$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: +HohwPgzYQ+ClULGYxeGnqsuaX79n2zHZcYxET0Xqf8= Subject key identifier: DC:BF:68:3C:1B:31:7F:43:B7:11:2A:E9:A5:F6:08:E9:39:7D:B6:61 Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 5083 Signing time: Fri 22 Aug 2025 16:29:06 +0000 Manifest this update: Fri 22 Aug 2025 16:29:05 +0000 Manifest next update: Fri 29 Aug 2025 16:29:05 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: XpzgXPZeoFRby4Et/WBPs/GWZMdJXx94dLJyJHiFiMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: Aug 22 16:29:05 2025 GMT Not After : Aug 29 16:29:05 2025 GMT Subject: CN=68a89ad1-07b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:b9:03:0f:9a:e8:f3:06:d4:7a:19:b2:57: a6:4c:40:bb:cb:20:16:2f:e2:9b:1c:61:7e:3b:38: 26:33:81:36:31:50:ec:8b:83:f4:8a:e2:85:b8:af: 2d:4f:18:2d:4c:53:76:f9:93:a0:de:cb:e9:af:06: 38:74:88:46:0b:5f:62:37:f0:49:59:57:78:9c:83: e8:37:da:15:5f:19:99:38:23:b8:2d:06:f7:e9:6d: 6d:33:36:6f:45:68:11:4d:98:05:f2:8c:c9:90:68: 0d:29:60:4a:6c:55:73:d9:f1:32:f1:08:27:df:73: e3:20:f3:99:e5:6b:a8:13:eb:7b:3f:f6:c2:26:d5: 84:b8:15:84:b9:01:76:7a:d5:cd:53:69:db:59:35: 6f:8c:bf:9c:0b:05:17:87:b4:95:3e:d6:33:d1:f3: 0a:85:7c:31:1d:74:80:64:a4:7d:be:0b:7b:23:42: b0:b2:8c:95:88:e0:3e:f3:88:fd:66:fd:9a:19:ea: 24:10:4c:0f:75:91:58:7c:33:f7:f0:66:d0:3e:8e: 72:3c:df:ae:5a:15:9b:1b:c6:78:02:a3:58:71:21: d4:f6:f8:3a:1e:c1:a3:b5:a3:64:89:fa:52:38:09: a5:59:e3:60:96:5c:2c:b3:48:f9:1b:d8:4b:f2:47: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BF:68:3C:1B:31:7F:43:B7:11:2A:E9:A5:F6:08:E9:39:7D:B6:61 X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:54:4e:b7:cf:bb:bb:e8:c1:39:f4:2d:e7:31:96:71:e4:e1: 17:51:df:c0:8e:32:ab:83:7b:81:be:ef:11:1a:73:23:df:09: 9a:a8:46:be:ac:f3:5a:3e:3f:b9:59:05:56:3a:79:38:f1:ea: 83:e6:ff:9b:c3:cf:01:5b:5e:c7:07:0a:b4:90:6a:8d:13:19: aa:e6:19:d3:4e:20:ec:11:b7:ce:ea:f9:12:27:f5:17:84:2c: bc:4c:12:5c:96:c6:c3:3e:26:25:8f:a8:98:59:98:75:7c:04: e1:e3:64:e7:25:6a:60:e1:ef:84:ba:23:0e:d5:7e:1b:8c:e9: 64:c5:ee:1e:5e:9f:5a:36:73:98:35:32:64:55:c9:c5:7e:bd: 40:61:26:dd:47:98:cf:45:82:c1:06:29:01:c6:c3:7b:ee:56: a2:2b:e6:56:2a:66:5a:fa:e9:4d:94:82:3a:96:ff:74:b5:ba: 65:c6:09:23:db:47:db:06:84:a1:5b:8d:9a:1b:ef:6a:a3:69: 1f:71:a5:6c:32:62:b0:b1:9b:53:4f:03:85:d6:ed:6e:54:68: 7f:6c:a2:55:81:bc:3b:ec:1c:47:08:ba:bf:5a:a7:b0:4c:f6: a6:a0:f7:03:68:2b:38:5f:9e:14:ef:b4:f9:f3:9a:15:d2:80: 93:f5:59:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjUwODIyMTYyOTA1WhcNMjUwODI5MTYyOTA1WjAYMRYwFAYD VQQDEw02OGE4OWFkMS0wN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLK5Aw+a6PMG1HoZslemTEC7yyAWL+KbHGF+OzgmM4E2MVDsi4P0iuKFuK8t TxgtTFN2+ZOg3svprwY4dIhGC19iN/BJWVd4nIPoN9oVXxmZOCO4LQb36W1tMzZv RWgRTZgF8ozJkGgNKWBKbFVz2fEy8Qgn33PjIPOZ5WuoE+t7P/bCJtWEuBWEuQF2 etXNU2nbWTVvjL+cCwUXh7SVPtYz0fMKhXwxHXSAZKR9vgt7I0KwsoyViOA+84j9 Zv2aGeokEEwPdZFYfDP38GbQPo5yPN+uWhWbG8Z4AqNYcSHU9vg6HsGjtaNkifpS OAmlWeNgllwss0j5G9hL8kdauwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy/aDwb MX9DtxEq6aX2COk5fbZhMB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVE63z7u76ME59C3nMZZx5OEXUd/AjjKrg3uBvu8RGnMj3wmaqEa+ rPNaPj+5WQVWOnk48eqD5v+bw88BW17HBwq0kGqNExmq5hnTTiDsEbfO6vkSJ/UX hCy8TBJclsbDPiYlj6iYWZh1fATh42TnJWpg4e+EuiMO1X4bjOlkxe4eXp9aNnOY NTJkVcnFfr1AYSbdR5jPRYLBBikBxsN77laiK+ZWKmZa+ulNlII6lv90tbplxgkj 20fbBoShW42aG+9qo2kfcaVsMmKwsZtTTwOF1u1uVGh/bKJVgbw77BxHCLq/Wqew TPamoPcDaCs4X54U77T585oV0oCT9VkS -----END CERTIFICATE-----Generated at Sun Aug 24 06:24:41 2025 by rpki-client