$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft File: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json) Hash identifier: GaD+jEPopxFAS7QYCRLbbV3XapBZcCyxe8MQRUyyyHw= Subject key identifier: 23:08:8F:13:DE:D3:D6:41:E4:D7:C4:81:A1:F5:6E:10:B0:A8:0D:D8 Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93 Certificate issuer: /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793 Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft Manifest number: 34D1 Signing time: Mon 20 Oct 2025 15:07:10 +0000 Manifest this update: Mon 20 Oct 2025 15:07:09 +0000 Manifest next update: Mon 27 Oct 2025 15:07:09 +0000 Files and hashes: 1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: 4mO5XlPRKCBwApnOBD4R4s7qeV3plcd3+54Wzgv9hlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793 Validity Not Before: Oct 20 15:07:09 2025 GMT Not After : Oct 27 15:07:09 2025 GMT Subject: CN=68f6501e-70be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:29:e7:a7:8c:11:91:7c:b8:56:54:62:df: 39:0f:88:81:26:0f:55:c3:26:d5:af:87:23:6c:94: d3:b0:13:80:c0:ab:f1:a7:38:22:75:5a:f8:88:e1: 62:dd:1e:6e:69:84:90:8d:e4:a8:64:8d:0f:ba:11: 69:f1:2a:1c:cc:ac:c5:08:a5:76:3d:a4:bc:d4:8b: f3:e5:bb:1e:2a:76:f9:f1:2a:9f:df:04:52:5f:b5: 20:cf:d7:b5:ce:de:0e:7f:79:8b:89:4d:b7:52:da: 8e:1e:be:aa:ab:d7:36:56:1f:a9:eb:9e:2c:21:14: f8:e8:79:28:f6:d3:d2:78:81:0a:b2:c0:99:96:b8: a8:ae:7e:79:0b:b0:5b:6b:73:67:0d:dc:4a:df:08: 3b:a5:63:ba:fd:ca:bf:b6:b7:55:e8:c9:8a:23:c1: e5:74:6f:49:9c:44:a2:ca:7c:b0:b6:41:a8:b9:c4: 9f:82:21:40:d2:22:1a:de:b2:8c:dd:00:a7:1f:fb: 12:1c:fe:8c:25:51:97:e9:34:5c:c2:f3:bc:91:3c: 09:95:65:30:5c:54:15:a9:d7:41:be:8f:be:14:2c: e1:fd:42:67:39:57:bf:26:40:6a:c2:e3:ac:60:0c: f2:78:72:02:6d:bf:fb:50:cd:67:a9:4f:21:f7:32: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:08:8F:13:DE:D3:D6:41:E4:D7:C4:81:A1:F5:6E:10:B0:A8:0D:D8 X509v3 Authority Key Identifier: keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:da:3d:1f:c6:10:ba:b7:af:6b:ae:4d:a6:a5:00:bf:60:10: f6:12:04:0d:8b:f1:02:fc:d3:00:df:c3:89:d1:1a:0e:68:15: 6b:e4:3b:3c:3b:cb:a9:8f:f1:9c:4b:ef:7d:41:37:f9:a3:0f: 6d:b5:11:7f:7f:e2:45:7c:36:c7:c0:bd:e5:45:c8:da:c8:d8: 62:3e:2b:02:fb:19:99:3f:19:1c:83:92:00:88:d3:13:19:80: 44:f6:13:f0:34:06:71:14:aa:45:df:30:f2:9d:82:b7:84:86: e9:0e:f9:18:43:db:01:94:37:be:ed:6e:d6:e7:40:c0:a1:72: 2d:8b:80:7a:fa:74:c5:90:7f:5b:68:28:a7:37:de:a1:0b:c0: 6a:3e:8d:52:38:97:35:34:6d:83:8c:e2:4c:02:e0:a8:f7:ce: a8:6b:30:bb:17:e1:d3:df:8e:37:28:7d:cb:e9:c5:bc:54:b7: 56:8f:02:0e:b4:7a:d0:96:76:d8:25:2d:76:16:42:06:6e:9f: d7:59:b3:25:4c:0e:d1:1e:24:34:14:c0:38:07:42:3d:77:e9: 87:50:96:fa:a3:8d:dd:61:a0:90:00:4f:30:69:c2:b2:86:17: 63:af:53:17:c0:21:90:83:e7:08:dd:37:e5:5f:90:a9:69:e9: 04:85:cf:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0NzkxMTAvBgNVBAUTKERGNDA2OUYyNDZFOUZFQTk3QjBBQkUzQTVGRUM3NzhF NTM5MzE3OTMwHhcNMjUxMDIwMTUwNzA5WhcNMjUxMDI3MTUwNzA5WjAYMRYwFAYD VQQDEw02OGY2NTAxZS03MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXIp56eMEZF8uFZUYt85D4iBJg9VwybVr4cjbJTTsBOAwKvxpzgidVr4iOFi 3R5uaYSQjeSoZI0PuhFp8SoczKzFCKV2PaS81Ivz5bseKnb58Sqf3wRSX7Ugz9e1 zt4Of3mLiU23UtqOHr6qq9c2Vh+p654sIRT46Hko9tPSeIEKssCZlriorn55C7Bb a3NnDdxK3wg7pWO6/cq/trdV6MmKI8HldG9JnESiynywtkGoucSfgiFA0iIa3rKM 3QCnH/sSHP6MJVGX6TRcwvO8kTwJlWUwXFQVqddBvo++FCzh/UJnOVe/JkBqwuOs YAzyeHICbb/7UM1nqU8h9zI7kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMIjxPe 09ZB5NfEgaH1bhCwqA3YMB8GA1UdIwQYMBaAFN9AafJG6f6pewq+Ol/sd45TkxeT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQ3OS83QzdCQkYwODFE OUUxMUUyQTg3RTdCOEUwOEIwMkNEMi8zMEJwOGticF9xbDdDcjQ2WC14M2psT1RG NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwQnA4a2JwX3FsN0NyNDZYLXgzamxPVEY1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQ3OS83QzdCQkYwODFEOUUxMUUyQTg3RTdCOEUwOEIwMkNEMi8zMEJwOGticF9x bDdDcjQ2WC14M2psT1RGNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB2j0fxhC6t69rrk2mpQC/YBD2EgQNi/EC/NMA38OJ0RoOaBVr5Ds8 O8upj/GcS+99QTf5ow9ttRF/f+JFfDbHwL3lRcjayNhiPisC+xmZPxkcg5IAiNMT GYBE9hPwNAZxFKpF3zDynYK3hIbpDvkYQ9sBlDe+7W7W50DAoXIti4B6+nTFkH9b aCinN96hC8BqPo1SOJc1NG2DjOJMAuCo986oazC7F+HT3443KH3L6cW8VLdWjwIO tHrQlnbYJS12FkIGbp/XWbMlTA7RHiQ0FMA4B0I9d+mHUJb6o43dYaCQAE8wacKy hhdjr1MXwCGQg+cI3TflX5CpaekEhc9c -----END CERTIFICATE-----Generated at Tue Oct 21 04:53:24 2025 by rpki-client