$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: 6UxslilKuUcA+LRNqxX03fRxFsCED34InP6ombFKQGw= Subject key identifier: 69:E4:B1:D8:59:CF:2C:87:FE:1D:BB:23:17:B9:33:B4:20:DB:18:5E Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 2B Signing time: Sat 23 Aug 2025 07:58:08 +0000 Manifest this update: Sat 23 Aug 2025 07:58:07 +0000 Manifest next update: Sat 30 Aug 2025 07:58:07 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: 9Wnb7Bkw3GtX3QW0372VLelZmLnl6s7r/nes0APri+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Aug 23 07:58:07 2025 GMT Not After : Aug 30 07:58:07 2025 GMT Subject: CN=68a9748f-965e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:69:d7:1a:08:cd:4f:50:c6:c1:d8:d7:40: f9:38:e7:f6:a9:17:a1:0f:36:65:8c:ab:8e:fc:b5: a8:0d:41:1e:5d:7b:e5:c9:18:ff:09:0c:d7:e0:84: aa:f1:0f:a5:31:68:74:05:77:de:23:cd:42:30:ee: b9:ec:a0:81:77:a2:df:8f:b6:7d:fa:5b:dd:12:fb: 5d:09:70:b9:22:03:55:24:21:d5:25:50:26:5d:a0: 4d:85:7c:85:93:07:cd:9c:da:66:21:aa:4f:86:c9: 26:42:bb:24:8e:7b:47:c9:47:ef:ce:c4:d4:1a:73: 5d:cf:21:cc:41:9e:bc:01:5c:2c:b6:e6:15:12:b0: 3c:40:d2:ef:e2:23:8a:e9:d8:7f:a6:4d:e9:89:cb: 8d:34:91:65:b3:9c:2f:d2:b5:2f:df:4c:8f:3b:36: 86:4e:65:a6:e3:fa:b2:20:30:37:35:cd:c2:21:1e: 58:47:d4:3c:c1:17:d5:28:cb:f3:2f:1c:f4:02:d9: c2:73:16:db:10:d0:fa:de:44:98:6e:d2:db:d7:65: 32:db:d5:30:8b:09:8d:94:b0:d5:4e:9e:2a:bc:4d: fc:69:0f:cd:9e:4c:5e:d7:ad:57:67:6f:7b:d2:3b: f6:0c:f1:83:fa:55:71:3a:d0:a0:24:fa:10:f8:70: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:B1:D8:59:CF:2C:87:FE:1D:BB:23:17:B9:33:B4:20:DB:18:5E X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:cc:71:4d:e4:f8:27:d3:a1:8d:80:01:7b:d7:b5:dc:8a:14: e5:60:80:47:7e:f8:68:e3:ac:bc:b5:73:8f:68:68:12:cb:8c: 06:ee:44:41:99:c0:db:d6:bc:72:89:aa:d8:c1:c1:d9:8b:a7: 1b:88:84:68:22:b9:51:55:03:a1:93:b7:8a:e3:ff:fd:2e:5c: 1e:c9:87:34:05:b1:04:9c:a6:32:00:e8:d7:b3:38:57:ae:84: a5:b9:2c:4b:45:84:b3:71:50:c7:40:26:96:5f:8e:3e:d9:71: 1c:89:a6:a6:32:4d:b2:7c:53:ec:0d:18:e6:82:67:cb:d7:2d: db:d3:2b:97:a0:60:c7:29:9c:23:98:47:e1:35:ac:2d:12:6e: e6:9e:a6:c0:05:4d:de:38:77:86:ad:7b:e5:99:42:e3:fe:0a: 41:5b:19:e7:9e:ae:66:6d:84:e2:dd:0f:d6:ae:98:cc:da:ec: a4:bc:33:bf:4b:66:f5:f4:55:db:81:6d:4d:4e:15:2e:12:bd: b2:d6:58:73:62:d8:d0:12:e1:f9:dc:ed:d9:50:72:1b:b2:0b: 92:86:51:3f:1c:af:57:38:fa:bc:39:5e:34:dc:b1:ed:0d:62: 2d:bd:8c:9b:2c:d5:b8:68:9c:b0:d6:88:25:03:47:8f:b0:c6: 9e:3c:69:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTA4MjMwNzU4MDdaFw0yNTA4MzAwNzU4MDdaMBgxFjAUBgNV BAMTDTY4YTk3NDhmLTk2NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6zmnXGgjNT1DGwdjXQPk45/apF6EPNmWMq478tagNQR5de+XJGP8JDNfghKrx D6UxaHQFd94jzUIw7rnsoIF3ot+Ptn36W90S+10JcLkiA1UkIdUlUCZdoE2FfIWT B82c2mYhqk+GySZCuySOe0fJR+/OxNQac13PIcxBnrwBXCy25hUSsDxA0u/iI4rp 2H+mTemJy400kWWznC/StS/fTI87NoZOZabj+rIgMDc1zcIhHlhH1DzBF9Uoy/Mv HPQC2cJzFtsQ0PreRJhu0tvXZTLb1TCLCY2UsNVOniq8TfxpD82eTF7XrVdnb3vS O/YM8YP6VXE60KAk+hD4cB03AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaeSx2FnP LIf+HbsjF7kztCDbGF4wHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXMcU3k+CfToY2AAXvXtdyKFOVggEd++GjjrLy1c49oaBLLjAbuREGZ wNvWvHKJqtjBwdmLpxuIhGgiuVFVA6GTt4rj//0uXB7JhzQFsQScpjIA6NezOFeu hKW5LEtFhLNxUMdAJpZfjj7ZcRyJpqYyTbJ8U+wNGOaCZ8vXLdvTK5egYMcpnCOY R+E1rC0SbuaepsAFTd44d4ate+WZQuP+CkFbGeeermZthOLdD9aumMza7KS8M79L ZvX0VduBbU1OFS4SvbLWWHNi2NAS4fnc7dlQchuyC5KGUT8cr1c4+rw5XjTcse0N Yi29jJss1bhonLDWiCUDR4+wxp48afs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:58:18 2025 by rpki-client