$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: 2GwFQrox9dTJGWd0D4rYi6OQkpmyZPWi0d4JmwOuiEI= Subject key identifier: 55:84:6D:A9:61:00:96:FE:47:D3:CE:6D:EB:8B:56:61:35:B5:90:B8 Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 1393 Signing time: Fri 22 Aug 2025 19:12:09 +0000 Manifest this update: Fri 22 Aug 2025 19:12:09 +0000 Manifest next update: Fri 29 Aug 2025 19:12:09 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: hbMAE7hJ0Y0FyCZrYRh1xE3bOVDJ1boTvSw9GCumQII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: Aug 22 19:12:09 2025 GMT Not After : Aug 29 19:12:09 2025 GMT Subject: CN=68a8c109-4184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:15:a9:9a:24:2c:d3:56:a5:25:30:39:28:a5: 1d:c5:8f:51:43:02:57:3a:cc:cc:4f:a9:bf:96:84: 5a:26:06:65:7a:09:7f:27:45:ad:f5:10:75:9e:32: ed:d0:1a:ff:d9:75:27:b7:ce:b9:65:f7:57:18:48: 7f:d5:c8:8b:71:a3:1a:d1:9e:e9:7f:20:2d:45:e6: 38:a3:90:d9:39:c8:4b:0e:b1:8c:21:35:e5:32:6e: 91:a2:62:65:1a:89:34:ff:b1:a8:4e:9c:6b:6c:50: 9e:47:ca:cc:d5:eb:ff:3b:0b:ab:7a:55:16:0e:e4: 1a:8f:ce:88:43:71:d0:e3:0d:f1:a8:4b:5d:4b:bb: 2e:71:74:37:6a:3c:69:bb:d0:30:d9:f2:2a:68:95: 48:50:d8:6e:69:12:db:db:86:f7:d5:2e:53:c3:b9: 26:24:73:5e:cd:d5:df:11:a2:54:3a:78:54:3e:21: ae:81:d8:da:54:f8:44:46:78:c1:ad:e0:30:22:db: 4d:79:fb:e7:c3:c2:94:46:93:b8:38:c0:a1:b2:10: a1:5c:67:56:db:e0:64:48:d1:80:ca:87:f0:53:cc: 86:89:94:4e:ee:21:16:ff:1e:0c:85:e3:3d:12:3d: e6:5b:1a:3e:d3:ab:78:f4:76:b5:c9:6b:c0:95:f8: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:84:6D:A9:61:00:96:FE:47:D3:CE:6D:EB:8B:56:61:35:B5:90:B8 X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:62:5c:33:1a:c4:ca:16:ce:d5:47:8d:11:be:ad:2c:c6:22: ca:ab:e7:e9:4f:f4:a2:02:73:d5:f0:5b:50:39:a1:dd:25:84: 48:d2:0a:68:0b:96:80:44:57:7d:08:af:e1:e8:98:bf:82:2a: 51:18:52:cd:bc:f3:d7:a8:81:f3:5b:a8:73:f2:65:be:26:85: b9:a3:78:94:5f:e8:34:32:be:ec:d2:60:52:1e:e5:c2:7d:a1: ee:37:a5:4f:49:d1:aa:f3:17:37:69:46:ec:e5:b8:36:3e:fe: 85:cf:ca:74:3b:3f:c1:8b:39:f3:92:14:83:6a:b3:e2:02:fc: e7:a8:23:63:56:19:4f:d1:88:f0:7b:5e:a5:79:4d:fb:08:41: cc:f7:31:4e:21:3d:8b:3f:24:9b:3f:56:a3:df:e0:3f:9c:00: 52:de:a2:57:61:60:68:31:94:07:ca:d1:51:01:0c:11:96:af: 8d:80:62:24:af:cc:91:09:2f:b7:6a:28:f7:d0:5f:f6:64:70: 76:ff:f0:f2:18:7d:ea:bb:a8:06:d6:1e:5e:f8:b0:02:a3:c0: 22:bd:03:4e:4f:a5:5c:74:8e:d3:c3:13:29:a1:86:53:5a:26: 38:7a:0d:b8:2e:4b:31:d2:16:26:19:2c:7e:87:35:8c:d6:ac: b5:b0:5c:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjUwODIyMTkxMjA5WhcNMjUwODI5MTkxMjA5WjAYMRYwFAYD VQQDEw02OGE4YzEwOS00MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxWpmiQs01alJTA5KKUdxY9RQwJXOszMT6m/loRaJgZlegl/J0Wt9RB1njLt 0Br/2XUnt865ZfdXGEh/1ciLcaMa0Z7pfyAtReY4o5DZOchLDrGMITXlMm6RomJl Gok0/7GoTpxrbFCeR8rM1ev/OwurelUWDuQaj86IQ3HQ4w3xqEtdS7sucXQ3ajxp u9Aw2fIqaJVIUNhuaRLb24b31S5Tw7kmJHNezdXfEaJUOnhUPiGugdjaVPhERnjB reAwIttNefvnw8KURpO4OMChshChXGdW2+BkSNGAyofwU8yGiZRO7iEW/x4MheM9 Ej3mWxo+06t49Ha1yWvAlfgE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWEbalh AJb+R9PObeuLVmE1tZC4MB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxYlwzGsTKFs7VR40Rvq0sxiLKq+fpT/SiAnPV8FtQOaHdJYRI0gpo C5aARFd9CK/h6Ji/gipRGFLNvPPXqIHzW6hz8mW+JoW5o3iUX+g0Mr7s0mBSHuXC faHuN6VPSdGq8xc3aUbs5bg2Pv6Fz8p0Oz/BiznzkhSDarPiAvznqCNjVhlP0Yjw e16leU37CEHM9zFOIT2LPySbP1aj3+A/nABS3qJXYWBoMZQHytFRAQwRlq+NgGIk r8yRCS+3aij30F/2ZHB2//DyGH3qu6gG1h5e+LACo8AivQNOT6VcdI7TwxMpoYZT WiY4eg24Lksx0hYmGSx+hzWM1qy1sFxQ -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:54 2025 by rpki-client