$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: lZ36ylYatX6R1pz2xlvARmvCKKvEDshib6TUWh0EbjA= Subject key identifier: 69:14:0C:47:FC:C8:5A:94:07:EF:A4:1A:00:90:0D:9D:F6:CF:07:96 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: 012D Signing time: Sat 23 Aug 2025 04:42:16 +0000 Manifest this update: Sat 23 Aug 2025 04:42:15 +0000 Manifest next update: Sat 30 Aug 2025 04:42:15 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: GtxmL+mBlHaqZuxzoeokiG4jRzogiPuAJsTPLkoWkxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: Aug 23 04:42:15 2025 GMT Not After : Aug 30 04:42:15 2025 GMT Subject: CN=68a946a8-1014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d9:ed:73:b5:2d:c0:83:83:4f:0a:64:5e:f0: 40:ea:a9:4d:63:aa:22:04:f5:22:fc:fc:e6:8f:b1: ed:75:fc:e9:bf:02:02:8c:26:1f:86:c0:f1:05:67: cc:a9:82:71:cc:ce:5a:74:4e:bc:38:fc:f9:b1:51: 78:65:41:2f:ae:3f:e0:e3:66:c4:f0:53:4b:a1:d5: 86:2c:29:6c:8c:7a:9f:0f:cb:48:1c:29:2d:09:4d: 4a:0c:60:10:6a:87:37:22:8d:64:e3:3b:e6:a1:d8: a5:4a:ab:10:b9:db:e8:7c:0e:2b:2a:f3:be:c4:53: e9:b1:64:c6:a5:4f:d4:54:82:0f:07:77:fa:a2:81: bd:0a:0a:ec:e8:31:2a:c3:a2:70:19:d2:ba:9d:c6: 79:74:50:0f:7a:64:9e:1c:87:83:24:a8:e6:b4:f0: 0d:72:83:b7:56:37:f1:52:98:70:7d:93:4b:44:c0: b6:69:3c:ea:7d:b4:5e:bc:4c:4f:a6:22:19:f6:9a: 63:15:d9:9e:f5:31:f6:e7:99:d1:6c:68:c4:c3:52: 54:ef:2d:ee:06:2b:d1:0d:f2:e2:5c:e0:ad:77:f6: 09:2f:a8:7f:1c:ca:bf:01:06:0f:fb:ae:44:cd:b3: 10:24:07:6e:05:6a:47:46:ad:89:6a:e3:c8:d8:e6: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:14:0C:47:FC:C8:5A:94:07:EF:A4:1A:00:90:0D:9D:F6:CF:07:96 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:24:70:dd:77:a8:24:b3:24:47:99:ab:91:d6:3a:ad:71:fd: 6e:8c:08:d9:39:4e:e9:1b:a1:0c:93:f8:73:e1:66:46:65:d5: d1:c5:1b:8b:f2:02:54:54:eb:9d:c6:84:5c:c4:8e:29:27:d5: bc:79:f4:0d:03:e0:a6:7b:3c:6e:46:45:c2:f7:85:56:6d:5d: e0:0b:f0:13:55:42:88:3c:54:98:e0:c2:80:9f:46:2b:66:07: f8:48:2c:94:e5:10:8e:fe:b6:a8:81:b7:9c:41:a4:bd:30:4f: 77:d7:0b:5d:32:e1:4f:f0:7a:e4:0e:06:56:ce:bb:37:9a:70: 07:f9:a9:53:62:76:a0:9f:b0:0b:02:20:7f:22:5e:a2:cc:66: 10:d6:fd:58:b9:8e:4f:d0:75:4a:0a:77:be:54:34:03:70:ab: ff:fc:ef:c9:3e:db:7a:4a:5c:dd:85:d3:1b:60:03:60:93:84: c3:2d:6b:53:4b:3e:2a:fd:34:c6:f2:fa:4f:42:9f:d4:ce:a8: e6:6a:87:31:b1:24:30:88:09:ca:53:a4:db:36:e1:cf:09:26: 1c:86:bf:01:1b:8f:f6:4b:9d:01:6e:a4:4d:73:91:00:75:7a: 4e:a7:9e:78:63:be:00:bf:66:e2:07:9d:3e:cc:a3:cd:2b:18: b4:31:9e:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwODIzMDQ0MjE1WhcNMjUwODMwMDQ0MjE1WjAYMRYwFAYD VQQDEw02OGE5NDZhOC0xMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Nntc7UtwIODTwpkXvBA6qlNY6oiBPUi/Pzmj7HtdfzpvwICjCYfhsDxBWfM qYJxzM5adE68OPz5sVF4ZUEvrj/g42bE8FNLodWGLClsjHqfD8tIHCktCU1KDGAQ aoc3Io1k4zvmodilSqsQudvofA4rKvO+xFPpsWTGpU/UVIIPB3f6ooG9Cgrs6DEq w6JwGdK6ncZ5dFAPemSeHIeDJKjmtPANcoO3VjfxUphwfZNLRMC2aTzqfbRevExP piIZ9ppjFdme9TH255nRbGjEw1JU7y3uBivRDfLiXOCtd/YJL6h/HMq/AQYP+65E zbMQJAduBWpHRq2JauPI2Oal2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkUDEf8 yFqUB++kGgCQDZ32zweWMB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4JHDdd6gksyRHmauR1jqtcf1ujAjZOU7pG6EMk/hz4WZGZdXRxRuL 8gJUVOudxoRcxI4pJ9W8efQNA+CmezxuRkXC94VWbV3gC/ATVUKIPFSY4MKAn0Yr Zgf4SCyU5RCO/raogbecQaS9ME931wtdMuFP8HrkDgZWzrs3mnAH+alTYnagn7AL AiB/Il6izGYQ1v1YuY5P0HVKCne+VDQDcKv//O/JPtt6SlzdhdMbYANgk4TDLWtT Sz4q/TTG8vpPQp/UzqjmaocxsSQwiAnKU6TbNuHPCSYchr8BG4/2S50BbqRNc5EA dXpOp554Y74Av2biB50+zKPNKxi0MZ5K -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:19 2025 by rpki-client