$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: PhtLaNw//BT4JTs1+dcgzXfdt2aXJKyr8Z8yvEQ526E= Subject key identifier: 13:A9:2F:06:DF:34:95:14:24:98:43:2F:52:A2:E4:D5:17:A7:E7:D0 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34AA Signing time: Fri 22 Aug 2025 15:09:54 +0000 Manifest this update: Fri 22 Aug 2025 15:09:54 +0000 Manifest next update: Fri 29 Aug 2025 15:09:54 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: R5MLZVj8AAnc/01gr3XIct7KqRPF3Ls9eXSCNa13y/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Aug 22 15:09:54 2025 GMT Not After : Aug 29 15:09:54 2025 GMT Subject: CN=68a88842-2b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:27:b5:d5:3b:5a:ac:b3:89:43:64:fe:4c: 0f:9d:ee:a3:73:00:ca:91:e6:b4:ac:46:61:92:1d: f5:93:a5:b4:41:10:60:a0:11:7a:d7:bd:f2:90:fa: 8b:cf:0b:10:1b:bc:c7:d5:04:d9:bf:0a:9d:41:47: 35:5a:2c:fc:e2:4a:55:d2:36:ef:45:33:46:5d:68: 26:d2:d0:5d:e4:ad:e3:6e:db:2d:c3:47:f4:62:4b: dc:6d:a1:fd:e0:a0:c9:44:16:f2:75:24:2a:f6:23: 6b:f3:02:a0:19:e4:74:60:84:de:8a:af:5e:ae:cb: f1:f8:4b:80:3a:65:ef:1e:86:1c:af:cc:da:d6:d8: 14:62:ec:95:3e:c3:3c:fd:ac:5c:3a:27:06:72:30: 22:46:01:0c:c7:e3:35:55:5e:da:80:0e:a5:3f:a9: 5b:c6:13:e1:3b:00:b8:5e:a2:ad:09:7f:80:bb:98: 01:07:c2:9e:bb:3e:cc:dc:2c:ff:b8:a6:a8:01:d4: 58:84:73:1c:2d:5c:7c:5d:52:8c:e3:90:1c:cd:87: d5:37:dd:7f:1d:8d:be:ca:a1:8e:2b:a5:11:fb:78: 28:7b:bc:df:59:07:cd:9a:a7:62:7e:31:49:a2:fd: 9c:b6:13:bb:16:29:70:8c:fc:ad:bb:d6:b9:fe:b8: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:2F:06:DF:34:95:14:24:98:43:2F:52:A2:E4:D5:17:A7:E7:D0 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c0:c7:4a:65:5e:67:4b:84:b7:b9:85:18:1f:00:5b:96:52: b9:35:84:00:4b:6a:ae:39:11:cb:86:0a:81:b1:97:31:a7:e2: e1:04:8d:6d:1c:20:84:3f:f0:2d:66:5d:e6:91:e0:d2:9f:cd: bd:71:bd:93:20:29:f3:f2:8b:97:f9:e4:94:ef:78:72:7e:80: 4a:48:90:1f:b9:3d:a9:4a:f4:28:17:75:1b:7f:05:50:5e:29: 61:57:92:d7:32:b7:00:eb:47:05:08:36:6e:15:46:23:58:ed: b0:c7:b6:2f:21:bd:31:dd:f5:76:b1:57:c6:d3:dd:76:fc:37: 08:0b:59:78:71:df:80:58:97:ac:40:ab:c4:88:11:fc:00:e9: 2b:a7:8a:40:a4:75:40:e7:a3:dd:63:e2:09:56:d6:63:b2:06: e3:4b:4e:8f:31:ad:de:d0:69:23:49:b1:7b:e5:55:f6:d0:56: 6b:f4:ea:3b:c9:b5:a3:b3:bc:64:8f:a7:3f:d2:0a:e3:b7:a6: cf:85:f7:b7:57:f5:f8:56:a6:c3:26:d4:d4:a3:9c:27:8f:2d: 28:2c:9a:e7:37:be:83:3f:57:c0:5f:ff:b2:22:ad:a6:24:e6: 0e:f1:de:32:bc:17:b8:89:eb:16:9a:0f:ef:3f:b9:f8:53:ea: 67:8f:01:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUwODIyMTUwOTU0WhcNMjUwODI5MTUwOTU0WjAYMRYwFAYD VQQDEw02OGE4ODg0Mi0yYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA250ntdU7WqyziUNk/kwPne6jcwDKkea0rEZhkh31k6W0QRBgoBF6173ykPqL zwsQG7zH1QTZvwqdQUc1Wiz84kpV0jbvRTNGXWgm0tBd5K3jbtstw0f0YkvcbaH9 4KDJRBbydSQq9iNr8wKgGeR0YITeiq9ersvx+EuAOmXvHoYcr8za1tgUYuyVPsM8 /axcOicGcjAiRgEMx+M1VV7agA6lP6lbxhPhOwC4XqKtCX+Au5gBB8Keuz7M3Cz/ uKaoAdRYhHMcLVx8XVKM45AczYfVN91/HY2+yqGOK6UR+3goe7zfWQfNmqdifjFJ ov2cthO7FilwjPytu9a5/riyXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOpLwbf NJUUJJhDL1Ki5NUXp+fQMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBwMdKZV5nS4S3uYUYHwBbllK5NYQAS2quORHLhgqBsZcxp+LhBI1t HCCEP/AtZl3mkeDSn829cb2TICnz8ouX+eSU73hyfoBKSJAfuT2pSvQoF3UbfwVQ XilhV5LXMrcA60cFCDZuFUYjWO2wx7YvIb0x3fV2sVfG0912/DcIC1l4cd+AWJes QKvEiBH8AOkrp4pApHVA56PdY+IJVtZjsgbjS06PMa3e0GkjSbF75VX20FZr9Oo7 ybWjs7xkj6c/0grjt6bPhfe3V/X4VqbDJtTUo5wnjy0oLJrnN76DP1fAX/+yIq2m JOYO8d4yvBe4iesWmg/vP7n4U+pnjwEM -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:48 2025 by rpki-client