$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: EcnUr7heHf4zTU3N/FiY4tI18AtoiiGr4lMOliaM4Ic= Subject key identifier: 49:5A:11:A7:BB:CA:0B:A4:BC:6D:B2:47:78:38:08:67:19:3D:80:EE Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 018D Signing time: Sat 23 Aug 2025 03:36:41 +0000 Manifest this update: Sat 23 Aug 2025 03:36:41 +0000 Manifest next update: Sat 30 Aug 2025 03:36:41 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: MgSGmqhREHpI8e/KAmPcmT6/ij8KteuLpp9PkDddHaI=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: iHabIHEz/PTHKVI4qhPpj+ZDCYtCE+FTF89syGeIFww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Aug 23 03:36:41 2025 GMT Not After : Aug 30 03:36:41 2025 GMT Subject: CN=68a93749-b3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:39:3c:ee:be:d7:71:e2:66:9a:e5:46:cb: a4:92:88:83:c2:2c:d2:ce:c3:20:8f:51:f9:fb:ea: c3:15:7c:e3:8f:33:d6:a3:31:47:e2:59:0d:b6:64: c1:99:1a:ce:48:99:d5:8f:b3:99:df:5b:4a:ce:03: 22:a5:c4:62:19:99:3e:d2:0c:8a:fc:6d:eb:48:53: d3:e6:76:a6:64:b0:ce:ea:be:f7:c7:79:05:18:ef: c2:94:72:ae:78:6a:d9:ac:3d:b2:2b:41:33:fc:64: 0a:e1:f3:47:b8:92:8a:63:38:03:ac:51:41:c2:a9: f5:16:ca:08:e6:ec:35:0f:2c:87:74:19:a4:92:f7: de:8a:a0:f6:7e:f9:ce:1b:51:c7:a0:9a:9c:08:5c: 7e:12:24:e0:78:ff:aa:85:8b:da:3f:d6:51:37:49: ed:ea:17:14:9c:cc:54:86:bb:9e:82:02:63:77:2b: a7:dd:b0:57:d7:5e:3d:c2:ca:b0:a3:cc:92:9b:6f: 66:20:27:cb:3d:b0:0d:41:cf:f9:5d:0d:0b:10:57: 86:46:a8:b9:e1:da:5c:51:fb:21:ac:9f:06:7e:a9: 2a:eb:1e:88:45:d7:30:a0:cc:1a:39:5a:59:82:77: ac:ea:cb:70:3d:f2:2f:c5:4d:5f:30:25:3b:3e:1a: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5A:11:A7:BB:CA:0B:A4:BC:6D:B2:47:78:38:08:67:19:3D:80:EE X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ba:77:02:fe:f5:c2:43:67:60:8b:1c:b1:95:8a:1e:d7:af: 73:44:32:7b:c0:75:58:f1:9c:e3:8d:cc:68:6b:af:00:0f:30: 9c:11:c8:6e:54:df:19:be:d7:d1:63:f7:f5:58:6b:4f:10:66: af:50:3e:2b:1c:e7:c0:02:d3:53:47:d3:47:eb:60:5c:07:6e: 21:3a:e6:b4:8b:ac:10:39:a8:51:64:f4:ab:1c:a7:c1:47:11: c7:cf:ad:3e:1b:24:76:7a:80:95:29:4e:ab:02:91:16:54:d8: 79:8b:a0:81:95:e7:14:9b:d6:a5:49:68:69:c3:98:22:8f:d7: 2e:b7:ec:dd:72:d1:0c:12:7e:9b:d1:3f:6d:12:43:81:9f:e8: f4:ec:dd:52:9d:38:96:f9:4f:44:3a:ec:d0:d7:dd:10:f5:12: 9b:66:a2:60:dd:8c:64:be:06:27:63:9e:10:bb:89:02:62:bb: a7:52:80:3d:e4:f6:c5:34:27:e4:56:fc:38:e4:27:83:ce:ed: 3a:9e:c4:8e:71:ec:4f:5b:37:b5:5b:7f:c8:5e:59:af:06:e8: 1b:86:36:4f:90:2e:86:ae:cc:84:63:b4:a8:05:0e:3d:fd:4f: f3:ac:dd:77:61:ae:73:a7:14:6f:89:26:47:21:89:de:d4:13: 86:24:44:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwODIzMDMzNjQxWhcNMjUwODMwMDMzNjQxWjAYMRYwFAYD VQQDEw02OGE5Mzc0OS1iM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA05PO6+13HiZprlRsukkoiDwizSzsMgj1H5++rDFXzjjzPWozFH4lkNtmTB mRrOSJnVj7OZ31tKzgMipcRiGZk+0gyK/G3rSFPT5namZLDO6r73x3kFGO/ClHKu eGrZrD2yK0Ez/GQK4fNHuJKKYzgDrFFBwqn1FsoI5uw1DyyHdBmkkvfeiqD2fvnO G1HHoJqcCFx+EiTgeP+qhYvaP9ZRN0nt6hcUnMxUhrueggJjdyun3bBX1149wsqw o8ySm29mICfLPbANQc/5XQ0LEFeGRqi54dpcUfshrJ8Gfqkq6x6IRdcwoMwaOVpZ gnes6stwPfIvxU1fMCU7PhowPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElaEae7 ygukvG2yR3g4CGcZPYDuMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRuncC/vXCQ2dgixyxlYoe169zRDJ7wHVY8Zzjjcxoa68ADzCcEchu VN8ZvtfRY/f1WGtPEGavUD4rHOfAAtNTR9NH62BcB24hOua0i6wQOahRZPSrHKfB RxHHz60+GyR2eoCVKU6rApEWVNh5i6CBlecUm9alSWhpw5gij9cut+zdctEMEn6b 0T9tEkOBn+j07N1SnTiW+U9EOuzQ190Q9RKbZqJg3YxkvgYnY54Qu4kCYrunUoA9 5PbFNCfkVvw45CeDzu06nsSOcexPWze1W3/IXlmvBugbhjZPkC6GrsyEY7SoBQ49 /U/zrN13Ya5zpxRviSZHIYne1BOGJEQT -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:20 2025 by rpki-client