$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: zGSVulzfmdodzheSZyTbOWuncEIW1UkT1Xpi2NXQnJc= Subject key identifier: C0:43:48:46:E7:26:2D:DC:1A:26:4F:B9:4A:B0:35:04:2E:09:5E:EF Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 09AE Signing time: Wed 20 Aug 2025 15:00:08 +0000 Manifest this update: Wed 20 Aug 2025 15:00:08 +0000 Manifest next update: Wed 27 Aug 2025 15:00:08 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: n+Pl79dH9SZbeYZ0GUhAKwNYeOJsp2ZzUCLv59C/aJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Aug 20 15:00:08 2025 GMT Not After : Aug 27 15:00:08 2025 GMT Subject: CN=68a5e2f8-5c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:4a:9d:e7:c6:51:1c:6c:ef:a0:62:30:75: ea:cb:9c:05:6b:d7:21:92:ad:6a:ac:6b:a3:d5:eb: 37:c3:be:f3:7a:93:c2:f5:48:fd:61:82:c3:cc:56: 74:11:1b:31:9d:c2:b6:bf:04:95:10:ba:a3:63:a4: 4f:88:62:87:75:28:77:cb:e6:a2:87:53:3b:9a:50: 18:bb:38:26:c6:a4:22:70:ad:fe:73:38:60:50:46: 67:69:ff:df:52:3c:c7:ea:59:c8:ff:45:d1:a1:51: ed:5c:00:79:cc:8b:e8:39:95:54:d9:dd:96:19:1e: 50:ba:27:ea:90:b9:bd:49:ce:04:0e:3a:44:80:3e: 7b:0d:f7:71:7f:ef:7c:11:64:65:68:f6:04:f2:97: e5:66:df:e8:fd:22:6a:3c:d9:52:8d:16:33:92:75: ec:be:e5:7e:12:a4:04:4e:6e:6f:1a:fa:29:01:5d: d8:d6:f3:ea:60:2f:5c:2d:db:59:8e:17:a4:d3:f7: 53:37:6c:ed:93:6f:e4:8b:86:20:e4:9c:06:09:ce: 75:c2:52:1d:41:bc:47:a9:dc:74:43:50:9a:40:8b: 88:e2:cd:11:e4:e5:e3:35:f6:4f:6c:74:a0:75:1c: 7f:18:ae:6f:23:4e:d1:96:73:4c:02:41:ff:9d:48: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:48:46:E7:26:2D:DC:1A:26:4F:B9:4A:B0:35:04:2E:09:5E:EF X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:a3:d5:00:29:2d:ef:87:d4:29:94:bb:14:03:2f:96:43: c3:ca:c3:32:42:57:b6:6c:1c:2b:15:be:52:ed:a2:40:16:94: 11:74:1d:06:7b:ca:b6:86:18:b8:9b:04:d5:01:86:c3:d6:ef: da:7d:7f:5e:0c:47:e4:f6:da:ad:b9:1c:5d:71:32:1e:e7:9e: 7a:89:f0:2c:76:f8:ab:04:c9:38:f4:f7:49:b3:32:de:4f:1c: a7:2c:f2:62:46:21:64:fc:d0:4e:17:36:1b:86:d0:a4:3b:82: ad:f1:3c:47:a7:49:1e:2b:53:6b:17:3b:d4:c7:45:30:5d:6f: e4:30:b2:bd:4e:71:1c:84:15:f4:bd:4f:48:6a:ed:d4:f7:14: 27:a0:29:23:88:0b:4b:1d:18:35:24:69:93:c1:04:7a:bf:7e: 63:ce:76:79:22:e3:cb:00:d1:40:fa:86:e8:ce:44:78:79:01: ab:2f:f1:90:67:3b:05:39:59:52:46:d4:d0:01:e1:ee:17:70: eb:f3:3f:a8:54:ac:3f:1f:dc:1a:7f:a6:43:2c:8a:34:34:dd: d2:d4:da:33:72:4b:1c:a9:4d:45:cf:68:3f:30:6e:8a:c9:5b: 38:39:70:17:04:0e:f3:55:ac:4d:02:63:55:3e:67:f9:57:d5: cc:e2:4f:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjUwODIwMTUwMDA4WhcNMjUwODI3MTUwMDA4WjAYMRYwFAYD VQQDEw02OGE1ZTJmOC01YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/RKnefGURxs76BiMHXqy5wFa9chkq1qrGuj1es3w77zepPC9Uj9YYLDzFZ0 ERsxncK2vwSVELqjY6RPiGKHdSh3y+aih1M7mlAYuzgmxqQicK3+czhgUEZnaf/f UjzH6lnI/0XRoVHtXAB5zIvoOZVU2d2WGR5QuifqkLm9Sc4EDjpEgD57Dfdxf+98 EWRlaPYE8pflZt/o/SJqPNlSjRYzknXsvuV+EqQETm5vGvopAV3Y1vPqYC9cLdtZ jhek0/dTN2ztk2/ki4Yg5JwGCc51wlIdQbxHqdx0Q1CaQIuI4s0R5OXjNfZPbHSg dRx/GK5vI07RlnNMAkH/nUhHIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBDSEbn Ji3cGiZPuUqwNQQuCV7vMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdBaPVACkt74fUKZS7FAMvlkPDysMyQle2bBwrFb5S7aJAFpQRdB0G e8q2hhi4mwTVAYbD1u/afX9eDEfk9tqtuRxdcTIe5556ifAsdvirBMk49PdJszLe TxynLPJiRiFk/NBOFzYbhtCkO4Kt8TxHp0keK1NrFzvUx0UwXW/kMLK9TnEchBX0 vU9Iau3U9xQnoCkjiAtLHRg1JGmTwQR6v35jznZ5IuPLANFA+obozkR4eQGrL/GQ ZzsFOVlSRtTQAeHuF3Dr8z+oVKw/H9waf6ZDLIo0NN3S1NozckscqU1Fz2g/MG6K yVs4OXAXBA7zVaxNAmNVPmf5V9XM4k9R -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:45 2025 by rpki-client