$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: m7y0+5UxgF7u80nzeoKROxyTxKXHSrRtOrfnvjTcnEU= Subject key identifier: 04:D3:0F:D1:97:95:1E:DD:AB:1F:A2:66:0B:07:1F:65:3E:57:85:C5 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 08C0 Signing time: Fri 22 Aug 2025 20:36:37 +0000 Manifest this update: Fri 22 Aug 2025 20:36:36 +0000 Manifest next update: Fri 29 Aug 2025 20:36:36 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: TirOu7VPg1GIFjDKsLescn53Hr+NvBmlNCFn/PDsR8Q=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: f4udCcisFsQWGXJxlj4yAW3MNSfW4g1HYUDDKGCbXqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Aug 22 20:36:36 2025 GMT Not After : Aug 29 20:36:36 2025 GMT Subject: CN=68a8d4d4-e5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:07:0e:3a:1e:a1:f9:45:cf:0a:a3:cf:2f: f7:d9:a5:87:87:88:cd:aa:a9:84:19:a5:e4:51:2b: b4:f3:2e:9a:88:17:a2:24:ba:f6:b8:9f:8a:55:72: 73:51:cd:7e:00:de:26:19:8b:70:02:66:78:e2:da: 25:7c:c9:64:48:15:d4:4a:7d:10:52:f8:6f:f3:59: 08:c6:66:9d:1b:a5:f7:a9:0a:1d:49:76:57:8e:76: 8f:f6:d6:0d:2d:76:76:29:c0:16:3f:f5:30:cf:73: a3:d5:3c:ce:1d:1f:df:3a:4e:7f:30:c6:c9:b9:81: 3d:8f:93:9e:5c:19:65:88:df:4a:4f:35:b4:7c:03: 82:da:f9:e9:82:b9:b1:95:32:2c:07:2b:db:9b:4f: 94:f9:f1:f8:a2:7f:f9:82:a2:8d:7a:36:07:14:66: 23:ff:a6:d7:8b:c1:34:80:1a:ce:39:69:60:fc:3a: 01:ef:8a:84:ce:e1:09:cb:c2:2d:c9:58:04:e8:08: e9:45:4a:f6:31:16:a6:1e:a7:31:9c:59:f6:eb:47: 5c:1f:b0:ca:2d:96:b7:6e:ea:c6:67:ca:70:5e:33: 58:73:69:de:db:27:0f:27:8e:68:7c:8b:e5:11:ee: a9:99:c8:3c:76:30:2d:d8:db:1b:6d:0f:17:ab:ac: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D3:0F:D1:97:95:1E:DD:AB:1F:A2:66:0B:07:1F:65:3E:57:85:C5 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1e:b8:97:6f:9b:16:54:81:c1:9a:3b:cb:f8:c5:01:86:9a: 25:51:a4:4c:ba:3b:c6:08:5f:db:5c:9c:1d:e9:7f:65:29:52: f0:c5:b4:d3:00:78:d1:a7:26:67:99:fb:ca:44:6a:77:2c:8f: 1f:0e:6d:45:3f:32:9d:14:8f:49:23:bf:52:9d:bb:2d:37:d7: 5a:1c:4d:79:69:ff:de:68:52:09:10:bc:66:2f:54:88:7f:b9: bd:4d:40:58:ef:9c:8e:c7:47:55:a0:63:8c:b0:90:93:6b:11: f7:a6:23:f0:28:81:c6:3f:49:de:51:79:9d:0b:2c:6e:7e:67: 84:66:91:1c:0a:12:e4:64:85:fd:c8:a0:28:3c:1d:aa:22:31: d1:82:67:e1:e8:d1:a7:93:76:72:64:01:8a:f9:9a:38:58:49: 85:e7:30:db:51:fb:27:e6:67:c6:f1:48:9c:4e:ff:d7:2b:5b: ee:99:98:51:60:fd:8c:01:2a:d9:9a:79:e5:2f:04:87:8b:fd: a1:eb:69:17:a1:17:43:4a:1b:4f:9d:ca:1d:92:ae:9a:8f:4a: de:c3:dd:45:bc:e9:aa:ba:a7:2c:b8:0a:c1:24:c4:a1:b7:b7: 7f:59:2d:f1:c4:6c:d4:8a:94:7e:6d:1d:9a:98:49:eb:df:1d: 55:aa:5f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjUwODIyMjAzNjM2WhcNMjUwODI5MjAzNjM2WjAYMRYwFAYD VQQDEw02OGE4ZDRkNC1lNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5k8HDjoeoflFzwqjzy/32aWHh4jNqqmEGaXkUSu08y6aiBeiJLr2uJ+KVXJz Uc1+AN4mGYtwAmZ44tolfMlkSBXUSn0QUvhv81kIxmadG6X3qQodSXZXjnaP9tYN LXZ2KcAWP/Uwz3Oj1TzOHR/fOk5/MMbJuYE9j5OeXBlliN9KTzW0fAOC2vnpgrmx lTIsByvbm0+U+fH4on/5gqKNejYHFGYj/6bXi8E0gBrOOWlg/DoB74qEzuEJy8It yVgE6AjpRUr2MRamHqcxnFn260dcH7DKLZa3burGZ8pwXjNYc2ne2ycPJ45ofIvl Ee6pmcg8djAt2NsbbQ8Xq6yHYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATTD9GX lR7dqx+iZgsHH2U+V4XFMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwHriXb5sWVIHBmjvL+MUBhpolUaRMujvGCF/bXJwd6X9lKVLwxbTT AHjRpyZnmfvKRGp3LI8fDm1FPzKdFI9JI79SnbstN9daHE15af/eaFIJELxmL1SI f7m9TUBY75yOx0dVoGOMsJCTaxH3piPwKIHGP0neUXmdCyxufmeEZpEcChLkZIX9 yKAoPB2qIjHRgmfh6NGnk3ZyZAGK+Zo4WEmF5zDbUfsn5mfG8UicTv/XK1vumZhR YP2MASrZmnnlLwSHi/2h62kXoRdDShtPncodkq6aj0rew91FvOmquqcsuArBJMSh t7d/WS3xxGzUipR+bR2amEnr3x1Vql+d -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:47 2025 by rpki-client