$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: YpRXMa1Sgm17YIV0JIeH8mVc4uEUsQ4FvJGt/Gcb2i4= Subject key identifier: E4:64:B8:CF:9C:B3:9D:6A:7B:01:0E:D6:27:E7:E0:20:86:19:6C:68 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1F3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1F3A Signing time: Sun 24 Aug 2025 15:58:56 +0000 Manifest this update: Sun 24 Aug 2025 15:58:55 +0000 Manifest next update: Sun 31 Aug 2025 15:58:55 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: R357zxiruDv9HvmY37uUpCHZIN97RdZmYWcgZq74DFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7994 (0x1f3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Aug 24 15:58:55 2025 GMT Not After : Aug 31 15:58:55 2025 GMT Subject: CN=68ab36bf-b13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:a2:34:ed:81:26:70:6e:cd:de:7b:e9:49: 2f:41:c4:3c:ec:13:23:ef:f0:f2:61:a5:5f:fa:e5: 01:8a:11:99:6e:89:70:87:1e:d9:81:fc:95:95:90: 44:47:b3:25:d3:3d:7b:c6:ab:26:4b:fb:27:5a:08: e5:47:dc:99:45:b9:04:61:35:20:55:44:38:fc:27: af:3a:89:bc:bb:be:c3:ee:a3:29:e1:60:62:06:85: 6a:d2:9e:b3:07:6a:77:70:f4:72:c0:45:23:e3:1b: ae:43:78:df:69:c8:39:22:b4:e9:f2:d1:a6:05:0b: a6:94:f5:e3:d7:85:33:60:2a:bf:a6:bc:41:25:f8: 37:d2:e3:7c:4a:b5:4c:3f:8b:b0:00:6e:0c:b6:02: ee:fd:b8:9c:2c:54:91:9f:84:4d:e8:c9:61:bb:de: 21:23:1f:b3:04:75:e0:ae:ec:9f:c7:a6:e7:a2:c1: ff:0c:88:20:32:46:89:1b:b0:07:49:37:56:2c:55: 09:2f:0b:78:32:a8:b5:8f:78:7b:4a:34:1b:34:fd: 12:09:95:92:d2:af:ac:e7:1a:13:0b:52:c5:b7:99: 56:79:cd:82:13:46:5d:d4:3e:f7:f1:30:98:ef:30: c0:12:9a:ef:38:57:05:73:55:c6:0e:53:e1:41:e6: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:B8:CF:9C:B3:9D:6A:7B:01:0E:D6:27:E7:E0:20:86:19:6C:68 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5a:07:92:1e:71:1a:28:9d:52:07:6e:a3:20:80:0f:0b:79: d6:6b:d6:0b:82:96:02:ec:43:22:8a:8b:2b:9c:90:a6:21:51: 2c:a0:8b:e2:1b:d0:60:84:83:06:9d:36:63:d9:33:53:2c:8b: 90:01:d2:60:ef:7c:21:b5:f5:a5:ff:8c:23:00:f0:0d:37:0a: 37:bd:a7:c9:e4:30:82:10:7d:7f:af:a7:cf:d9:c5:16:84:79: 85:e7:ba:ce:ef:b6:84:f4:88:ed:34:f8:d0:ef:96:95:b2:c4: 3a:0f:8f:48:8c:62:8b:81:17:6a:69:79:5b:7f:fc:f0:1f:e3: b3:0d:0d:ac:75:7f:ac:18:98:50:d8:bd:1f:48:8d:f5:bf:2d: 2f:bd:fc:70:56:79:aa:53:cc:7d:da:76:71:46:c4:ee:84:f9: 1d:6c:8d:18:35:5c:5a:f7:a9:dc:12:9d:d4:e1:f6:3f:20:b3: 31:49:c7:d9:2c:6e:95:d2:d3:52:33:38:22:92:8e:3d:83:c2: 50:7a:2e:39:67:c0:24:75:24:a0:ae:71:05:be:4c:1b:9b:bf: 74:23:8e:40:58:b1:e1:ac:d2:be:bf:df:72:3b:4c:bf:4d:bb: 8e:f0:7a:8f:76:30:fb:37:9b:47:93:18:fc:04:4a:e5:46:56: f5:24:d3:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUwODI0MTU1ODU1WhcNMjUwODMxMTU1ODU1WjAYMRYwFAYD VQQDEw02OGFiMzZiZi1iMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxySiNO2BJnBuzd576UkvQcQ87BMj7/DyYaVf+uUBihGZbolwhx7ZgfyVlZBE R7Ml0z17xqsmS/snWgjlR9yZRbkEYTUgVUQ4/CevOom8u77D7qMp4WBiBoVq0p6z B2p3cPRywEUj4xuuQ3jfacg5IrTp8tGmBQumlPXj14UzYCq/prxBJfg30uN8SrVM P4uwAG4MtgLu/bicLFSRn4RN6Mlhu94hIx+zBHXgruyfx6bnosH/DIggMkaJG7AH STdWLFUJLwt4Mqi1j3h7SjQbNP0SCZWS0q+s5xoTC1LFt5lWec2CE0Zd1D738TCY 7zDAEprvOFcFc1XGDlPhQeawoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORkuM+c s51qewEO1ifn4CCGGWxoMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLWgeSHnEaKJ1SB26jIIAPC3nWa9YLgpYC7EMiiosrnJCmIVEsoIvi G9BghIMGnTZj2TNTLIuQAdJg73whtfWl/4wjAPANNwo3vafJ5DCCEH1/r6fP2cUW hHmF57rO77aE9IjtNPjQ75aVssQ6D49IjGKLgRdqaXlbf/zwH+OzDQ2sdX+sGJhQ 2L0fSI31vy0vvfxwVnmqU8x92nZxRsTuhPkdbI0YNVxa96ncEp3U4fY/ILMxScfZ LG6V0tNSMzgiko49g8JQei45Z8AkdSSgrnEFvkwbm790I45AWLHhrNK+v99yO0y/ TbuO8HqPdjD7N5tHkxj8BErlRlb1JNOo -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:07 2025 by rpki-client