$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: H3XvOAJRq5s8uPSGVibXbr31e/bvcRzVArzMS3tSfcs= Subject key identifier: 0B:14:BE:D1:1E:CA:5C:8F:BF:7D:E1:14:3E:A2:FE:3C:86:93:13:3D Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 34C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 477C Signing time: Tue 12 Aug 2025 14:21:17 +0000 Manifest this update: Tue 12 Aug 2025 14:21:17 +0000 Manifest next update: Tue 19 Aug 2025 14:21:17 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: 10k6+9161vNDXde/hlfsO0bI8vndC02iguiGd3VIMec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Aug 12 14:21:17 2025 GMT Not After : Aug 19 14:21:17 2025 GMT Subject: CN=689b4ddd-2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d6:4a:51:80:14:f5:ba:13:1a:2d:c9:8c:ad: 45:76:e0:de:4f:88:b3:cc:a5:b3:9a:10:74:71:b1: 00:f6:77:0e:13:92:5b:dc:25:8f:be:40:3f:77:41: d8:df:14:5d:29:b7:42:0e:45:2c:54:a8:94:d7:ee: f8:78:00:ee:95:5f:33:fd:2d:65:61:ab:cc:80:a0: 11:53:e4:dd:1d:19:b1:c4:8f:8f:6f:e1:19:85:bf: af:f0:7c:33:10:97:d4:d8:32:8a:f1:04:a9:a6:36: 78:27:7a:f1:38:84:97:4a:71:13:93:85:6f:29:8a: 5c:f0:36:28:35:ef:7a:38:ab:64:af:54:f6:a8:de: d8:36:42:bd:b2:c8:58:dd:82:8c:f5:db:5d:dd:71: 62:82:f4:5a:7f:5b:12:12:3c:99:3e:50:e5:1b:b7: 3f:95:90:29:ad:cf:1f:a7:01:44:38:09:aa:e5:e4: 03:37:28:8b:93:0e:4d:0f:55:7c:17:5a:6f:38:b3: 92:7d:19:52:29:5a:8a:e2:eb:ac:02:a4:ee:b7:3a: 82:83:03:9d:09:03:03:71:40:4a:52:b7:77:d3:63: 13:1e:a9:d9:97:d9:37:d9:7c:2c:e9:ca:d6:d4:b1: 6d:2c:50:bd:7f:9e:15:05:70:fb:48:17:eb:89:b1: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:14:BE:D1:1E:CA:5C:8F:BF:7D:E1:14:3E:A2:FE:3C:86:93:13:3D X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:02:e5:95:b5:46:f5:b5:38:10:91:42:2d:a7:19:ef:91: 2b:fc:85:ec:5d:13:21:74:7b:cf:6f:73:5b:d2:68:fb:b0:b3: 37:7e:86:06:7b:fa:f1:ed:08:29:07:e7:0b:46:a1:ff:45:06: 04:13:c2:4a:3e:fe:b5:b5:55:c9:2e:db:7b:72:60:43:0c:32: be:80:78:68:4f:4d:0b:c4:1b:f9:1d:9f:0e:ea:a4:d4:9c:ff: 3c:3c:07:77:ee:c9:d0:c1:2f:91:08:38:4f:11:13:f8:ec:81: 15:ed:21:62:84:a3:c8:4f:33:19:0d:e0:c5:ae:ce:1c:1a:af: 60:2c:77:72:c0:6a:52:d1:08:53:c3:a0:00:47:d9:d2:14:14: b7:36:84:ee:f3:26:bd:a1:f4:f3:f3:d4:f4:23:53:bb:72:01: c9:57:33:7f:f5:b1:9f:a8:35:35:0a:50:0d:7c:4f:b8:87:c8: eb:1f:e3:65:c3:47:7f:9e:c4:79:c9:79:6a:e8:40:b4:39:5e: c3:34:ad:6d:e2:85:ee:19:4b:2e:2c:5c:87:ae:da:72:03:06: 5b:3b:14:e5:96:c9:8d:e8:22:d3:27:ea:bc:1f:57:9b:66:c6: 81:c9:c9:cd:a7:2e:28:0a:31:2f:3d:ce:d5:5b:35:17:8c:35: 77:90:9f:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwODEyMTQyMTE3WhcNMjUwODE5MTQyMTE3WjAYMRYwFAYD VQQDEw02ODliNGRkZC0yMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tZKUYAU9boTGi3JjK1FduDeT4izzKWzmhB0cbEA9ncOE5Jb3CWPvkA/d0HY 3xRdKbdCDkUsVKiU1+74eADulV8z/S1lYavMgKARU+TdHRmxxI+Pb+EZhb+v8Hwz EJfU2DKK8QSppjZ4J3rxOISXSnETk4VvKYpc8DYoNe96OKtkr1T2qN7YNkK9sshY 3YKM9dtd3XFigvRaf1sSEjyZPlDlG7c/lZAprc8fpwFEOAmq5eQDNyiLkw5ND1V8 F1pvOLOSfRlSKVqK4uusAqTutzqCgwOdCQMDcUBKUrd302MTHqnZl9k32Xws6crW 1LFtLFC9f54VBXD7SBfribGgjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsUvtEe ylyPv33hFD6i/jyGkxM9MB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/wLllbVG9bU4EJFCLacZ75Er/IXsXRMhdHvPb3Nb0mj7sLM3foYG e/rx7QgpB+cLRqH/RQYEE8JKPv61tVXJLtt7cmBDDDK+gHhoT00LxBv5HZ8O6qTU nP88PAd37snQwS+RCDhPERP47IEV7SFihKPITzMZDeDFrs4cGq9gLHdywGpS0QhT w6AAR9nSFBS3NoTu8ya9ofTz89T0I1O7cgHJVzN/9bGfqDU1ClANfE+4h8jrH+Nl w0d/nsR5yXlq6EC0OV7DNK1t4oXuGUsuLFyHrtpyAwZbOxTllsmN6CLTJ+q8H1eb ZsaBycnNpy4oCjEvPc7VWzUXjDV3kJ+j -----END CERTIFICATE-----Generated at Wed Aug 13 20:08:34 2025 by rpki-client