$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json) Hash identifier: hXmU2jg+1yAelxN4cRTmBZ9gis7O4e4FoOqEBvqn/y4= Subject key identifier: 90:33:7B:C5:B2:13:D0:A8:5F:68:38:81:C5:EC:F9:16:20:AE:69:5A Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft Manifest number: 64 Signing time: Sat 23 Aug 2025 07:15:00 +0000 Manifest this update: Sat 23 Aug 2025 07:14:59 +0000 Manifest next update: Sat 30 Aug 2025 07:14:59 +0000 Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: PCrup5fFJ9OFZ4SaIcNHK3VIeYvOOTUMLOY0tXjlHOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Validity Not Before: Aug 23 07:14:59 2025 GMT Not After : Aug 30 07:14:59 2025 GMT Subject: CN=68a96a73-a28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:7d:da:a8:b5:43:75:31:34:d7:56:2a:fa: d2:6c:0b:1a:e1:7c:1f:8c:a2:d3:2b:f1:4a:57:e8: 4e:f1:9d:57:10:68:2a:35:07:3e:c1:1a:04:5e:04: d7:1f:f2:74:f6:54:f0:0c:df:1f:6b:94:30:6e:17: b6:31:ba:f3:5e:00:f2:01:88:86:47:73:68:ef:3f: ad:7c:7a:6e:77:1e:35:5b:8a:c6:d0:12:1c:2d:c5: 91:de:34:3e:e4:66:a8:d1:d3:a8:3b:3c:bc:51:1a: 83:18:17:60:7b:76:e6:39:57:fb:05:68:37:50:c0: b7:eb:27:c0:30:71:be:d2:4b:29:b2:2e:c2:4d:48: 6a:62:b5:26:9e:7e:7b:ad:f3:a9:7a:56:33:37:57: d0:76:52:09:e5:0a:cf:55:4b:66:bc:7c:d4:21:80: 19:66:9c:78:60:d2:f3:78:39:72:5e:c8:a9:d4:a6: 90:71:83:20:f1:5b:0c:02:f7:16:5c:70:b3:87:55: 43:ff:4b:3f:97:f5:c7:70:50:2f:b6:f3:5e:19:de: d8:ec:ff:bc:81:de:e4:9a:44:77:c0:bb:97:28:cc: 53:2f:9e:71:dd:36:d7:93:f0:e6:0d:17:04:31:ca: e5:4c:cc:54:42:ff:92:c4:a6:57:a9:f3:9e:5c:8a: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:33:7B:C5:B2:13:D0:A8:5F:68:38:81:C5:EC:F9:16:20:AE:69:5A X509v3 Authority Key Identifier: keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:dc:72:ac:d7:40:df:c7:31:ce:9a:bd:a2:be:02:fe:4c:59: e6:48:ac:8e:c1:a0:8c:93:a0:11:17:66:79:7a:9a:1f:b5:92: e2:3d:01:70:51:f0:fa:23:71:e9:8f:6d:9d:4c:4b:49:f5:8a: 62:d6:d1:a4:56:84:b1:92:45:8f:e2:0f:45:06:ba:32:1c:0c: 83:f6:a9:f3:fc:04:c0:83:8e:d7:0d:7c:bf:1b:d7:45:67:6e: 27:5e:9d:3b:a1:5b:c3:16:b5:0d:40:21:da:aa:0c:ff:6c:5f: 89:84:b6:1a:90:f8:a8:d9:e4:ff:0a:d9:f5:52:f6:ac:01:6d: fb:c3:99:c4:d9:fe:18:0f:94:4a:25:2b:5d:bc:a8:2b:fc:91: de:f0:0e:87:db:4b:30:69:20:1c:43:b4:fa:4c:78:e4:1d:15: a6:fd:94:43:a1:ff:36:70:6f:15:c8:61:35:c2:c0:83:f0:24: 99:0c:c6:dd:53:3f:03:ca:91:58:1d:e8:b2:6e:0f:ca:c1:43: 52:6f:83:4d:16:f8:8f:3b:6b:58:46:a2:d4:60:7f:e8:b7:b1: 57:c6:c4:03:9f:73:71:d3:ce:88:c8:de:4e:47:a0:49:86:9a: 0e:b9:b9:8a:8c:42:c3:5d:be:c3:94:df:8b:fd:a2:4f:3b:71: 5e:65:a0:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoRjY3NzE2QTdEMzdEREIwM0RDNTZEMDNBQjkwMkE3MjAz N0VBMTlEOTAeFw0yNTA4MjMwNzE0NTlaFw0yNTA4MzAwNzE0NTlaMBgxFjAUBgNV BAMTDTY4YTk2YTczLWEyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjZn3aqLVDdTE011Yq+tJsCxrhfB+MotMr8UpX6E7xnVcQaCo1Bz7BGgReBNcf 8nT2VPAM3x9rlDBuF7YxuvNeAPIBiIZHc2jvP618em53HjVbisbQEhwtxZHeND7k ZqjR06g7PLxRGoMYF2B7duY5V/sFaDdQwLfrJ8Awcb7SSymyLsJNSGpitSaefnut 86l6VjM3V9B2UgnlCs9VS2a8fNQhgBlmnHhg0vN4OXJeyKnUppBxgyDxWwwC9xZc cLOHVUP/Sz+X9cdwUC+2814Z3tjs/7yB3uSaRHfAu5cozFMvnnHdNteT8OYNFwQx yuVMzFRC/5LEplep855ciosbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkDN7xbIT 0KhfaDiBxez5FiCuaVowHwYDVR0jBBgwFoAU9ncWp9N92wPcVtA6uQKnIDfqGdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0YzMkNGNEU4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOW5jV3A5Tjkyd1BjVnRBNnVRS25JRGZxR2RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0YzMkNGNEU4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQ Y1Z0QTZ1UUtuSURmcUdkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLccqzXQN/HMc6avaK+Av5MWeZIrI7BoIyToBEXZnl6mh+1kuI9AXBR 8PojcemPbZ1MS0n1imLW0aRWhLGSRY/iD0UGujIcDIP2qfP8BMCDjtcNfL8b10Vn bidenTuhW8MWtQ1AIdqqDP9sX4mEthqQ+KjZ5P8K2fVS9qwBbfvDmcTZ/hgPlEol K128qCv8kd7wDofbSzBpIBxDtPpMeOQdFab9lEOh/zZwbxXIYTXCwIPwJJkMxt1T PwPKkVgd6LJuD8rBQ1Jvg00W+I87a1hGotRgf+i3sVfGxAOfc3HTzojI3k5HoEmG mg65uYqMQsNdvsOU34v9ok87cV5loHo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:07 2025 by rpki-client