$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: 761a+6F6obMH4XCnfxhBdK3NZWTOfMErwYK8qe70VU4= Subject key identifier: 94:DA:BC:97:29:BA:25:C6:42:3F:30:C5:3D:82:E3:53:06:1E:FE:9B Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01BD Signing time: Fri 05 Sep 2025 01:21:31 +0000 Manifest this update: Fri 05 Sep 2025 01:21:31 +0000 Manifest next update: Fri 12 Sep 2025 01:21:31 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: eK6W0kVDziFk2l66Nzl9V1XvRo7Lgn9z5+7FjtaB/zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Sep 5 01:21:31 2025 GMT Not After : Sep 12 01:21:31 2025 GMT Subject: CN=68ba3b1b-149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:1d:2c:89:05:53:5d:0a:3f:c8:e9:b7:7a: c3:53:22:02:13:51:7d:4b:9a:5f:9e:ae:f2:8d:64: 6c:82:10:c1:6a:37:f7:90:3e:2c:e9:e4:0b:43:97: 34:0c:31:fc:c4:e7:47:71:e1:08:c0:a5:ef:10:21: 0f:aa:22:a8:d0:92:bb:51:4b:67:7a:f3:a2:03:81: 25:76:2a:6a:a2:a2:65:3b:7d:d0:cf:15:e0:16:c0: ac:e1:0f:9a:f5:59:be:6f:9c:e8:93:1c:4a:4a:3c: f8:e4:5c:c2:34:3f:e9:1a:b5:4d:2d:d7:bc:44:ad: 29:d8:ab:ee:5b:82:2b:55:1c:32:4d:e5:ec:8d:81: 4b:ea:d8:7c:f0:15:09:c8:d7:70:db:ba:2f:7b:dc: db:53:cd:45:45:61:40:5e:65:27:6d:9e:34:5b:19: b2:f1:8a:b4:c9:c0:10:95:21:44:77:d1:a5:c6:be: fe:ee:a6:90:02:7f:32:90:cb:60:ef:cc:5c:ed:89: 9d:95:7e:a3:c6:27:34:e2:2a:67:75:52:15:07:3f: fd:bd:b1:25:75:c8:e1:1c:d4:a4:5d:68:ff:e8:ab: f4:eb:16:3b:f5:07:80:0d:23:ed:10:25:17:30:ca: cb:20:60:19:9c:22:9b:41:9a:02:d1:57:d6:21:ee: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DA:BC:97:29:BA:25:C6:42:3F:30:C5:3D:82:E3:53:06:1E:FE:9B X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c9:ab:d5:d5:3a:f0:2a:76:0c:58:72:b9:02:ce:d9:98:15: fb:a0:7f:da:4c:dd:ab:80:1b:35:fe:2a:93:28:62:90:77:ea: 9a:6a:89:49:fa:3f:c3:16:ca:0c:ce:88:06:cc:30:de:f8:9a: 7b:86:36:a8:c4:b5:e5:ba:d7:32:8c:c2:67:3b:62:48:b7:d8: 27:ab:5a:f6:d5:f2:90:67:72:61:2d:fa:65:b3:96:11:30:60: 38:dd:56:87:09:f3:8e:fb:f2:0b:6a:96:16:c6:40:74:45:57: e6:3f:06:19:90:e2:1c:c2:20:9a:80:d1:cc:a5:c1:56:c1:db: 37:b8:05:f8:b4:1f:e1:36:fd:5a:16:78:47:e6:21:ba:a7:bf: 61:99:b4:eb:e8:fa:8f:1c:4c:2c:a0:f5:3d:10:26:eb:5b:57: 6e:b4:ff:6b:b9:df:31:3a:a8:68:05:6f:4d:e1:02:26:82:4f: 70:f8:19:a7:bf:18:29:37:22:9b:93:66:0a:9e:db:15:ea:20: 14:b0:04:4f:a9:24:01:c6:1a:3e:df:a8:bc:d3:88:ba:31:99: b6:a2:8a:70:d4:32:bc:cf:ad:b1:7c:bc:08:3c:44:53:69:f1: 58:83:32:d0:29:4f:9b:c0:07:e9:20:dc:76:ce:1f:90:36:f8: c9:4b:3e:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUwOTA1MDEyMTMxWhcNMjUwOTEyMDEyMTMxWjAYMRYwFAYD VQQDEw02OGJhM2IxYi0xNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy4dLIkFU10KP8jpt3rDUyICE1F9S5pfnq7yjWRsghDBajf3kD4s6eQLQ5c0 DDH8xOdHceEIwKXvECEPqiKo0JK7UUtnevOiA4EldipqoqJlO33QzxXgFsCs4Q+a 9Vm+b5zokxxKSjz45FzCND/pGrVNLde8RK0p2KvuW4IrVRwyTeXsjYFL6th88BUJ yNdw27ove9zbU81FRWFAXmUnbZ40Wxmy8Yq0ycAQlSFEd9Glxr7+7qaQAn8ykMtg 78xc7YmdlX6jxic04ipndVIVBz/9vbEldcjhHNSkXWj/6Kv06xY79QeADSPtECUX MMrLIGAZnCKbQZoC0VfWIe6OQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTavJcp uiXGQj8wxT2C41MGHv6bMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYyavV1TrwKnYMWHK5As7ZmBX7oH/aTN2rgBs1/iqTKGKQd+qaaolJ +j/DFsoMzogGzDDe+Jp7hjaoxLXlutcyjMJnO2JIt9gnq1r21fKQZ3JhLfpls5YR MGA43VaHCfOO+/ILapYWxkB0RVfmPwYZkOIcwiCagNHMpcFWwds3uAX4tB/hNv1a FnhH5iG6p79hmbTr6PqPHEwsoPU9ECbrW1dutP9rud8xOqhoBW9N4QImgk9w+Bmn vxgpNyKbk2YKntsV6iAUsARPqSQBxho+36i804i6MZm2oopw1DK8z62xfLwIPERT afFYgzLQKU+bwAfpINx2zh+QNvjJSz7L -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:10 2025 by rpki-client