$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: ocdG7Wc8j99MPLsKLAx28rYNUAfCZCJAqFBuvygwhS8= Subject key identifier: C5:B8:39:8E:AC:77:C5:C5:EA:5D:EB:32:5E:51:11:04:17:7F:B3:9F Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 34AC Signing time: Wed 20 Aug 2025 15:08:55 +0000 Manifest this update: Wed 20 Aug 2025 15:08:55 +0000 Manifest next update: Wed 27 Aug 2025 15:08:55 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: KxuZ2E8E6dWGvOjhqJ/aysoiBEUFr/ivL6cDntPNCfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Aug 20 15:08:55 2025 GMT Not After : Aug 27 15:08:55 2025 GMT Subject: CN=68a5e507-70a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:bc:9b:1e:e2:e3:0d:bb:79:46:f1:0f:75: ac:2f:50:07:1d:6d:12:cf:69:66:e7:0b:74:62:ee: 83:c5:2d:57:7f:a3:b1:85:72:fb:de:fd:ea:77:c4: 47:0e:a7:19:4b:bf:b1:0d:08:b4:20:09:c4:96:9b: a2:0f:9e:44:b3:19:bb:66:3a:41:eb:ef:48:9b:fe: 83:7f:4e:73:33:bc:57:a4:54:3a:98:be:e8:52:6c: 4f:1b:58:8c:11:d3:6d:6f:27:36:d7:db:ee:f7:67: ce:72:28:13:2b:85:96:51:21:b7:b7:59:1c:a3:4b: 48:73:22:eb:8a:f7:21:2b:0a:61:24:ad:84:49:48: 18:b7:8c:18:28:b6:23:51:3d:e5:35:6c:6b:e4:6e: 87:bf:a5:59:7b:36:ba:37:b5:24:59:56:96:0b:be: d2:18:22:32:44:cb:3d:88:78:88:50:80:58:63:6a: 7a:a4:35:02:38:2a:a4:3a:cd:87:bd:7f:2d:88:4c: 4b:42:6a:c5:76:71:f7:e8:66:69:88:84:50:cb:99: 9b:49:83:13:ef:f4:12:22:03:b3:af:48:01:3e:f1: 11:b6:2b:14:27:ad:99:6d:5a:e5:54:55:5b:aa:3c: 62:c0:64:06:97:8f:02:f4:4a:d7:a8:f1:36:51:1b: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B8:39:8E:AC:77:C5:C5:EA:5D:EB:32:5E:51:11:04:17:7F:B3:9F X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:18:74:b5:22:4f:94:17:bb:48:26:ef:2e:6b:6a:3c:8e:5b: be:ac:34:72:94:61:cf:aa:c0:46:2b:a0:9d:1f:83:c1:b8:81: e5:0a:ac:c1:16:ec:68:4d:da:95:5a:78:79:7f:99:02:45:ce: a3:e9:5e:aa:1d:00:8c:e7:ea:04:4c:a8:18:00:27:62:95:ed: ba:11:29:63:35:ac:bf:2e:6c:c1:78:72:ba:b5:72:c0:75:a8: c5:4f:02:38:8e:94:8c:8e:a1:74:f9:7c:2b:a2:2f:b1:51:d4: fb:c7:2a:59:79:23:89:84:3e:42:79:a7:c0:79:06:d9:b1:3f: d3:df:72:9f:60:58:67:8d:b6:b9:2f:2b:98:37:3b:75:1b:f2: 83:c5:1b:90:37:3c:ad:27:40:07:36:de:e2:7c:f0:66:9c:80: 2b:7a:ba:cd:ab:5b:e3:2c:91:29:f8:6f:6a:cf:4e:e3:38:86: b0:de:da:47:62:e3:b0:e2:09:6d:7f:7d:22:c7:51:8d:be:f8: 66:77:37:64:d7:e5:14:cf:bc:63:ac:4b:31:51:7c:e0:de:3d: 07:75:f3:e4:49:3e:b8:11:73:c1:a2:52:87:32:9a:02:0c:02: d9:47:4c:db:6c:cf:bb:4e:d7:60:0d:58:4d:d0:52:16:c5:fe: a5:ee:52:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjUwODIwMTUwODU1WhcNMjUwODI3MTUwODU1WjAYMRYwFAYD VQQDEw02OGE1ZTUwNy03MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw+8mx7i4w27eUbxD3WsL1AHHW0Sz2lm5wt0Yu6DxS1Xf6OxhXL73v3qd8RH DqcZS7+xDQi0IAnElpuiD55Esxm7ZjpB6+9Im/6Df05zM7xXpFQ6mL7oUmxPG1iM EdNtbyc219vu92fOcigTK4WWUSG3t1kco0tIcyLrivchKwphJK2ESUgYt4wYKLYj UT3lNWxr5G6Hv6VZeza6N7UkWVaWC77SGCIyRMs9iHiIUIBYY2p6pDUCOCqkOs2H vX8tiExLQmrFdnH36GZpiIRQy5mbSYMT7/QSIgOzr0gBPvERtisUJ62ZbVrlVFVb qjxiwGQGl48C9ErXqPE2URtc2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW4OY6s d8XF6l3rMl5REQQXf7OfMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzGHS1Ik+UF7tIJu8ua2o8jlu+rDRylGHPqsBGK6CdH4PBuIHlCqzB FuxoTdqVWnh5f5kCRc6j6V6qHQCM5+oETKgYACdile26ESljNay/LmzBeHK6tXLA dajFTwI4jpSMjqF0+Xwroi+xUdT7xypZeSOJhD5CeafAeQbZsT/T33KfYFhnjba5 LyuYNzt1G/KDxRuQNzytJ0AHNt7ifPBmnIArerrNq1vjLJEp+G9qz07jOIaw3tpH YuOw4gltf30ix1GNvvhmdzdk1+UUz7xjrEsxUXzg3j0HdfPkST64EXPBolKHMpoC DALZR0zbbM+7TtdgDVhN0FIWxf6l7lL9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:44 2025 by rpki-client