$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: QocoD3ykOUll8rdP9xVQO3WCZCizLMPCZsU8tAOxGFY= Subject key identifier: E0:69:27:89:C6:A9:45:9B:B9:50:5D:02:FD:D7:06:F8:3A:7F:51:93 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 34B7 Signing time: Fri 22 Aug 2025 14:41:29 +0000 Manifest this update: Fri 22 Aug 2025 14:41:28 +0000 Manifest next update: Fri 29 Aug 2025 14:41:28 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: UutMCWJZA20jj2JaViFRjgggpF9xLnXYoRc3SUWNOjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Aug 22 14:41:28 2025 GMT Not After : Aug 29 14:41:28 2025 GMT Subject: CN=68a88199-6890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:f7:87:97:5f:4d:ee:3c:2f:af:32:c0:d7: b4:45:8e:ee:5e:de:80:a8:0c:b8:dd:cc:99:9e:14: 2c:bb:7a:ae:e8:47:24:21:51:e2:d7:28:33:ab:d6: 76:91:8c:ae:dd:a1:62:c8:c4:25:b5:2d:dd:cb:45: 8d:e3:1f:24:91:2e:db:81:52:fa:2a:16:fa:38:34: 93:75:ef:a3:81:0f:74:a7:25:54:86:20:3f:2a:5c: 8f:4c:62:74:13:e4:12:2a:f9:c4:0f:90:51:03:8b: 20:6a:d0:0e:9e:db:44:50:76:34:dc:e8:8a:00:e5: 51:cc:49:2e:d9:53:36:32:b7:5f:f5:77:bf:21:4b: 34:a2:62:84:7d:7e:5d:51:eb:9e:35:78:e2:a4:2a: 24:5f:a0:95:0e:90:96:84:02:82:e6:5e:37:47:40: c7:01:a0:2c:7c:c2:1e:aa:0a:3e:89:40:3b:26:4f: 02:fc:8f:fc:db:63:ce:5f:5f:9a:fc:fc:ed:6b:f6: 0b:8e:14:2b:55:41:fd:e1:51:78:a9:1c:d1:e2:9c: 56:86:f3:e9:cb:0f:83:45:78:85:1a:51:a6:32:8f: 39:d9:4c:bc:44:bc:4d:85:bf:84:c8:e1:30:5f:6a: f7:3a:b5:bc:18:26:3f:53:81:fc:97:39:7d:79:ab: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:27:89:C6:A9:45:9B:B9:50:5D:02:FD:D7:06:F8:3A:7F:51:93 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:85:7b:58:03:a6:3a:3f:e6:5a:86:34:0a:ac:20:33:c4:0b: a0:ae:bf:28:0e:7d:57:a1:82:01:2a:b8:a6:55:ad:c0:64:4c: 9b:b4:4a:8a:51:7c:d0:03:dd:06:57:6a:20:6d:f7:48:79:ce: 11:32:90:71:bc:a2:9b:d0:4d:6d:78:dd:d8:90:d4:14:98:de: b7:ee:69:f2:75:70:74:0c:36:18:8b:a4:1c:8a:c7:f4:ba:fd: 2a:48:50:42:77:6d:f7:23:b7:1f:86:96:7d:5c:70:53:52:93: d7:af:1c:e1:04:cb:74:a2:a9:5c:b5:47:f7:e6:97:17:66:82: 20:4b:59:8b:9c:c1:ed:95:07:f2:62:0f:95:8a:02:2b:5c:e5: 09:3a:f2:b8:00:4d:27:0c:6e:2c:bf:2d:63:44:33:ce:04:c4: 33:8e:d7:41:14:2e:db:b4:13:10:13:cc:59:6d:77:a4:4a:0a: d2:bb:3a:96:a8:22:07:af:b0:43:a5:f4:6b:46:1b:a7:1a:27: 3d:e8:41:65:05:58:ab:64:cc:21:8c:d2:18:44:2e:da:5a:5f: 3b:3b:73:5d:a2:e1:b3:0c:5e:97:ad:9d:3a:99:4d:bf:89:0e: d6:36:53:00:89:02:3d:13:a9:f0:4e:84:9d:98:9c:19:bf:31: 6b:e6:db:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUwODIyMTQ0MTI4WhcNMjUwODI5MTQ0MTI4WjAYMRYwFAYD VQQDEw02OGE4ODE5OS02ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8b3h5dfTe48L68ywNe0RY7uXt6AqAy43cyZnhQsu3qu6EckIVHi1ygzq9Z2 kYyu3aFiyMQltS3dy0WN4x8kkS7bgVL6Khb6ODSTde+jgQ90pyVUhiA/KlyPTGJ0 E+QSKvnED5BRA4sgatAOnttEUHY03OiKAOVRzEku2VM2Mrdf9Xe/IUs0omKEfX5d UeueNXjipCokX6CVDpCWhAKC5l43R0DHAaAsfMIeqgo+iUA7Jk8C/I/822POX1+a /Pzta/YLjhQrVUH94VF4qRzR4pxWhvPpyw+DRXiFGlGmMo852Uy8RLxNhb+EyOEw X2r3OrW8GCY/U4H8lzl9easKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBpJ4nG qUWbuVBdAv3XBvg6f1GTMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCahXtYA6Y6P+ZahjQKrCAzxAugrr8oDn1XoYIBKrimVa3AZEybtEqK UXzQA90GV2ogbfdIec4RMpBxvKKb0E1teN3YkNQUmN637mnydXB0DDYYi6Qcisf0 uv0qSFBCd233I7cfhpZ9XHBTUpPXrxzhBMt0oqlctUf35pcXZoIgS1mLnMHtlQfy Yg+VigIrXOUJOvK4AE0nDG4svy1jRDPOBMQzjtdBFC7btBMQE8xZbXekSgrSuzqW qCIHr7BDpfRrRhunGic96EFlBVirZMwhjNIYRC7aWl87O3NdouGzDF6XrZ06mU2/ iQ7WNlMAiQI9E6nwToSdmJwZvzFr5ttX -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:22 2025 by rpki-client