$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: NJEW/47zNR7W9FhSu7JimUEViVWzuOU7oeBE+6/q+uc= Subject key identifier: F7:D1:3B:D3:82:2B:59:A8:D6:C4:D0:60:AA:85:13:6D:8B:84:B2:14 Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 07D6 Signing time: Fri 22 Aug 2025 21:16:33 +0000 Manifest this update: Fri 22 Aug 2025 21:16:32 +0000 Manifest next update: Fri 29 Aug 2025 21:16:32 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: W+3PgWDVYIM2uLvi2Y7XhhL/GBaajl9qiZftDmJIAy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Aug 22 21:16:32 2025 GMT Not After : Aug 29 21:16:32 2025 GMT Subject: CN=68a8de31-7af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:d4:90:0e:ba:88:34:81:a9:e7:cd:64:70: 4c:d2:7d:16:af:a1:50:9c:f9:06:3a:6a:a0:3b:24: 47:49:ed:19:92:70:04:8c:f8:42:40:5c:d8:58:52: 04:6f:eb:37:26:8a:83:36:39:02:5a:15:2c:8d:a8: 21:83:dd:3f:c9:a3:de:7c:90:d2:04:ee:bd:d0:78: 4b:2e:fe:a0:4b:5c:6f:8f:05:82:2b:ce:e2:41:e3: 90:23:65:5c:c7:e8:4a:2f:ef:9a:30:8a:85:62:23: ff:0b:a9:25:4e:d8:c2:fd:33:0c:ba:93:54:69:ef: 55:97:1c:82:c6:a8:27:b1:84:32:61:9d:d1:10:87: 66:0a:4c:8f:2d:ec:bf:64:5c:f1:82:ed:55:2c:b6: f0:0c:30:84:74:a7:70:63:03:66:8b:5c:00:81:90: ab:ab:d5:0a:18:1b:84:52:ca:b3:cd:ad:b3:ff:96: fc:e1:d0:00:91:71:e9:cf:44:75:71:75:1c:7a:84: d2:3c:08:9f:81:ad:00:e5:95:25:85:44:05:92:4a: 47:4d:2a:ff:69:e6:06:94:ad:73:78:2d:7c:1e:ab: ed:ed:c4:78:5e:b6:d1:76:b8:7b:30:96:24:f5:73: 7e:94:96:8f:fe:d2:2f:f0:5e:b2:0e:c0:44:62:7a: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D1:3B:D3:82:2B:59:A8:D6:C4:D0:60:AA:85:13:6D:8B:84:B2:14 X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d9:07:98:62:0e:9d:22:57:b2:61:68:8d:67:44:99:46:09: 3e:b2:12:6b:ce:8e:f6:5e:87:1c:81:bc:f0:6e:a9:bd:a6:aa: 63:1f:e4:40:63:22:38:08:98:67:89:85:2f:9f:d2:a0:bb:09: 6d:35:0e:b0:92:25:3f:59:fb:a8:7b:ce:82:96:2a:3b:15:04: 80:9b:4f:70:cc:b2:99:22:99:70:3a:ec:72:56:cf:63:e3:82: 81:c8:59:68:2e:df:15:09:68:50:a5:6d:18:60:88:b9:5a:a9: f3:ae:13:0d:12:34:b3:d3:d7:4e:c0:b0:5d:cb:0d:9b:76:6c: 4d:26:52:00:1e:4d:1d:c6:fa:ef:c2:a3:2c:17:8c:a5:9f:29: 38:b2:3b:c6:3d:a0:66:ab:f0:d5:92:ff:d2:a5:2b:04:9b:69: 75:f5:d9:9d:5d:f9:4b:29:a2:88:09:09:f2:62:3e:a9:4e:5b: 7f:eb:3d:0a:2b:0e:f2:e6:58:c0:a4:90:64:56:03:e6:5c:f3: 77:61:b2:b9:13:3d:58:9d:94:3f:d0:67:16:d3:8a:67:c6:86: c1:bc:b0:79:4e:1f:6e:c5:8b:f4:10:36:87:ed:ec:de:af:5e: 86:13:88:6b:dd:bf:9e:c9:cb:da:e7:18:1f:c2:94:7b:a5:f7: 95:07:9e:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwODIyMjExNjMyWhcNMjUwODI5MjExNjMyWjAYMRYwFAYD VQQDEw02OGE4ZGUzMS03YWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmrUkA66iDSBqefNZHBM0n0Wr6FQnPkGOmqgOyRHSe0ZknAEjPhCQFzYWFIE b+s3JoqDNjkCWhUsjaghg90/yaPefJDSBO690HhLLv6gS1xvjwWCK87iQeOQI2Vc x+hKL++aMIqFYiP/C6klTtjC/TMMupNUae9VlxyCxqgnsYQyYZ3REIdmCkyPLey/ ZFzxgu1VLLbwDDCEdKdwYwNmi1wAgZCrq9UKGBuEUsqzza2z/5b84dAAkXHpz0R1 cXUceoTSPAifga0A5ZUlhUQFkkpHTSr/aeYGlK1zeC18Hqvt7cR4XrbRdrh7MJYk 9XN+lJaP/tIv8F6yDsBEYnoa+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfRO9OC K1mo1sTQYKqFE22LhLIUMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF2QeYYg6dIleyYWiNZ0SZRgk+shJrzo72Xoccgbzwbqm9pqpjH+RA YyI4CJhniYUvn9KguwltNQ6wkiU/Wfuoe86Clio7FQSAm09wzLKZIplwOuxyVs9j 44KByFloLt8VCWhQpW0YYIi5WqnzrhMNEjSz09dOwLBdyw2bdmxNJlIAHk0dxvrv wqMsF4ylnyk4sjvGPaBmq/DVkv/SpSsEm2l19dmdXflLKaKICQnyYj6pTlt/6z0K Kw7y5ljApJBkVgPmXPN3YbK5Ez1YnZQ/0GcW04pnxobBvLB5Th9uxYv0EDaH7eze r16GE4hr3b+eycva5xgfwpR7pfeVB55u -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:41 2025 by rpki-client