$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: blyEOkcVTo9ly5Ylrg5RPYCjXFZSPYvGpgcYy8FTTic= Subject key identifier: 92:F3:6C:23:CD:E3:56:80:40:52:67:24:BA:E4:D3:5B:49:07:D9:5B Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3C0C Signing time: Fri 22 Aug 2025 14:35:16 +0000 Manifest this update: Fri 22 Aug 2025 14:35:16 +0000 Manifest next update: Fri 29 Aug 2025 14:35:16 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: NoZSRYVtd28n6efqK00Fpl8p3muE1OHJWywhNEHc3F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: Aug 22 14:35:16 2025 GMT Not After : Aug 29 14:35:16 2025 GMT Subject: CN=68a88024-a5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:e9:69:93:97:22:2c:64:f6:d4:d6:4f:2d: 4c:9c:c8:bc:2b:83:2d:84:01:65:a6:44:a6:54:e4: 5e:93:9a:8c:79:96:a0:e3:32:a8:2d:92:aa:8a:2c: 1d:69:b3:ee:b1:39:0f:be:7b:bd:ec:35:86:41:de: e3:4d:56:f6:fe:06:71:ff:40:e6:a7:e8:93:54:a4: 51:f1:7f:a8:74:ec:4d:af:f2:42:3a:7f:77:4a:8e: cd:cc:0f:a4:8b:ae:63:18:8d:7e:5f:37:7d:3e:5d: 7d:f1:ca:b5:86:73:ef:4a:13:1d:eb:7b:ed:65:f3: d2:05:81:4e:22:db:58:04:da:e1:96:17:7b:3b:08: 01:1f:66:b7:fb:eb:3a:6d:33:2d:78:a2:8a:c6:44: 2b:da:22:a5:11:5d:18:79:38:54:bb:99:78:77:9f: 36:b7:d8:63:12:95:ac:b8:8b:95:87:24:10:93:1c: fd:df:c8:77:aa:6c:52:00:47:2b:86:f1:b1:9f:bc: 3c:82:a2:ad:1d:49:49:78:42:47:b7:3f:62:4d:84: 2d:bf:25:da:0a:5f:cf:6b:27:c3:49:77:3f:94:f7: ea:81:49:fb:5e:3d:42:af:0b:e0:01:97:fe:7c:5f: 9e:18:d9:d1:cd:82:c1:c4:d6:19:92:6b:85:44:f2: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:6C:23:CD:E3:56:80:40:52:67:24:BA:E4:D3:5B:49:07:D9:5B X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:9e:9b:88:18:91:9e:98:9a:d9:41:b0:cd:d2:39:51:a7:33: 6f:db:cf:fd:c5:71:14:41:8e:6d:44:c4:8c:ec:07:84:05:dc: f2:43:06:a2:2b:8f:f0:67:f1:db:44:fb:7a:57:d6:ea:24:64: 68:a3:1c:88:87:54:ff:c6:10:bf:c9:cf:d1:6a:c5:36:b9:4f: 80:cd:b9:26:60:aa:c9:f1:fe:9f:9d:ce:01:33:18:45:36:9a: 16:15:b2:60:10:1a:ba:b3:ff:1d:ae:80:79:d2:ed:10:05:4c: 16:43:1a:7f:08:b8:1f:01:4f:9b:71:c5:31:74:91:62:3a:4c: 38:ec:7c:83:7c:a4:82:08:f9:d0:62:91:a3:8a:91:b8:39:09: 3d:87:3d:6b:47:2f:8d:1e:b1:e9:e9:7d:b7:21:8c:f6:ad:0a: f7:88:cc:1c:05:39:02:46:ce:3a:c2:ed:47:ac:27:ed:77:d2: 8f:2b:5b:50:5a:d5:68:bc:8c:30:80:ee:8f:82:52:1d:be:94: 10:49:40:d3:f9:73:c7:96:8d:2f:45:6c:13:fc:02:32:5c:5d: 2f:07:91:2b:4b:ca:4c:d2:f6:69:85:b8:55:69:80:88:23:92: b6:c6:2c:f7:f2:bb:35:a6:05:9c:de:1f:c6:54:b8:c2:44:7f: 7f:4e:9e:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjUwODIyMTQzNTE2WhcNMjUwODI5MTQzNTE2WjAYMRYwFAYD VQQDEw02OGE4ODAyNC1hNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApy/paZOXIixk9tTWTy1MnMi8K4MthAFlpkSmVORek5qMeZag4zKoLZKqiiwd abPusTkPvnu97DWGQd7jTVb2/gZx/0Dmp+iTVKRR8X+odOxNr/JCOn93So7NzA+k i65jGI1+Xzd9Pl198cq1hnPvShMd63vtZfPSBYFOIttYBNrhlhd7OwgBH2a3++s6 bTMteKKKxkQr2iKlEV0YeThUu5l4d582t9hjEpWsuIuVhyQQkxz938h3qmxSAEcr hvGxn7w8gqKtHUlJeEJHtz9iTYQtvyXaCl/PayfDSXc/lPfqgUn7Xj1CrwvgAZf+ fF+eGNnRzYLBxNYZkmuFRPK5lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLzbCPN 41aAQFJnJLrk01tJB9lbMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgnpuIGJGemJrZQbDN0jlRpzNv28/9xXEUQY5tRMSM7AeEBdzyQwai K4/wZ/HbRPt6V9bqJGRooxyIh1T/xhC/yc/RasU2uU+AzbkmYKrJ8f6fnc4BMxhF NpoWFbJgEBq6s/8droB50u0QBUwWQxp/CLgfAU+bccUxdJFiOkw47HyDfKSCCPnQ YpGjipG4OQk9hz1rRy+NHrHp6X23IYz2rQr3iMwcBTkCRs46wu1HrCftd9KPK1tQ WtVovIwwgO6PglIdvpQQSUDT+XPHlo0vRWwT/AIyXF0vB5ErS8pM0vZphbhVaYCI I5K2xiz38rs1pgWc3h/GVLjCRH9/Tp5N -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:43 2025 by rpki-client