$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: jdWE0Rj5LL4voZ5kYec2wHMck4qMoBMNSrAFwMJxrDY= Subject key identifier: C8:AF:9B:51:9E:8E:F8:52:F9:96:1E:40:50:D7:31:86:88:EF:98:50 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 12C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 4797 Signing time: Sat 06 Sep 2025 14:21:20 +0000 Manifest this update: Sat 06 Sep 2025 14:21:20 +0000 Manifest next update: Sat 13 Sep 2025 14:21:20 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: DTVsw3mt9cyil/RPPWIEvHrNM+TUam/YdGpbYYJUoeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4802 (0x12c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Sep 6 14:21:20 2025 GMT Not After : Sep 13 14:21:20 2025 GMT Subject: CN=68bc4360-4fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:48:7d:03:b4:7f:e7:48:18:e8:b4:a6:39: 0d:d8:41:76:36:5f:5a:46:25:18:b9:f9:1b:7e:cd: f8:ef:78:27:d0:75:6f:fe:71:09:6c:bb:5e:13:42: c0:ee:7f:f0:1f:4b:7b:ad:18:c2:12:f2:98:ec:74: 0f:53:b3:fa:f1:af:14:5e:d2:35:a4:db:1d:6a:cf: bb:fe:85:16:01:7b:db:e8:bb:7c:6c:ba:5b:e9:5d: 6d:fe:f1:88:00:f4:64:7b:e5:7f:d8:ce:79:1e:01: 11:12:ac:b9:b3:09:01:f5:85:e8:96:ed:94:94:88: 73:fc:dc:84:d5:de:d3:cb:9d:92:a8:6f:5e:89:95: 48:5f:95:cd:30:cb:48:d7:79:f1:fc:4d:ed:10:8c: 49:05:99:04:aa:b3:cf:61:50:92:46:83:89:65:b3: a3:05:67:0b:39:41:c4:61:29:27:53:d2:9c:85:3d: 52:c3:f0:6d:b6:10:16:7d:d8:60:e5:0a:f7:9f:33: d6:6a:1c:ca:e9:03:dd:bf:ac:bf:95:4a:95:79:f0: 0f:38:5d:7f:a7:de:6b:d2:43:4d:b9:36:77:96:53: 4f:62:34:f9:0f:f5:94:1c:ad:d0:76:2c:db:fc:f9: 35:28:7c:4f:37:55:28:07:dd:09:fd:12:71:2b:8a: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:9B:51:9E:8E:F8:52:F9:96:1E:40:50:D7:31:86:88:EF:98:50 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d7:9d:dc:56:fc:26:67:eb:8c:6f:40:8c:02:13:81:fe:89: 2b:2d:bb:55:33:7d:50:dc:f2:13:e7:66:ba:1f:25:c7:78:2c: c2:51:99:10:d4:42:6a:7d:25:7c:bd:f6:0b:2e:4d:37:ba:98: 83:5f:c4:15:3d:89:96:65:c9:ba:1c:ba:d0:11:98:e4:be:9d: e2:16:0f:04:68:a5:4b:e4:d0:a4:8f:30:75:ab:8f:d9:6b:f5: c4:88:a7:47:f3:63:1f:81:57:1e:b7:25:c9:42:68:6e:6e:0e: a1:6c:1e:c4:52:d5:a6:e7:2f:8f:a5:3c:17:4d:ba:9e:56:8e: 5d:86:bb:82:bb:e3:0b:77:5c:8b:13:44:4f:1a:fb:5b:d6:d7: b1:67:32:bd:60:75:e0:5c:13:45:f6:66:d4:53:2e:74:be:6c: d9:7f:e2:5f:5f:22:65:25:3b:60:ff:79:e8:db:e6:4a:d9:b6: bb:7d:01:a7:9a:54:fe:02:48:25:90:ed:49:6a:57:82:bd:13: 61:d2:cb:cd:b9:96:57:e9:50:82:19:73:e1:0e:a4:f3:41:a4: c3:ba:11:af:b7:97:64:0e:0d:c5:21:78:7c:52:7d:56:c4:0d: ef:76:d0:4b:f6:5b:23:82:d2:3e:83:9c:db:7a:38:1d:3b:fd: 03:4c:23:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUwOTA2MTQyMTIwWhcNMjUwOTEzMTQyMTIwWjAYMRYwFAYD VQQDEw02OGJjNDM2MC00ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVdIfQO0f+dIGOi0pjkN2EF2Nl9aRiUYufkbfs3473gn0HVv/nEJbLteE0LA 7n/wH0t7rRjCEvKY7HQPU7P68a8UXtI1pNsdas+7/oUWAXvb6Lt8bLpb6V1t/vGI APRke+V/2M55HgEREqy5swkB9YXolu2UlIhz/NyE1d7Ty52SqG9eiZVIX5XNMMtI 13nx/E3tEIxJBZkEqrPPYVCSRoOJZbOjBWcLOUHEYSknU9KchT1Sw/BtthAWfdhg 5Qr3nzPWahzK6QPdv6y/lUqVefAPOF1/p95r0kNNuTZ3llNPYjT5D/WUHK3Qdizb /Pk1KHxPN1UoB90J/RJxK4r6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMivm1Ge jvhS+ZYeQFDXMYaI75hQMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa153cVvwmZ+uMb0CMAhOB/okrLbtVM31Q3PIT52a6HyXHeCzCUZkQ 1EJqfSV8vfYLLk03upiDX8QVPYmWZcm6HLrQEZjkvp3iFg8EaKVL5NCkjzB1q4/Z a/XEiKdH82MfgVcetyXJQmhubg6hbB7EUtWm5y+PpTwXTbqeVo5dhruCu+MLd1yL E0RPGvtb1texZzK9YHXgXBNF9mbUUy50vmzZf+JfXyJlJTtg/3no2+ZK2ba7fQGn mlT+AkglkO1JaleCvRNh0svNuZZX6VCCGXPhDqTzQaTDuhGvt5dkDg3FIXh8Un1W xA3vdtBL9lsjgtI+g5zbejgdO/0DTCOZ -----END CERTIFICATE-----Generated at Sat Sep 6 15:22:47 2025 by rpki-client