$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json) Hash identifier: fwNvqmp0cnpH5LxQUN7knkFpNpI+IUiKuNudaEwI8ZE= Subject key identifier: E9:A6:D7:E3:98:F6:95:E3:DE:0E:4C:39:12:70:E8:70:AD:B3:30:85 Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:55:29 +0000 Manifest this update: Fri 22 Aug 2025 14:55:29 +0000 Manifest next update: Fri 29 Aug 2025 14:55:29 +0000 Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: KDgZiSJuXY0Ml2jbrkG7mTjLOolniabv98GEdlrG/m8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Validity Not Before: Aug 22 14:55:29 2025 GMT Not After : Aug 29 14:55:29 2025 GMT Subject: CN=68a884e1-d39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fd:91:f7:30:f8:a8:81:05:5a:de:f8:6f:5f: 58:10:1e:6b:36:2a:a3:b6:83:b1:c1:e9:9d:c6:03: b9:72:cb:ba:3a:de:6b:23:f2:ce:7a:14:c4:af:20: 3c:9d:3e:0a:5a:aa:1a:30:55:da:8d:a0:1e:d3:4b: af:84:17:09:e0:74:b5:3b:54:7e:a8:77:da:9e:55: 2f:ac:ed:5a:11:97:c0:77:21:d6:4e:93:bb:0e:e0: c5:4c:1e:c0:77:05:50:12:87:e8:a3:d9:10:d0:ce: eb:51:31:f7:f2:bf:70:a2:b8:59:34:65:7f:ef:09: 20:55:b2:1f:97:e1:e7:ae:f1:0e:d8:d1:a2:c0:26: f1:a8:f4:cd:fb:d1:40:99:91:a1:19:b1:85:1b:3c: 22:0c:56:ee:a0:5f:5b:a5:ae:5b:d3:85:20:54:ab: 6f:82:56:6f:66:b1:7b:14:40:15:92:69:39:d0:8f: 9b:38:45:cd:fa:07:e4:db:9a:12:90:57:21:56:22: c2:2f:67:b1:65:42:08:27:75:1d:90:0a:69:b8:8a: 66:29:f6:67:67:da:37:60:cb:1d:e4:62:74:2d:f7: 4c:f5:96:bc:ba:e3:57:63:4b:bd:72:94:fd:55:32: ce:fa:2b:c2:33:a2:e8:bd:f3:b3:a4:b8:01:fd:e0: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A6:D7:E3:98:F6:95:E3:DE:0E:4C:39:12:70:E8:70:AD:B3:30:85 X509v3 Authority Key Identifier: keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:a8:32:a9:11:2c:eb:81:fb:31:51:f6:52:53:be:6c:f7: 5b:63:21:21:80:b4:24:f5:02:2b:5b:82:c7:3d:f3:3a:3f:4d: 03:28:33:97:db:05:f1:49:90:38:fa:3e:74:0a:6e:df:f7:e5: ee:79:91:19:b7:9c:87:ea:2d:60:9a:6f:bb:98:9e:d0:5a:e2: b8:70:34:c0:13:36:19:a2:f1:ff:d0:32:b0:11:75:65:c3:16: 5e:9a:b2:c8:bb:17:90:07:1f:1e:2b:96:82:40:df:33:e0:43: 03:3e:75:ae:61:f6:af:d9:da:1f:37:01:56:94:35:d9:51:5e: 6b:b4:d7:c7:4e:5c:68:35:2d:33:dd:e3:49:b8:ef:89:14:cf: a0:bb:41:00:d1:45:73:b3:3c:81:f9:5d:c3:b8:75:81:4d:63: 22:a1:8f:2a:3c:7a:ff:d6:b1:82:51:cc:f4:ae:2c:cc:4f:c1: 75:37:df:f6:ab:8e:14:dd:ae:ee:e4:36:aa:d5:15:01:72:77: 4a:49:4b:8d:80:e4:04:98:cd:55:38:e5:a7:5f:72:4c:46:b2: 48:e9:a1:de:5e:a5:c0:e6:81:9f:cb:bd:97:ff:81:b6:13:d5: cd:e5:08:de:23:e2:d8:31:6d:67:92:c9:ee:13:da:a4:36:99: 6e:ba:b1:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDk4NTI2QUYxOEE4M0EzMzRGNTc5OTgyQTMxNzlCNkRE MUU5N0RFMkUwHhcNMjUwODIyMTQ1NTI5WhcNMjUwODI5MTQ1NTI5WjAYMRYwFAYD VQQDEw02OGE4ODRlMS1kMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8f2R9zD4qIEFWt74b19YEB5rNiqjtoOxwemdxgO5csu6Ot5rI/LOehTEryA8 nT4KWqoaMFXajaAe00uvhBcJ4HS1O1R+qHfanlUvrO1aEZfAdyHWTpO7DuDFTB7A dwVQEofoo9kQ0M7rUTH38r9worhZNGV/7wkgVbIfl+HnrvEO2NGiwCbxqPTN+9FA mZGhGbGFGzwiDFbuoF9bpa5b04UgVKtvglZvZrF7FEAVkmk50I+bOEXN+gfk25oS kFchViLCL2exZUIIJ3UdkAppuIpmKfZnZ9o3YMsd5GJ0LfdM9Za8uuNXY0u9cpT9 VTLO+ivCM6LovfOzpLgB/eA/nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmm1+OY 9pXj3g5MORJw6HCtszCFMB8GA1UdIwQYMBaAFJhSavGKg6M09XmYKjF5tt0el94u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8yNTdDRjcyNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96VDFlWmdxTVhtMjNSNlgz aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GSnE4WXFEb3pUMWVaZ3FNWG0yM1I2WDNpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8yNTdDRjcyNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96 VDFlWmdxTVhtMjNSNlgzaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6agyqREs64H7MVH2UlO+bPdbYyEhgLQk9QIrW4LHPfM6P00DKDOX 2wXxSZA4+j50Cm7f9+XueZEZt5yH6i1gmm+7mJ7QWuK4cDTAEzYZovH/0DKwEXVl wxZemrLIuxeQBx8eK5aCQN8z4EMDPnWuYfav2dofNwFWlDXZUV5rtNfHTlxoNS0z 3eNJuO+JFM+gu0EA0UVzszyB+V3DuHWBTWMioY8qPHr/1rGCUcz0rizMT8F1N9/2 q44U3a7u5Daq1RUBcndKSUuNgOQEmM1VOOWnX3JMRrJI6aHeXqXA5oGfy72X/4G2 E9XN5QjeI+LYMW1nksnuE9qkNpluurFE -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:39 2025 by rpki-client