$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: 9pPUM+SZxveRYfe3DOXUAz4sGiSVy2339fiPumm2/sE= Subject key identifier: 46:37:DD:B4:E9:8F:75:05:CC:EA:9D:EE:1A:B8:7E:1E:84:7C:47:A1 Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: D5 Signing time: Fri 05 Sep 2025 05:59:50 +0000 Manifest this update: Fri 05 Sep 2025 05:59:50 +0000 Manifest next update: Fri 12 Sep 2025 05:59:50 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: FdJ6sY/un99pEHcN4ABwIgHtw/WE3japOf5AYyFdc4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Sep 5 05:59:50 2025 GMT Not After : Sep 12 05:59:50 2025 GMT Subject: CN=68ba7c56-ab89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:3b:42:6f:2e:b3:9a:ab:ba:9c:51:b9:89: 95:92:5c:e8:00:3e:71:40:4b:d9:d8:58:51:86:2c: 2c:cb:27:31:48:9a:ba:31:dd:dd:ff:7e:48:59:bb: dd:a7:54:3e:35:b2:d2:8e:b5:34:8b:5d:dc:6c:04: 6c:1c:1c:f7:dc:80:07:19:81:7f:1b:57:3f:47:b6: 95:2d:b0:68:ba:d4:6a:3a:e7:4d:57:57:01:51:8d: 9d:98:3c:ac:68:1f:55:d7:25:d8:a4:f4:b6:59:12: 8d:04:f5:9b:76:75:aa:e1:40:85:b1:a1:bc:13:da: e0:a8:67:5a:97:a4:93:29:4e:5c:45:fd:20:7a:e0: 7e:77:eb:f6:65:ee:45:36:8b:71:bc:09:1e:fb:ca: ec:ed:86:fd:dc:0c:06:b1:c3:ea:96:c3:ae:ce:01: c2:2b:7f:5a:f5:ba:99:d2:45:80:d2:3a:6b:b5:d7: e8:0d:d3:c9:69:31:ef:0a:31:8e:ec:a2:36:98:75: a6:c7:88:3e:24:99:56:9c:95:52:f9:2a:b3:04:d4: 26:7b:4f:93:ea:e2:5e:b2:4f:0d:da:17:1d:74:36: 1c:f2:8c:e9:2a:d5:df:f0:45:6b:47:4c:4c:01:3c: 08:94:4b:ac:21:01:32:37:18:39:fb:ad:17:bd:9e: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:DD:B4:E9:8F:75:05:CC:EA:9D:EE:1A:B8:7E:1E:84:7C:47:A1 X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d3:5f:df:b6:2b:da:c5:d2:6f:ff:13:8f:b2:8d:8c:39:00: 07:81:0c:ab:cf:0a:d6:9d:d8:ec:dd:8c:ef:aa:5a:e8:cd:44: 4b:f5:0c:99:e0:1f:ce:48:67:39:68:42:ff:14:e9:3a:52:b5: 3b:46:46:01:14:6d:29:9d:9f:7f:ec:51:01:ca:e7:d5:b2:1d: 31:28:40:35:20:2e:cf:a8:13:b7:86:2a:20:19:c2:31:14:d0: ae:3a:37:0a:58:cf:f3:f3:76:fe:47:b3:db:41:f4:6a:86:9b: 58:66:a3:7c:1c:79:39:44:46:2f:7d:22:1c:b9:36:f0:ab:bd: 29:cb:e1:77:98:75:cf:1e:a5:b4:cb:6b:28:af:18:cf:18:d7: 69:02:cd:0d:91:8d:e4:c6:87:64:07:69:bb:b3:71:29:8e:e1: e4:fb:1f:36:13:b0:e9:8a:5e:48:59:fa:5e:57:09:d9:40:83: 2c:ec:4d:6e:0c:48:3b:e3:33:48:0d:a7:b3:e8:96:56:60:a7: 91:48:99:45:6b:60:2f:4f:58:1f:65:80:17:4e:53:d0:c0:17: 7a:35:5b:ee:af:17:11:c0:79:a6:b7:71:8a:12:4c:4e:75:84: 35:20:96:2b:e4:0e:39:ed:ac:08:4c:8f:8d:ce:00:80:6e:1d: 97:a9:e8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUwOTA1MDU1OTUwWhcNMjUwOTEyMDU1OTUwWjAYMRYwFAYD VQQDEw02OGJhN2M1Ni1hYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRc7Qm8us5qrupxRuYmVklzoAD5xQEvZ2FhRhiwsyycxSJq6Md3d/35IWbvd p1Q+NbLSjrU0i13cbARsHBz33IAHGYF/G1c/R7aVLbBoutRqOudNV1cBUY2dmDys aB9V1yXYpPS2WRKNBPWbdnWq4UCFsaG8E9rgqGdal6STKU5cRf0geuB+d+v2Ze5F NotxvAke+8rs7Yb93AwGscPqlsOuzgHCK39a9bqZ0kWA0jprtdfoDdPJaTHvCjGO 7KI2mHWmx4g+JJlWnJVS+SqzBNQme0+T6uJesk8N2hcddDYc8ozpKtXf8EVrR0xM ATwIlEusIQEyNxg5+60XvZ4h0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY33bTp j3UFzOqd7hq4fh6EfEehMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB401/ftivaxdJv/xOPso2MOQAHgQyrzwrWndjs3YzvqlrozURL9QyZ 4B/OSGc5aEL/FOk6UrU7RkYBFG0pnZ9/7FEByufVsh0xKEA1IC7PqBO3hiogGcIx FNCuOjcKWM/z83b+R7PbQfRqhptYZqN8HHk5REYvfSIcuTbwq70py+F3mHXPHqW0 y2sorxjPGNdpAs0NkY3kxodkB2m7s3EpjuHk+x82E7Dpil5IWfpeVwnZQIMs7E1u DEg74zNIDaez6JZWYKeRSJlFa2AvT1gfZYAXTlPQwBd6NVvurxcRwHmmt3GKEkxO dYQ1IJYr5A457awITI+NzgCAbh2XqehK -----END CERTIFICATE-----Generated at Sat Sep 6 15:15:14 2025 by rpki-client