:d8:72:f6:c6:61:5d:e2:54:d4:dc:e0:53: c6:b0:5c:9a:fc:47:44:6e:99:36:3d:94:a9:0c:1d: 58:3b:c8:1c:a1:19:87:bc:6e:87:a1:3e:72:75:cb: aa:39:3e:ed:fe:d3:b1:00:41:a4:50:81:21:0c:83: c2:12:eb:1e:f9:e1:28:cc:fe:2d:ae:7d:cb:bf:6f: 00:aa:aa:b1:d5:1c:c3:56:c0:47:2c:fb:e8:cb:19: b1:0c:29:23:a7:05:7d:64:ba:12:8d:7c:94:95:01: 89:14:dc:54:d8:78:5f:a7:b2:4f:08:38:56:90:08: d7:2e:e4:25:5f:aa:32:66:8d:e1:b0:47:97:f8:4e: c5:97:1c:39:f7:f7:84:1d:52:10:e8:14:b5:c3:5a: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0F:7A:3E:58:D5:26:2D:D4:C2:D7:C9:EC:01:2C:7D:1A:A8:0B:85 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3a:3f:67:74:a1:a8:12:c8:12:4a:76:e8:da:4c:0e:dc:ab: 28:66:8d:0e:67:45:ff:6c:07:b9:db:3c:7e:de:27:5e:2b:02: ad:9d:70:95:4c:d5:21:d8:1a:34:57:f1:cc:28:99:9f:73:fd: 89:3c:51:9f:13:99:c9:7c:38:60:1e:6b:7a:bb:8b:58:33:3d: 24:25:31:25:32:77:8f:db:cb:2e:03:f1:38:ae:5e:95:85:26: 2d:bd:bc:fd:46:88:a4:ea:05:fd:a4:4d:13:46:bc:c8:64:cd: bc:4f:0f:92:93:c3:b0:45:01:f8:98:76:39:e1:79:b5:d2:b8: 41:42:b0:70:ca:9b:5c:b0:9b:ae:54:43:15:8b:eb:75:79:66: 38:fa:5b:33:5d:41:6e:8a:eb:c0:20:34:68:de:21:f0:64:78: 99:ac:40:19:1c:87:6b:57:4e:73:0f:85:eb:b6:36:f9:da:c6: 04:f1:ce:b0:99:48:6f:7f:8d:a7:b0:e8:48:46:46:09:75:97: f1:54:ca:db:e7:5b:39:66:57:14:64:c6:d3:26:97:4f:87:8a: 1b:61:59:28:28:3d:93:b2:2a:aa:09:c8:de:9e:65:1f:8d:44: f2:09:d5:a1:33:af:4a:da:e1:5d:07:e2:8e:2d:78:6c:00:06: e1:c5:cb:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUwODI0MTUwNzIxWhcNMjUwODMxMTUwNzIxWjAYMRYwFAYD VQQDEw02OGFiMmFhOS05MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJJnrbLPKOVZcKzPBhHhPOeLfKSMn8lmtFKaSxK9yc94Y3YqNaNf5rKjay3Z KVnQvvR918/D1Gue5/GDiH2N5qEIgEruza5caN0N+RXP3M/Zk84hzbzksgW/0Wky HsGd0Hbkio3/LexuUy7YcvbGYV3iVNTc4FPGsFya/EdEbpk2PZSpDB1YO8gcoRmH vG6HoT5ydcuqOT7t/tOxAEGkUIEhDIPCEuse+eEozP4trn3Lv28Aqqqx1RzDVsBH LPvoyxmxDCkjpwV9ZLoSjXyUlQGJFNxU2Hhfp7JPCDhWkAjXLuQlX6oyZo3hsEeX +E7Flxw59/eEHVIQ6BS1w1qitQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0Pej5Y 1SYt1MLXyewBLH0aqAuFMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmOj9ndKGoEsgSSnbo2kwO3KsoZo0OZ0X/bAe52zx+3ideKwKtnXCV TNUh2Bo0V/HMKJmfc/2JPFGfE5nJfDhgHmt6u4tYMz0kJTElMneP28suA/E4rl6V hSYtvbz9Roik6gX9pE0TRrzIZM28Tw+Sk8OwRQH4mHY54Xm10rhBQrBwyptcsJuu VEMVi+t1eWY4+lszXUFuiuvAIDRo3iHwZHiZrEAZHIdrV05zD4Xrtjb52sYE8c6w mUhvf42nsOhIRkYJdZfxVMrb51s5ZlcUZMbTJpdPh4obYVkoKD2TsiqqCcjenmUf jUTyCdWhM69K2uFdB+KOLXhsAAbhxcsc -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:34 2025 by rpki-client