$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: P08fm0Xrxzb1sARlwcrj3wvImqkxN3eG5Ss/wcW0aVo= Subject key identifier: B3:D7:DF:B8:12:CE:33:72:1E:1D:26:68:D5:E3:B3:B6:2D:F8:EC:92 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 01A7 Signing time: Fri 19 Sep 2025 03:39:58 +0000 Manifest this update: Fri 19 Sep 2025 03:39:58 +0000 Manifest next update: Fri 26 Sep 2025 03:39:58 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: r4dMbWoCfJ6Z7zs1593x/eFfwB1auUJllqRDjQahjG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Sep 19 03:39:58 2025 GMT Not After : Sep 26 03:39:58 2025 GMT Subject: CN=68ccd08e-e6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:c2:34:01:05:8d:98:08:9d:b4:55:c8:71: ed:ca:7a:ba:97:87:9e:db:27:99:98:ff:9e:20:1b: 83:66:36:84:82:4e:63:e7:a5:9c:6d:3d:d6:ae:a1: 61:00:bf:dc:90:91:9e:87:cf:f2:90:e5:3b:2e:da: 70:ff:69:e5:0a:1b:79:49:f2:87:f0:b4:92:7d:88: 8f:90:59:6c:63:af:fb:76:65:7b:69:00:af:a2:56: 5c:1d:8f:0f:33:66:3c:73:24:98:62:ae:f9:ca:d6: 35:25:dc:cb:af:03:ad:6a:52:4c:ad:72:be:4e:97: 06:35:0a:48:69:9c:f4:03:75:3b:49:4a:2d:44:64: e2:e7:1e:f3:c0:bb:19:ff:69:75:0c:f3:ba:28:c1: 59:32:ec:f7:8b:b8:36:f0:da:45:84:81:41:6e:83: 21:16:51:cc:e1:c8:ec:03:ef:88:61:a2:a8:6a:68: cb:e4:77:bd:74:57:75:d6:2e:36:89:88:a2:a0:d5: 34:53:1f:2b:f7:5d:52:7f:e5:56:b0:3c:1e:3c:aa: 50:b1:2e:d3:cf:9d:0f:4e:4f:98:66:81:5b:23:c0: ae:b0:37:d2:ce:ce:78:3d:ac:20:dc:20:5d:21:b5: fc:8b:61:3e:90:2b:3f:c8:0e:0c:c6:97:40:30:01: 8a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:DF:B8:12:CE:33:72:1E:1D:26:68:D5:E3:B3:B6:2D:F8:EC:92 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:74:fb:e3:2c:99:58:bf:40:60:db:d7:80:74:75:5a:83:9d: 4d:71:34:5e:af:d7:9b:bf:a6:f8:15:f8:86:1f:e7:03:bd:b4: 26:27:6b:a1:2f:22:6e:f2:ec:0a:28:38:a1:7c:08:90:4f:2e: 8b:0c:a0:c8:fa:bf:27:c2:27:7e:47:d0:5e:fe:46:91:32:2b: 55:17:6c:e2:20:92:14:dc:d9:03:72:17:53:21:7f:a8:34:93: 31:93:07:22:e8:cd:26:c1:74:5b:a8:c2:53:c5:98:90:cd:4d: 4a:30:61:83:be:69:44:7b:a5:50:63:c0:76:f4:88:79:81:0b: 75:78:0f:6b:38:bf:2d:6d:75:0b:0f:be:80:b2:bb:91:1a:99: 4e:4f:5c:0c:98:21:cb:98:77:95:b4:9b:b6:36:ec:5d:56:b8: 54:8c:f8:81:52:11:a8:f9:72:f9:7f:4c:94:af:c1:cd:3b:2c: 93:7d:e1:0e:91:11:60:a4:f7:b0:fd:22:ab:de:09:84:8b:3f: 34:c3:c1:f0:5a:a8:87:b5:dc:61:77:f2:5a:6b:e0:5c:1e:9a: f7:46:06:46:44:b3:ea:a8:44:d3:d1:6d:ad:97:b1:d5:17:61: 2f:1e:57:00:1c:df:0b:05:d9:61:93:d6:0f:93:09:25:97:8f: 7a:40:11:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUwOTE5MDMzOTU4WhcNMjUwOTI2MDMzOTU4WjAYMRYwFAYD VQQDEw02OGNjZDA4ZS1lNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02zCNAEFjZgInbRVyHHtynq6l4ee2yeZmP+eIBuDZjaEgk5j56WcbT3WrqFh AL/ckJGeh8/ykOU7Ltpw/2nlCht5SfKH8LSSfYiPkFlsY6/7dmV7aQCvolZcHY8P M2Y8cySYYq75ytY1JdzLrwOtalJMrXK+TpcGNQpIaZz0A3U7SUotRGTi5x7zwLsZ /2l1DPO6KMFZMuz3i7g28NpFhIFBboMhFlHM4cjsA++IYaKoamjL5He9dFd11i42 iYiioNU0Ux8r911Sf+VWsDwePKpQsS7Tz50PTk+YZoFbI8CusDfSzs54Pawg3CBd IbX8i2E+kCs/yA4MxpdAMAGKAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPX37gS zjNyHh0maNXjs7Yt+OySMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEdPvjLJlYv0Bg29eAdHVag51NcTRer9ebv6b4FfiGH+cDvbQmJ2uh LyJu8uwKKDihfAiQTy6LDKDI+r8nwid+R9Be/kaRMitVF2ziIJIU3NkDchdTIX+o NJMxkwci6M0mwXRbqMJTxZiQzU1KMGGDvmlEe6VQY8B29Ih5gQt1eA9rOL8tbXUL D76AsruRGplOT1wMmCHLmHeVtJu2NuxdVrhUjPiBUhGo+XL5f0yUr8HNOyyTfeEO kRFgpPew/SKr3gmEiz80w8HwWqiHtdxhd/Jaa+BcHpr3RgZGRLPqqETT0W2tl7HV F2EvHlcAHN8LBdlhk9YPkwkll496QBHU -----END CERTIFICATE-----Generated at Fri Sep 19 10:12:05 2025 by rpki-client