$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: o6eNEBEsh9WCpy0aepy5iMYOgnV1MnFl9uqsicWYvqU= Subject key identifier: 90:93:DE:19:5A:82:E1:B6:7F:E2:ED:D7:7C:4D:47:1B:C6:88:9F:F4 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 4762 Signing time: Sun 20 Jul 2025 14:21:19 +0000 Manifest this update: Sun 20 Jul 2025 14:21:19 +0000 Manifest next update: Sun 27 Jul 2025 14:21:19 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: Yz46YOwFFzUrq73Pw4PQhI89fQzVTzM1LJrl3te1q8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Jul 20 14:21:19 2025 GMT Not After : Jul 27 14:21:19 2025 GMT Subject: CN=687cfb5f-2667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:c0:a8:d2:19:9f:c2:e1:a3:19:35:83:35: ca:1b:ae:6f:9f:c0:99:de:3c:1e:03:d7:3d:45:9f: 17:83:b6:4a:21:e7:fc:47:0f:f9:56:c3:69:f1:cd: e2:21:b1:81:65:9c:f5:e1:5b:27:79:83:cc:c4:ca: a8:0d:96:0b:ae:34:25:fe:f3:52:69:95:a7:0f:3c: 6b:22:1b:9e:75:9b:2a:3c:42:c6:24:54:66:5c:00: 9c:4a:c7:9d:e1:24:1b:4f:82:ca:4a:6e:99:be:d1: ca:d0:f6:c3:2f:94:d9:d8:dd:80:1b:e9:15:7d:52: 9b:48:1f:7c:ff:b4:36:b9:51:ae:74:69:9d:32:29: 3d:9e:26:d1:02:f8:38:21:27:27:8a:cd:36:43:1a: 12:d0:db:53:ed:a6:ad:a8:6a:74:18:39:ee:82:d5: 2a:29:07:28:e3:3f:27:47:c7:ba:f8:8f:71:e5:eb: 11:13:bc:9c:4c:95:4e:3e:4a:c5:1d:f6:b8:00:49: d7:b5:bf:62:d2:b1:7d:a5:c8:f7:45:6c:bb:5d:2f: 49:f6:0f:00:c6:ae:2d:9c:b0:9b:c0:54:a2:d7:d6: 21:e1:82:98:4a:1e:18:19:c0:fe:72:d9:c8:55:0a: 99:6e:d4:77:46:1b:06:2b:78:63:71:7e:b5:b7:7e: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:93:DE:19:5A:82:E1:B6:7F:E2:ED:D7:7C:4D:47:1B:C6:88:9F:F4 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:74:2e:4b:09:83:34:27:f4:37:cc:99:c6:6e:62:9b:e0:9d: 81:83:fb:ae:06:45:26:fd:a2:1e:3d:a3:0a:55:dd:ab:5f:ae: 09:bb:24:38:81:a8:85:41:a5:80:77:7e:01:0f:1c:c1:27:ac: 69:48:46:5a:af:5d:4f:46:6f:e9:bb:b4:61:54:52:6e:6a:66: fc:7a:e0:18:2d:4d:59:fa:82:0e:dc:48:78:bc:42:86:fb:69: 93:0c:34:86:5d:cb:b8:8d:77:bb:63:8b:32:7b:6c:92:1c:3d: b6:b0:6f:51:84:e3:d6:92:97:14:5c:e0:40:19:f8:45:35:ae: 94:45:cd:85:10:0a:fb:7b:3b:63:03:4c:13:27:6b:f1:b0:fe: 43:3c:53:b8:ab:f0:cc:17:7f:a8:57:9f:68:40:ca:18:e1:15: b8:2a:c8:83:81:8b:ff:61:76:d1:6d:15:b0:d3:83:1b:f1:89: fb:cb:0c:67:90:76:af:05:ca:55:74:2d:5c:8d:5a:26:9f:a7: bd:68:2f:4c:b3:c0:8c:b3:ba:ce:f3:87:98:8f:e1:4c:4d:8d: 9e:94:cb:17:45:23:2e:0c:e7:98:f4:82:3d:3c:3e:d3:7a:0b: 77:34:ea:cc:f6:2d:f1:83:05:98:64:ef:aa:94:4b:44:bc:39: 55:6e:78:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUwNzIwMTQyMTE5WhcNMjUwNzI3MTQyMTE5WjAYMRYwFAYD VQQDEw02ODdjZmI1Zi0yNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVzAqNIZn8Lhoxk1gzXKG65vn8CZ3jweA9c9RZ8Xg7ZKIef8Rw/5VsNp8c3i IbGBZZz14VsneYPMxMqoDZYLrjQl/vNSaZWnDzxrIhuedZsqPELGJFRmXACcSsed 4SQbT4LKSm6ZvtHK0PbDL5TZ2N2AG+kVfVKbSB98/7Q2uVGudGmdMik9nibRAvg4 IScnis02QxoS0NtT7aatqGp0GDnugtUqKQco4z8nR8e6+I9x5esRE7ycTJVOPkrF Hfa4AEnXtb9i0rF9pcj3RWy7XS9J9g8Axq4tnLCbwFSi19Yh4YKYSh4YGcD+ctnI VQqZbtR3RhsGK3hjcX61t37ngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCT3hla guG2f+Lt13xNRxvGiJ/0MB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9dC5LCYM0J/Q3zJnGbmKb4J2Bg/uuBkUm/aIePaMKVd2rX64JuyQ4 gaiFQaWAd34BDxzBJ6xpSEZar11PRm/pu7RhVFJuamb8euAYLU1Z+oIO3Eh4vEKG +2mTDDSGXcu4jXe7Y4sye2ySHD22sG9RhOPWkpcUXOBAGfhFNa6URc2FEAr7eztj A0wTJ2vxsP5DPFO4q/DMF3+oV59oQMoY4RW4KsiDgYv/YXbRbRWw04Mb8Yn7ywxn kHavBcpVdC1cjVomn6e9aC9Ms8CMs7rO84eYj+FMTY2elMsXRSMuDOeY9II9PD7T egt3NOrM9i3xgwWYZO+qlEtEvDlVbnjw -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:28 2025 by rpki-client