$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: 3mR9kT6+lLXRtPALddukH8e1eTFHBjhmagpplb0lFBE= Subject key identifier: 39:83:05:92:DF:27:4D:20:D6:8A:61:C5:D9:FE:F0:63:2B:70:F6:90 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 88 Signing time: Sat 23 Aug 2025 06:49:11 +0000 Manifest this update: Sat 23 Aug 2025 06:49:10 +0000 Manifest next update: Sat 30 Aug 2025 06:49:10 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: eYNcOXLWJTi5MT1GaMRhgJ9tc2HY2fwCOIcdszKb4PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Aug 23 06:49:10 2025 GMT Not After : Aug 30 06:49:10 2025 GMT Subject: CN=68a96467-60a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:08:4e:6e:a0:f9:d0:4d:1b:0e:fc:12:58: 6e:17:6c:08:9e:6a:72:39:99:da:9c:1c:af:29:10: 5a:6b:10:40:32:17:34:36:6b:0f:b5:53:f4:f9:10: c2:9a:66:3c:40:b4:98:bf:e0:7a:66:e1:ff:6f:f2: a6:5d:39:cd:42:b6:d5:0c:d4:0a:75:ae:47:4a:f7: 7f:31:7f:69:6d:a7:09:71:b4:64:94:42:c7:e6:00: ea:dd:4e:c5:27:dc:6e:f2:7b:59:aa:3f:09:52:5d: 56:22:a7:fb:ab:21:bd:fb:1e:4c:bc:46:d5:b1:e4: 91:0c:7e:8f:8d:72:21:f4:60:29:e6:af:30:65:89: a5:f5:a8:97:d8:97:ff:00:30:07:d9:fc:f4:ff:97: cc:e6:1b:52:39:d3:ed:97:66:41:06:e3:f0:be:bb: 4b:5f:e7:e8:84:e6:41:60:ad:22:9b:f1:d0:c9:ee: ad:bb:e4:18:5d:52:4c:dd:03:e8:46:37:36:51:9b: 1d:3c:86:3c:4e:54:b0:5a:8f:43:4d:5d:5b:e8:ad: f1:b0:97:0d:72:38:06:bf:e1:15:2b:b7:a9:02:8f: 7f:55:fe:d7:43:ac:b9:59:d2:81:f6:60:f5:45:af: c2:27:1f:ce:3e:c8:66:3c:9d:22:84:03:91:0a:33: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:05:92:DF:27:4D:20:D6:8A:61:C5:D9:FE:F0:63:2B:70:F6:90 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4f:80:71:07:15:06:2b:1e:2b:da:fd:d5:43:34:97:6f:aa: dc:07:2d:a9:20:7b:5d:a3:d1:2c:60:ec:a7:6f:5a:53:90:51: c0:34:14:40:29:40:50:4e:05:bb:1f:25:4b:f9:01:5b:89:63: 69:39:9f:8f:38:3c:33:71:3c:57:7a:db:bc:fe:13:e0:1d:9c: e3:ea:3e:af:d6:2d:30:46:4d:6a:35:a1:99:02:58:c6:19:c1: 85:e3:62:f4:cb:ab:d3:e6:f7:af:25:9b:8b:93:36:b5:81:24: 64:01:28:1d:73:53:53:67:41:57:11:86:dd:c1:3a:df:c9:57: f9:bf:09:24:3f:fd:16:d7:db:a3:d0:c2:af:07:4a:5a:62:54: d0:a0:35:a9:ee:ef:f3:ec:29:c3:5c:28:f0:41:74:76:83:a3: e8:31:d6:17:37:de:a5:bf:7c:46:ee:05:70:49:4d:3a:e6:df: 88:28:8b:02:b5:bb:9c:f1:67:58:ce:5b:de:c6:d5:c9:84:80: c2:8a:d3:f2:8b:42:24:d7:c8:58:42:b9:b7:2a:fb:09:43:cf: eb:c7:e7:78:28:90:f9:f1:c0:d0:df:bc:7e:a0:a0:5c:78:17: f6:30:04:b4:0d:31:4b:80:e4:bc:37:1f:1c:15:b9:bc:72:a9: 94:2b:1e:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUwODIzMDY0OTEwWhcNMjUwODMwMDY0OTEwWjAYMRYwFAYD VQQDEw02OGE5NjQ2Ny02MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/YITm6g+dBNGw78ElhuF2wInmpyOZnanByvKRBaaxBAMhc0NmsPtVP0+RDC mmY8QLSYv+B6ZuH/b/KmXTnNQrbVDNQKda5HSvd/MX9pbacJcbRklELH5gDq3U7F J9xu8ntZqj8JUl1WIqf7qyG9+x5MvEbVseSRDH6PjXIh9GAp5q8wZYml9aiX2Jf/ ADAH2fz0/5fM5htSOdPtl2ZBBuPwvrtLX+fohOZBYK0im/HQye6tu+QYXVJM3QPo Rjc2UZsdPIY8TlSwWo9DTV1b6K3xsJcNcjgGv+EVK7epAo9/Vf7XQ6y5WdKB9mD1 Ra/CJx/OPshmPJ0ihAORCjMYSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmDBZLf J00g1ophxdn+8GMrcPaQMB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCT4BxBxUGKx4r2v3VQzSXb6rcBy2pIHtdo9EsYOynb1pTkFHANBRA KUBQTgW7HyVL+QFbiWNpOZ+PODwzcTxXetu8/hPgHZzj6j6v1i0wRk1qNaGZAljG GcGF42L0y6vT5vevJZuLkza1gSRkASgdc1NTZ0FXEYbdwTrfyVf5vwkkP/0W19uj 0MKvB0paYlTQoDWp7u/z7CnDXCjwQXR2g6PoMdYXN96lv3xG7gVwSU065t+IKIsC tbuc8WdYzlvextXJhIDCitPyi0Ik18hYQrm3KvsJQ8/rx+d4KJD58cDQ37x+oKBc eBf2MAS0DTFLgOS8Nx8cFbm8cqmUKx4g -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:08 2025 by rpki-client