$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: ksP0nEHcz1DyBU2+0EQ8I6du42o+1osGE5E0ISgrcTs= Subject key identifier: 8A:3E:77:98:B9:F5:54:05:B3:D9:42:74:6E:0F:21:2B:D3:63:F5:18 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0CA5 Signing time: Fri 22 Aug 2025 18:41:58 +0000 Manifest this update: Fri 22 Aug 2025 18:41:58 +0000 Manifest next update: Fri 29 Aug 2025 18:41:58 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: 2JUUR7bIW1hV3XZam3lrYU05NiZQxYXnrmsAoVDaiQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Aug 22 18:41:58 2025 GMT Not After : Aug 29 18:41:58 2025 GMT Subject: CN=68a8b9f6-b50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:c2:1e:61:24:28:c9:01:e4:3c:6b:27:c8: ea:d7:b6:22:4d:dd:7f:70:d5:82:db:4f:30:22:3b: cb:6c:01:54:82:e2:1a:1c:7c:f1:b4:d6:c9:42:10: 30:d9:a8:25:e2:04:2c:5f:2c:d9:3e:3d:1a:fc:90: c7:2f:55:ad:98:89:74:04:f6:50:83:ea:5d:f1:64: ef:c5:e7:93:73:d6:98:c4:c9:7f:e4:f8:40:82:47: 52:cb:de:d8:bc:39:56:a1:8e:bc:32:f8:83:ea:76: 06:b7:df:04:d8:db:2c:89:4a:22:d7:e1:50:0b:af: 36:67:31:dd:ea:4e:03:5c:d4:f2:b8:64:2d:f2:f9: 02:22:c3:b6:0d:46:42:aa:e3:6f:1e:c8:a6:60:10: 29:42:70:72:27:5d:7d:d5:ff:72:a5:42:f4:88:28: 98:99:18:2a:66:f9:df:96:f9:37:0a:06:55:a4:ed: 09:07:ba:ae:64:2c:c4:f9:21:76:31:92:90:f1:a6: 65:9d:16:9f:e7:8e:d2:23:43:13:2f:5a:40:da:74: 9d:f4:ee:ba:da:62:e6:43:80:a0:3d:ab:af:74:fa: 08:4f:22:73:03:f8:10:80:4f:24:88:ec:ed:13:2a: 40:2f:5f:48:3f:74:d1:22:48:bd:01:3f:e8:f7:5c: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:77:98:B9:F5:54:05:B3:D9:42:74:6E:0F:21:2B:D3:63:F5:18 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ac:fe:39:dc:47:6c:1f:c9:aa:1a:3a:0c:a0:a8:4e:a6:e1: 2e:c3:a6:f6:b2:ab:dd:25:b5:e3:42:7a:f6:4f:01:05:65:ea: ef:7c:34:87:3c:41:95:f3:3f:82:51:93:61:3d:01:36:53:50: a8:5f:da:17:22:67:33:0a:b2:83:6e:5a:f0:37:fa:75:25:ff: 63:5b:f7:92:d6:64:ab:0a:89:98:f4:5c:6d:a1:6e:34:0e:09: 3f:10:e5:10:b6:f3:e8:6f:b7:59:88:4b:da:a1:51:e6:b4:8b: 43:4e:be:0d:80:13:3a:07:39:ae:bf:ff:0c:a9:6a:94:ef:9c: e2:ec:d2:5a:95:a6:0f:7c:85:c1:3d:39:32:c1:bb:67:09:57: 47:e3:f0:91:b3:78:6b:db:81:88:9a:af:f1:9a:92:dc:bf:15: 32:54:50:f6:e2:6b:fb:1b:99:52:f8:3a:b0:3d:0f:b7:fe:67: 6b:48:e2:39:94:76:2c:20:4d:42:e4:db:5d:fd:64:f1:d5:51: 2e:bb:2a:e1:d5:e5:2c:f5:4c:96:17:b6:1a:2b:86:83:23:ea: d0:6c:ee:56:68:ca:33:3e:13:6a:dc:10:65:46:fc:77:c1:05: 83:1f:51:98:25:d2:d9:48:76:03:f6:b9:e2:49:8e:d5:ef:49: 42:a2:ae:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUwODIyMTg0MTU4WhcNMjUwODI5MTg0MTU4WjAYMRYwFAYD VQQDEw02OGE4YjlmNi1iNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrnCHmEkKMkB5DxrJ8jq17YiTd1/cNWC208wIjvLbAFUguIaHHzxtNbJQhAw 2agl4gQsXyzZPj0a/JDHL1WtmIl0BPZQg+pd8WTvxeeTc9aYxMl/5PhAgkdSy97Y vDlWoY68MviD6nYGt98E2NssiUoi1+FQC682ZzHd6k4DXNTyuGQt8vkCIsO2DUZC quNvHsimYBApQnByJ1191f9ypUL0iCiYmRgqZvnflvk3CgZVpO0JB7quZCzE+SF2 MZKQ8aZlnRaf547SI0MTL1pA2nSd9O662mLmQ4CgPauvdPoITyJzA/gQgE8kiOzt EypAL19IP3TRIki9AT/o91znBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo+d5i5 9VQFs9lCdG4PISvTY/UYMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhrP453EdsH8mqGjoMoKhOpuEuw6b2sqvdJbXjQnr2TwEFZervfDSH PEGV8z+CUZNhPQE2U1CoX9oXImczCrKDblrwN/p1Jf9jW/eS1mSrComY9FxtoW40 Dgk/EOUQtvPob7dZiEvaoVHmtItDTr4NgBM6Bzmuv/8MqWqU75zi7NJalaYPfIXB PTkywbtnCVdH4/CRs3hr24GImq/xmpLcvxUyVFD24mv7G5lS+DqwPQ+3/mdrSOI5 lHYsIE1C5Ntd/WTx1VEuuyrh1eUs9UyWF7YaK4aDI+rQbO5WaMozPhNq3BBlRvx3 wQWDH1GYJdLZSHYD9rniSY7V70lCoq66 -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:37 2025 by rpki-client