$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft File: a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json) Hash identifier: mvZnmqvzmDgCJ6zjZO0nvLxwODe/N8HKaWVIJV/v0Hw= Subject key identifier: 06:97:7C:0A:7C:37:1F:74:43:D2:E9:AA:E5:8B:F5:83:81:6A:81:E1 Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC Certificate issuer: /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft Manifest number: 20 Signing time: Sat 23 Aug 2025 08:08:00 +0000 Manifest this update: Sat 23 Aug 2025 08:07:59 +0000 Manifest next update: Sat 30 Aug 2025 08:07:59 +0000 Files and hashes: 1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: VEC2dXEeVJP73TNoNqpoXZbWsYw5QcSV3IjMIhqmHLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Validity Not Before: Aug 23 08:07:59 2025 GMT Not After : Aug 30 08:07:59 2025 GMT Subject: CN=68a976e0-f6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:f6:8a:1b:67:b3:e9:26:14:0d:f6:e9:ef: 71:6a:e8:eb:c7:c0:26:4d:d3:9f:04:d4:5e:d1:61: 40:e2:59:ad:ae:90:e5:2a:04:40:7e:23:0b:8f:fe: b6:0d:e1:e2:be:29:19:dc:6c:e0:16:a4:ec:55:e7: 71:11:0a:28:f1:85:37:c7:e2:6f:4b:8b:1f:26:78: bb:8e:4c:17:e3:04:b6:f0:bc:6e:9e:12:48:2e:88: 13:52:84:ec:1f:b2:a7:c7:61:78:4a:47:a8:da:86: bb:fb:aa:ba:a7:88:12:24:62:e2:d7:06:ea:e5:85: ef:45:d3:9e:c9:23:d2:37:6b:0c:81:b7:a7:30:77: da:0a:5a:09:30:66:93:60:c1:d9:0c:27:b4:9e:72: 64:5e:04:82:bb:6a:e1:35:70:62:1d:b6:c5:30:34: e4:79:d6:e3:74:77:12:86:67:ec:ab:cc:43:fb:e9: db:7b:ed:34:c4:8c:cf:ba:ab:6b:ff:64:66:82:c7: c8:7f:3b:6c:8e:32:dc:8b:d9:6f:83:73:5d:5f:17: 81:0f:ca:d8:20:c0:dd:8f:cc:19:4a:dd:ff:0d:53: ad:29:59:53:39:04:51:1e:5b:4f:f4:89:d1:18:1d: 76:d2:e3:0e:2b:a3:44:06:ad:98:d0:4f:e4:d8:ac: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:7C:0A:7C:37:1F:74:43:D2:E9:AA:E5:8B:F5:83:81:6A:81:E1 X509v3 Authority Key Identifier: keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:60:31:dc:21:a0:33:4b:df:fc:55:59:1b:1d:51:4e:ea:1b: 8e:50:07:4f:96:26:48:74:ad:67:b0:cc:a1:d6:19:b5:a2:a8: 3d:39:b6:d1:18:06:45:42:b0:3e:28:c6:8d:91:55:3d:50:b1: ae:99:ff:5f:c7:e3:f6:37:1d:36:ac:73:0c:5e:3e:47:3b:f0: dd:6b:ff:71:55:7a:5c:84:76:45:95:9f:42:56:9d:db:4a:4f: 79:31:14:31:71:f3:e5:d4:62:ca:5b:f6:92:19:0a:84:ae:92: d0:c0:ea:ef:71:8a:66:ef:6e:5d:87:3f:f1:15:04:7b:6c:7c: 85:68:18:a9:c2:32:10:6b:86:59:18:c7:3d:77:ae:9c:18:88: 3a:ff:c3:dd:b8:47:31:6c:5e:5c:a5:57:1c:8f:45:46:53:d6: 65:b3:37:04:1d:73:7e:71:e0:5a:71:aa:f1:b7:e5:b6:b9:18: f5:d6:2d:4a:75:e4:61:82:5e:0e:44:45:88:b4:63:40:da:7e: 23:f6:0b:00:a4:07:9d:8e:34:e5:d6:bb:f1:86:eb:cb:c5:16: c4:f4:4f:98:b2:33:a8:e3:ee:eb:70:5e:6b:86:37:10:75:05: 61:1c:41:98:5e:d1:1f:53:a0:28:16:39:09:df:09:23:41:3d: ab:bc:17:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUMzMDExMC8GA1UEBRMoNkI1N0FBOEYwNzY3QUNDRkE4MkNEMkFBNjlFQjExMTJD N0I3N0NGQzAeFw0yNTA4MjMwODA3NTlaFw0yNTA4MzAwODA3NTlaMBgxFjAUBgNV BAMTDTY4YTk3NmUwLWY2ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR/faKG2ez6SYUDfbp73Fq6OvHwCZN058E1F7RYUDiWa2ukOUqBEB+IwuP/rYN 4eK+KRncbOAWpOxV53ERCijxhTfH4m9Lix8meLuOTBfjBLbwvG6eEkguiBNShOwf sqfHYXhKR6jahrv7qrqniBIkYuLXBurlhe9F057JI9I3awyBt6cwd9oKWgkwZpNg wdkMJ7SecmReBIK7auE1cGIdtsUwNOR51uN0dxKGZ+yrzEP76dt77TTEjM+6q2v/ ZGaCx8h/O2yOMtyL2W+Dc11fF4EPytggwN2PzBlK3f8NU60pWVM5BFEeW0/0idEY HXbS4w4ro0QGrZjQT+TYrKNZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBpd8Cnw3 H3RD0umq5Yv1g4FqgeEwHwYDVR0jBBgwFoAUa1eqjwdnrM+oLNKqaesREse3fPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQzMwLzYzQ0Q2RUM0NTcz RTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFlcWp3ZG5yTS1vTE5LcWFlc1JFc2UzZlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QzMwLzYzQ0Q2RUM0NTczRTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0t b0xOS3FhZXNSRXNlM2ZQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMdgMdwhoDNL3/xVWRsdUU7qG45QB0+WJkh0rWewzKHWGbWiqD05ttEY BkVCsD4oxo2RVT1Qsa6Z/1/H4/Y3HTascwxePkc78N1r/3FVelyEdkWVn0JWndtK T3kxFDFx8+XUYspb9pIZCoSuktDA6u9ximbvbl2HP/EVBHtsfIVoGKnCMhBrhlkY xz13rpwYiDr/w924RzFsXlylVxyPRUZT1mWzNwQdc35x4FpxqvG35ba5GPXWLUp1 5GGCXg5ERYi0Y0DafiP2CwCkB52ONOXWu/GG68vFFsT0T5iyM6jj7utwXmuGNxB1 BWEcQZhe0R9ToCgWOQnfCSNBPau8Fw0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:55 2025 by rpki-client