$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: I9+f5QphCCvNhzAUo8KC24VN9HVQayaaXSA8238cdgI= Subject key identifier: 24:6E:C3:AB:54:05:61:B4:CB:C7:2B:A0:49:3E:02:3D:9C:97:5F:CE Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 6E Signing time: Sat 23 Aug 2025 07:09:36 +0000 Manifest this update: Sat 23 Aug 2025 07:09:35 +0000 Manifest next update: Sat 30 Aug 2025 07:09:35 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: F2GwrHK/Bx57p19+zAdWfLS1WI+kGPn0bXpAO8cvJbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Aug 23 07:09:35 2025 GMT Not After : Aug 30 07:09:35 2025 GMT Subject: CN=68a9692f-81c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:5c:c5:2d:18:c3:a8:e1:a4:46:b3:f7:cb: e4:cf:a5:70:13:9e:b1:6e:92:f1:88:9e:93:e8:e1: 51:b0:48:87:7b:c0:9a:92:0b:be:ad:fc:9c:99:de: 8b:96:f4:86:e5:9e:35:29:27:d0:b1:f6:56:db:2e: 5c:51:5d:3e:23:9a:24:f7:7a:d7:4e:bb:d8:b4:ff: 48:66:43:cf:3d:63:fc:36:f7:fc:42:eb:bd:25:3a: 6f:82:5c:6a:f1:ce:04:0f:ae:ec:f3:57:3f:a1:e9: 5b:a1:9b:5a:35:3a:9e:e0:f3:8f:18:b8:5b:36:77: 0d:e3:d4:88:ec:46:a6:8a:46:e5:5a:cd:8b:6e:48: 46:21:9b:c7:43:8c:e5:85:c6:07:83:e4:3a:bc:3f: 09:c5:60:a0:c0:f7:59:b8:1d:30:7d:92:4a:45:a6: 9b:40:c8:e0:47:19:8f:19:2d:03:b3:57:97:fa:27: 50:3b:55:19:9f:17:b2:d3:31:54:2d:fd:c9:d6:08: 14:f6:13:4b:24:18:ea:81:b8:21:76:59:6e:13:06: 13:fd:7b:67:b4:d9:3d:26:4f:80:84:7b:b6:3f:e7: b4:80:53:77:92:c4:98:cc:19:71:90:d6:d2:c5:07: d6:c5:05:09:15:34:3b:59:81:e2:81:f2:c3:24:46: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6E:C3:AB:54:05:61:B4:CB:C7:2B:A0:49:3E:02:3D:9C:97:5F:CE X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:30:21:7e:0c:d8:bd:1b:f5:22:65:b2:6f:c4:8e:13:63:4a: 8d:75:a6:7b:9e:05:ac:bf:c4:81:43:05:94:ed:89:69:f0:65: 97:16:bb:d9:8d:c4:16:49:ca:6c:a5:b9:40:c0:61:5a:d0:81: f3:30:a6:d1:dc:6b:38:d5:74:44:63:4e:ec:f1:ec:ac:55:2c: 67:94:bf:bf:da:20:0b:21:ff:a7:0c:72:2f:e8:9e:12:24:e6: 16:92:a4:64:02:8c:b1:a6:26:e5:47:41:60:49:7a:87:9d:60: f0:d6:78:db:5f:65:68:6f:3f:5d:73:a4:29:9b:9f:b7:fd:bc: cd:fd:57:c4:62:b8:a8:a3:22:e2:72:c3:ee:d0:68:3f:00:9e: 48:39:46:7a:25:9d:1d:5c:9d:a7:4c:38:3c:14:d7:c8:2b:e5: 47:ba:0e:c1:06:4a:7f:7d:5e:11:7b:dc:fe:6c:b1:c8:66:c5: 5e:e3:83:b3:ab:e3:75:71:84:73:c5:49:86:49:48:08:ea:8c: 71:f2:32:aa:bf:ce:55:88:4b:55:85:cc:d0:d4:6e:10:42:3b: 36:41:fd:11:96:f0:71:f6:bc:72:df:b1:94:77:f6:47:fe:9b: 83:7a:34:ad:eb:8f:78:24:f9:00:a1:e1:58:ca:f8:55:82:f7: 9a:36:b9:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA4MjMwNzA5MzVaFw0yNTA4MzAwNzA5MzVaMBgxFjAUBgNV BAMTDTY4YTk2OTJmLTgxYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeqlzFLRjDqOGkRrP3y+TPpXATnrFukvGInpPo4VGwSId7wJqSC76t/JyZ3ouW 9IblnjUpJ9Cx9lbbLlxRXT4jmiT3etdOu9i0/0hmQ889Y/w29/xC670lOm+CXGrx zgQPruzzVz+h6Vuhm1o1Op7g848YuFs2dw3j1IjsRqaKRuVazYtuSEYhm8dDjOWF xgeD5Dq8PwnFYKDA91m4HTB9kkpFpptAyOBHGY8ZLQOzV5f6J1A7VRmfF7LTMVQt /cnWCBT2E0skGOqBuCF2WW4TBhP9e2e02T0mT4CEe7Y/57SAU3eSxJjMGXGQ1tLF B9bFBQkVNDtZgeKB8sMkRgqvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJG7Dq1QF YbTLxyugST4CPZyXX84wHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALAwIX4M2L0b9SJlsm/EjhNjSo11pnueBay/xIFDBZTtiWnwZZcWu9mN xBZJymyluUDAYVrQgfMwptHcazjVdERjTuzx7KxVLGeUv7/aIAsh/6cMci/onhIk 5haSpGQCjLGmJuVHQWBJeoedYPDWeNtfZWhvP11zpCmbn7f9vM39V8RiuKijIuJy w+7QaD8Ankg5RnolnR1cnadMODwU18gr5Ue6DsEGSn99XhF73P5sschmxV7jg7Or 43VxhHPFSYZJSAjqjHHyMqq/zlWIS1WFzNDUbhBCOzZB/RGW8HH2vHLfsZR39kf+ m4N6NK3rj3gk+QCh4VjK+FWC95o2ubw= -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:48 2025 by rpki-client