$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: XsFnpwsL62KyDVpf5SNbuOvK7zrYeUJduR/xOGu+vrg= Subject key identifier: 83:FB:05:6F:58:E9:9D:73:47:82:A5:7B:A7:55:34:38:75:08:85:73 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: F1 Signing time: Wed 17 Sep 2025 05:52:04 +0000 Manifest this update: Wed 17 Sep 2025 05:52:03 +0000 Manifest next update: Wed 24 Sep 2025 05:52:03 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: 39NDPw6bIJi7gmNosROnVkSHft1NlQ4ODVfVelXzIeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Sep 17 05:52:03 2025 GMT Not After : Sep 24 05:52:03 2025 GMT Subject: CN=68ca4c83-4f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:55:c5:ab:b4:cd:c7:86:61:6a:f4:6f:7e: de:41:ad:50:da:a2:b6:cd:b1:27:7a:e6:6b:39:c4: 32:c1:7f:47:62:96:d2:29:2e:6f:7f:76:9b:eb:8c: ff:86:21:37:b7:1c:73:5e:da:75:89:a0:d5:fe:1c: 9e:43:3e:a2:84:c4:1f:af:ad:7f:30:ca:53:b6:c2: 3d:aa:e3:03:c2:87:f3:a3:df:23:31:69:da:aa:16: 71:b5:3c:25:85:b1:94:7e:3b:f4:53:69:54:93:12: e3:71:fa:c0:6b:56:e6:7e:9a:0e:2a:80:ec:8c:ef: f5:d2:a5:68:c4:3c:d2:82:c9:4b:6b:5d:c6:ca:26: c7:5f:28:2a:4e:8d:b9:de:ca:54:cd:8d:26:e3:9d: ec:10:df:b7:53:87:69:60:e4:41:fa:de:bc:9d:0a: b7:99:26:d1:45:0e:64:48:67:53:af:23:00:75:1b: bc:ab:bc:c9:b7:2f:5e:4d:08:41:80:af:62:67:00: af:eb:58:e2:80:57:26:a9:cc:3a:a8:43:6d:a3:53: ca:81:17:4b:f8:d5:88:7a:24:fc:b3:2b:c8:6e:99: 67:44:27:5a:25:f7:0b:83:2d:d4:db:e0:02:bd:f5: c2:18:8f:aa:b6:68:b9:63:35:46:bb:66:4f:05:f5: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:05:6F:58:E9:9D:73:47:82:A5:7B:A7:55:34:38:75:08:85:73 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:73:bb:31:ce:9b:6d:e9:62:39:d2:2e:6f:79:7c:a5:6f: 1c:33:0b:ef:bd:ba:28:eb:8a:14:52:8a:0c:75:75:b8:44:8c: a6:11:84:00:bb:20:19:44:5e:11:ab:f1:32:de:b0:1a:68:9c: 27:f9:5e:4a:33:bd:e6:1e:1a:b5:fd:6d:3b:3c:f5:44:08:6c: ba:f8:a0:8c:44:eb:9c:de:ff:bf:17:57:11:10:33:49:f5:a0: ff:e0:a2:f3:bd:52:8f:77:4b:b4:6a:8c:2e:a3:0e:28:4c:1c: 82:3e:2a:a9:87:0c:53:08:90:d1:c0:59:70:74:f1:db:3f:97: e6:1d:7c:80:59:c8:88:9a:5d:d0:0c:87:d9:a1:48:67:17:14: b0:1c:dd:08:fa:e2:f3:75:c6:1f:18:cd:77:53:16:56:72:83: a3:69:d0:d7:4a:f9:b2:b3:1d:8e:7c:d9:44:46:ad:cb:13:41: 8e:b9:96:c3:af:77:8f:c8:be:31:c8:2d:c0:f6:90:bf:1a:f9: 5c:d1:f6:00:29:0f:37:ad:3c:1f:91:0f:35:bf:e9:e9:d5:d1: 98:16:d8:97:c6:20:de:ff:6e:e0:2b:f9:f7:67:98:ae:e8:08: 55:6c:bf:74:18:fa:94:e0:0f:02:2c:81:48:cd:aa:52:96:da: 4a:70:5d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjUwOTE3MDU1MjAzWhcNMjUwOTI0MDU1MjAzWjAYMRYwFAYD VQQDEw02OGNhNGM4My00ZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46dVxau0zceGYWr0b37eQa1Q2qK2zbEneuZrOcQywX9HYpbSKS5vf3ab64z/ hiE3txxzXtp1iaDV/hyeQz6ihMQfr61/MMpTtsI9quMDwofzo98jMWnaqhZxtTwl hbGUfjv0U2lUkxLjcfrAa1bmfpoOKoDsjO/10qVoxDzSgslLa13GyibHXygqTo25 3spUzY0m453sEN+3U4dpYORB+t68nQq3mSbRRQ5kSGdTryMAdRu8q7zJty9eTQhB gK9iZwCv61jigFcmqcw6qENto1PKgRdL+NWIeiT8syvIbplnRCdaJfcLgy3U2+AC vfXCGI+qtmi5YzVGu2ZPBfXNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP7BW9Y 6Z1zR4Kle6dVNDh1CIVzMB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACfHO7Mc6bbeliOdIub3l8pW8cMwvvvboo64oUUooMdXW4RIymEYQA uyAZRF4Rq/Ey3rAaaJwn+V5KM73mHhq1/W07PPVECGy6+KCMROuc3v+/F1cREDNJ 9aD/4KLzvVKPd0u0aowuow4oTByCPiqphwxTCJDRwFlwdPHbP5fmHXyAWciIml3Q DIfZoUhnFxSwHN0I+uLzdcYfGM13UxZWcoOjadDXSvmysx2OfNlERq3LE0GOuZbD r3ePyL4xyC3A9pC/Gvlc0fYAKQ83rTwfkQ81v+np1dGYFtiXxiDe/27gK/n3Z5iu 6AhVbL90GPqU4A8CLIFIzapSltpKcF0b -----END CERTIFICATE-----Generated at Thu Sep 18 23:12:50 2025 by rpki-client