$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: dnldfuXObIfZNLg5yM93/iEOlIGpNmVXFXW2nmpi6fg= Subject key identifier: EB:9B:E6:9B:4A:E3:94:EC:BF:34:E5:92:87:D4:D9:CC:25:C8:A2:B5 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 033C Signing time: Fri 19 Sep 2025 01:28:16 +0000 Manifest this update: Fri 19 Sep 2025 01:28:15 +0000 Manifest next update: Fri 26 Sep 2025 01:28:15 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: WSoYdraO3b2zjhbXPB6QceKNdhUTh38mwkgAPsVogvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Sep 19 01:28:15 2025 GMT Not After : Sep 26 01:28:15 2025 GMT Subject: CN=68ccb1b0-cdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:25:b1:f9:8e:dc:60:18:b4:0a:8b:40:23: b6:02:a4:68:25:99:67:0e:46:21:64:5a:fc:dc:64: 34:b8:21:58:36:0b:63:64:80:d9:d3:36:ec:f2:fa: 7b:30:05:be:d1:be:b2:e4:c8:3a:7e:15:d9:4e:dc: a4:e9:3c:ab:be:a8:9e:1d:c6:64:0b:be:7f:c1:05: b5:80:df:44:9e:c6:8e:bd:62:68:dd:b6:75:7c:f2: aa:e0:23:fa:31:4d:b4:e2:f6:da:68:f1:2c:bb:7b: e1:24:ac:b0:45:97:46:e9:d7:4e:44:ff:1c:34:61: cb:59:5c:c6:b5:b4:e0:bb:c3:db:7b:dd:3f:c9:fd: b8:bd:75:71:d0:73:48:33:57:34:83:60:b7:d0:e8: d1:6e:33:3d:34:00:be:b2:3e:9b:29:1c:ee:36:87: 60:8f:a3:6c:87:9a:55:ba:05:c7:b5:8e:76:30:3e: f7:7a:d4:06:9f:dd:1b:7a:00:5c:b7:a0:51:63:fb: b4:7f:7d:05:31:1e:6c:f5:5e:2e:68:27:a6:b0:eb: c5:6f:30:13:eb:90:d1:69:39:3a:45:b5:19:42:57: 27:e1:8f:46:c0:2f:1b:c2:1f:a2:d4:c3:cb:13:d4: 41:19:24:a6:7e:d7:f1:5e:02:c0:71:d7:8e:de:93: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9B:E6:9B:4A:E3:94:EC:BF:34:E5:92:87:D4:D9:CC:25:C8:A2:B5 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ea:34:d7:fc:9a:8d:28:95:c7:dd:bd:3f:70:74:cf:ec:45: 85:24:1b:0a:9d:60:6c:d8:4a:fa:8b:d2:e4:d6:50:a5:db:39: 27:da:df:4b:8e:4c:b9:5e:d4:df:b8:4a:ae:a4:dc:6f:c7:71: 11:8f:41:9d:cc:c7:65:b6:71:5b:bf:a4:11:6b:72:4c:fd:30: a5:c6:13:10:bb:96:3c:bf:32:f2:af:1e:38:dd:36:a8:e6:87: 44:c3:c0:22:c9:3a:a6:19:34:28:11:a5:ef:e9:14:3f:8b:0c: ce:c0:ec:94:84:a7:0d:66:fe:85:fa:ed:c8:2e:70:7a:5b:54: 2b:63:1c:0a:6e:a1:55:9e:4b:25:96:b7:17:41:ef:fa:d3:26: 96:8f:89:47:05:a5:13:36:28:44:03:13:fa:75:a7:f1:67:9c: 59:b0:df:fc:e0:b4:98:ea:f9:f7:d6:b3:e3:83:12:5e:43:b9: 14:0f:c7:d2:e0:0b:a3:7e:31:76:d0:eb:77:e3:bc:fc:11:a3: 67:87:b2:3f:f5:13:ad:dc:7e:ad:d7:42:79:c4:9a:b9:3f:9f: 95:96:88:7a:27:f0:c2:8a:9a:16:f8:92:97:96:8b:3a:61:f5: ab:77:fb:84:c8:42:82:5f:03:b1:8b:bf:62:10:ae:cc:c3:ab: 70:c1:e1:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUwOTE5MDEyODE1WhcNMjUwOTI2MDEyODE1WjAYMRYwFAYD VQQDEw02OGNjYjFiMC1jZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNIlsfmO3GAYtAqLQCO2AqRoJZlnDkYhZFr83GQ0uCFYNgtjZIDZ0zbs8vp7 MAW+0b6y5Mg6fhXZTtyk6TyrvqieHcZkC75/wQW1gN9EnsaOvWJo3bZ1fPKq4CP6 MU204vbaaPEsu3vhJKywRZdG6ddORP8cNGHLWVzGtbTgu8Pbe90/yf24vXVx0HNI M1c0g2C30OjRbjM9NAC+sj6bKRzuNodgj6Nsh5pVugXHtY52MD73etQGn90begBc t6BRY/u0f30FMR5s9V4uaCemsOvFbzAT65DRaTk6RbUZQlcn4Y9GwC8bwh+i1MPL E9RBGSSmftfxXgLAcdeO3pMmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOub5ptK 45TsvzTlkofU2cwlyKK1MB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU6jTX/JqNKJXH3b0/cHTP7EWFJBsKnWBs2Er6i9Lk1lCl2zkn2t9L jky5XtTfuEqupNxvx3ERj0GdzMdltnFbv6QRa3JM/TClxhMQu5Y8vzLyrx443Tao 5odEw8AiyTqmGTQoEaXv6RQ/iwzOwOyUhKcNZv6F+u3ILnB6W1QrYxwKbqFVnksl lrcXQe/60yaWj4lHBaUTNihEAxP6dafxZ5xZsN/84LSY6vn31rPjgxJeQ7kUD8fS 4AujfjF20Ot347z8EaNnh7I/9ROt3H6t10J5xJq5P5+Vloh6J/DCipoW+JKXlos6 YfWrd/uEyEKCXwOxi79iEK7Mw6twweHs -----END CERTIFICATE-----Generated at Fri Sep 19 13:57:57 2025 by rpki-client