$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: V/2gn3HuG639lU+MuLV9nX7MqvJq3J2++2OzGA6qD2k= Subject key identifier: B8:D8:DF:4A:34:B5:A9:BC:2A:D0:B9:28:54:C5:3C:FE:46:1B:4B:DF Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 0993 Signing time: Fri 22 Aug 2025 20:13:43 +0000 Manifest this update: Fri 22 Aug 2025 20:13:43 +0000 Manifest next update: Fri 29 Aug 2025 20:13:43 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: 6pgwdi6MzpJXL1RiRGxerSBW84JD9qSVoe5oLAs43ck=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: fiBakfl0c7PhMdoRRAbYSKMEPuxbVJY/KVuQO5mDKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Aug 22 20:13:43 2025 GMT Not After : Aug 29 20:13:43 2025 GMT Subject: CN=68a8cf77-d26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:93:f1:36:31:68:d7:08:d0:6c:8b:2a:b3: e3:7b:09:7c:9e:e0:0e:d4:66:c6:0e:16:eb:b6:df: ad:6b:58:4e:39:29:98:4f:32:1b:82:c1:29:62:0e: db:b0:93:72:81:8c:c0:5b:12:a7:75:af:47:79:31: cd:49:0f:3e:06:fa:0d:09:5c:25:01:a3:b6:d2:37: da:18:71:e7:9e:35:be:1d:fe:83:19:8b:45:ba:76: 8e:f5:13:e1:16:26:62:19:ea:1b:cf:19:f7:74:da: 47:fb:47:58:1c:e7:c8:50:6d:84:c7:56:2e:18:fe: 76:09:b6:5b:a3:ff:ec:bf:7c:ff:2c:82:4a:86:4f: ef:77:54:55:7b:6b:a1:ef:cc:b4:cb:9a:df:06:d1: 07:4c:4b:85:56:cf:a3:84:77:d4:c9:43:d4:aa:65: 38:76:fd:38:1b:f1:67:88:9f:fc:28:03:10:60:83: b2:91:d4:10:32:b2:89:88:28:b2:70:9c:b6:4b:e2: 7e:8e:88:ca:e9:7f:74:6b:88:a7:b1:e6:5e:f6:45: 8c:11:6e:f7:7f:3b:e7:1e:a9:98:7d:2d:e3:5c:f6: 90:a0:99:23:7a:5a:11:84:07:51:af:52:4a:46:1d: cc:02:13:e9:55:40:27:0d:f3:73:ce:fa:3d:14:52: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:DF:4A:34:B5:A9:BC:2A:D0:B9:28:54:C5:3C:FE:46:1B:4B:DF X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f7:38:63:90:3a:85:44:e5:a0:69:b3:6d:b2:7a:5c:a1:94: 25:3d:11:24:ce:88:45:6c:4d:86:e3:1b:31:12:f4:35:e8:e6: ba:ee:e3:70:6a:65:f1:6d:76:d7:33:e7:21:15:91:14:cc:8b: 41:0b:d1:ea:8b:1c:bf:b1:ea:9d:0f:77:59:b6:e9:30:77:93: 8c:57:fa:79:f7:68:66:50:9f:57:e7:3b:5c:88:79:48:08:aa: 1e:0d:22:16:d6:e6:dc:d9:9f:94:64:ad:52:30:1e:28:b6:29: 0e:f3:2f:85:9d:c7:3d:71:c2:bc:7a:cf:33:23:6e:15:56:32: 66:60:38:4b:f9:0b:50:86:3f:29:ed:55:6b:57:4f:f4:e0:87: b3:e5:a3:9c:f0:84:1e:31:dc:65:3b:be:a0:2b:94:d1:48:ec: 4b:e0:83:e5:45:d6:c6:86:4d:8d:29:36:24:54:82:bc:70:bd: 11:17:e4:d8:8c:85:65:a3:19:cd:e2:43:e7:b6:c4:7c:8b:90: 45:be:0d:b8:2e:1c:0b:38:d9:12:f8:a6:d9:41:b2:5b:33:28: 67:81:ef:40:12:b2:d1:2d:df:a7:bf:61:3a:ff:63:e5:bf:ed: ca:2e:39:ab:4b:0c:77:85:3d:bd:2c:0a:1a:d0:51:ca:85:ef: 02:b6:79:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjUwODIyMjAxMzQzWhcNMjUwODI5MjAxMzQzWjAYMRYwFAYD VQQDEw02OGE4Y2Y3Ny1kMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLKT8TYxaNcI0GyLKrPjewl8nuAO1GbGDhbrtt+ta1hOOSmYTzIbgsEpYg7b sJNygYzAWxKnda9HeTHNSQ8+BvoNCVwlAaO20jfaGHHnnjW+Hf6DGYtFunaO9RPh FiZiGeobzxn3dNpH+0dYHOfIUG2Ex1YuGP52CbZbo//sv3z/LIJKhk/vd1RVe2uh 78y0y5rfBtEHTEuFVs+jhHfUyUPUqmU4dv04G/FniJ/8KAMQYIOykdQQMrKJiCiy cJy2S+J+jojK6X90a4inseZe9kWMEW73fzvnHqmYfS3jXPaQoJkjeloRhAdRr1JK Rh3MAhPpVUAnDfNzzvo9FFK2awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjY30o0 tam8KtC5KFTFPP5GG0vfMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk9zhjkDqFROWgabNtsnpcoZQlPREkzohFbE2G4xsxEvQ16Oa67uNw amXxbXbXM+chFZEUzItBC9Hqixy/seqdD3dZtukwd5OMV/p592hmUJ9X5ztciHlI CKoeDSIW1ubc2Z+UZK1SMB4otikO8y+Fncc9ccK8es8zI24VVjJmYDhL+QtQhj8p 7VVrV0/04Iez5aOc8IQeMdxlO76gK5TRSOxL4IPlRdbGhk2NKTYkVIK8cL0RF+TY jIVloxnN4kPntsR8i5BFvg24LhwLONkS+KbZQbJbMyhnge9AErLRLd+nv2E6/2Pl v+3KLjmrSwx3hT29LAoa0FHKhe8Ctnkt -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:17 2025 by rpki-client