$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: aKoUVUeiIBeN16WY5XCU6VcUskz8y24XyGLVj5tWtus= Subject key identifier: 83:4E:FC:1B:7F:AF:19:AE:16:41:1C:DD:89:B7:B9:F8:EE:43:7A:87 Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 0291 Signing time: Sat 23 Aug 2025 01:52:32 +0000 Manifest this update: Sat 23 Aug 2025 01:52:31 +0000 Manifest next update: Sat 30 Aug 2025 01:52:31 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: fzb0piGdcRb3kMvFtmBSw+W/KNuyrhy62hLihEPmels=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: Aug 23 01:52:31 2025 GMT Not After : Aug 30 01:52:31 2025 GMT Subject: CN=68a91edf-74e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:49:5d:1a:fd:88:3e:cf:62:32:9c:00:78: 33:a5:a7:92:08:74:2d:a0:c6:92:b0:26:fa:ec:c1: e8:62:ff:d9:92:02:bd:68:9f:38:74:6d:8e:42:ab: 67:98:f9:f8:4c:4c:9e:23:9b:be:24:40:e1:0f:4b: 5c:7c:51:13:94:e0:e6:c6:e1:2c:b3:dd:43:29:aa: 28:96:b7:0f:05:40:53:88:09:6f:4c:2c:07:05:91: 61:e5:77:1f:00:02:e4:ba:2a:78:ed:75:ff:8b:7c: 3d:05:df:40:fa:a5:3d:fb:55:3c:b0:c4:c1:f2:8c: 2f:ad:9c:7e:9c:65:2c:14:83:fa:77:7d:80:16:9a: 53:7b:58:0d:8c:bf:4c:ca:d4:1d:37:2a:63:60:e3: 90:bb:53:c0:ff:59:b2:0e:9e:58:0e:e3:23:5c:b6: 20:4e:25:d5:d8:7f:87:bd:84:65:cf:77:64:92:30: 4d:9b:13:b6:4f:ce:15:c6:50:c0:51:d3:a7:66:ae: 3b:3a:87:34:7d:c4:cf:13:f8:a9:6e:e5:f6:aa:b6: 93:44:68:bc:15:e7:91:5e:6a:44:08:6a:cf:16:62: 4b:2f:49:9f:e9:3c:3d:b4:e6:2e:ab:cc:b5:f2:be: d1:9b:25:ba:18:f1:f5:63:56:10:96:cc:7f:08:f6: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4E:FC:1B:7F:AF:19:AE:16:41:1C:DD:89:B7:B9:F8:EE:43:7A:87 X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:75:0c:3d:6b:45:f2:48:ec:f6:71:20:45:14:14:b9:b8:37: e7:1f:f7:d5:30:55:d4:9f:a9:56:2b:d7:1e:d3:dd:19:51:74: 42:a5:5e:51:3d:ab:b5:60:34:71:b6:24:b2:b4:61:39:6b:a8: 48:b1:f6:78:b8:53:9e:c6:36:7c:35:bf:c9:2a:04:96:03:d7: 9f:5d:01:10:52:2f:b8:8b:93:04:24:d2:a0:de:c3:19:e7:21: 7e:bf:8f:8d:01:8b:fd:bd:91:72:29:59:57:89:d8:c2:0c:5a: 71:28:cd:5b:e4:56:93:46:f9:4e:92:da:c7:04:26:de:c1:d5: f2:c2:c6:24:94:3e:2e:72:9d:ed:d4:9e:73:ba:3b:10:bd:4e: 22:c1:e1:15:a7:83:18:4c:19:12:0b:56:23:67:96:a0:6f:35: 09:41:4c:9d:36:66:6f:14:39:4c:d6:6c:2e:76:50:9f:29:f9: f5:cd:77:93:2c:54:75:cf:8a:f5:60:35:c3:25:e7:f8:11:ac: 6b:38:81:74:4d:ce:3e:c2:14:f7:9d:46:ff:cf:a1:e2:81:3a: 20:fe:ed:85:79:5f:80:b6:95:75:19:f8:b1:4d:cd:6c:20:5f: 44:ea:6d:55:38:86:39:d8:26:68:12:ca:3e:6f:f6:11:9f:50: e0:24:80:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjUwODIzMDE1MjMxWhcNMjUwODMwMDE1MjMxWjAYMRYwFAYD VQQDEw02OGE5MWVkZi03NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOlJXRr9iD7PYjKcAHgzpaeSCHQtoMaSsCb67MHoYv/ZkgK9aJ84dG2OQqtn mPn4TEyeI5u+JEDhD0tcfFETlODmxuEss91DKaoolrcPBUBTiAlvTCwHBZFh5Xcf AALkuip47XX/i3w9Bd9A+qU9+1U8sMTB8owvrZx+nGUsFIP6d32AFppTe1gNjL9M ytQdNypjYOOQu1PA/1myDp5YDuMjXLYgTiXV2H+HvYRlz3dkkjBNmxO2T84VxlDA UdOnZq47Ooc0fcTPE/ipbuX2qraTRGi8FeeRXmpECGrPFmJLL0mf6Tw9tOYuq8y1 8r7RmyW6GPH1Y1YQlsx/CPZLCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINO/Bt/ rxmuFkEc3Ym3ufjuQ3qHMB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1dQw9a0XySOz2cSBFFBS5uDfnH/fVMFXUn6lWK9ce090ZUXRCpV5R Pau1YDRxtiSytGE5a6hIsfZ4uFOexjZ8Nb/JKgSWA9efXQEQUi+4i5MEJNKg3sMZ 5yF+v4+NAYv9vZFyKVlXidjCDFpxKM1b5FaTRvlOktrHBCbewdXywsYklD4ucp3t 1J5zujsQvU4iweEVp4MYTBkSC1YjZ5agbzUJQUydNmZvFDlM1mwudlCfKfn1zXeT LFR1z4r1YDXDJef4EaxrOIF0Tc4+whT3nUb/z6HigTog/u2FeV+AtpV1GfixTc1s IF9E6m1VOIY52CZoEso+b/YRn1DgJIAn -----END CERTIFICATE-----Generated at Sat Aug 23 19:02:58 2025 by rpki-client