$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: AVYal73EextpFZR8KN2CMzJlDxLKq3GcGT6WKMkninU= Subject key identifier: 93:0B:40:9D:49:83:03:7D:05:E5:10:83:1A:B5:C3:E3:0A:67:EA:1B Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 1946 Signing time: Wed 02 Jul 2025 17:32:51 +0000 Manifest this update: Wed 02 Jul 2025 17:32:50 +0000 Manifest next update: Wed 09 Jul 2025 17:32:50 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: r00Uby5wRRbMqod3AhOaz0X2BcC9//sCcjWR6SBlQhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4257 (0x10a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Jul 2 17:32:50 2025 GMT Not After : Jul 9 17:32:50 2025 GMT Subject: CN=68656d43-b4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:a1:8a:93:f1:72:50:05:00:15:9d:3d:4c: a6:78:e1:54:09:71:b2:7a:8d:82:c7:cc:c2:cf:b3: cd:84:ac:a4:77:9b:df:7c:1e:58:8d:c3:ee:7f:58: ab:e3:a0:ba:59:54:d7:f4:d4:3a:d1:c8:4e:bf:72: 53:99:68:3c:98:3b:0b:e9:a5:69:c3:27:4f:a3:13: d4:0d:f3:8a:53:ef:4a:2b:35:19:9c:44:fe:84:23: 17:b7:b7:84:4b:04:c1:5c:1f:ab:b8:c9:50:d6:b6: 75:79:06:5b:37:0e:e4:34:3c:a7:30:49:26:fa:4d: 5b:cf:c6:86:ff:a5:38:98:b4:89:75:c9:17:1c:34: c2:7d:d8:71:4a:3e:0c:c7:d8:31:3e:d4:60:77:c8: 68:d5:c1:5b:25:0c:41:08:76:3a:a9:7a:e9:b6:f9: 6f:56:6d:6d:dd:08:9e:39:f8:de:78:37:0d:99:21: ab:7a:bb:e4:94:ef:c9:9f:f8:19:b2:9f:99:ae:03: 7e:12:e1:7a:21:7f:f5:7d:41:13:04:7e:30:63:8f: 93:d3:bc:46:d8:19:a5:94:0a:82:3a:14:88:36:12: 35:a1:cd:ed:bf:a0:83:3c:9d:10:9d:ed:e3:ce:b3: b2:d4:74:66:a1:a1:9e:89:35:16:d1:7b:35:27:df: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0B:40:9D:49:83:03:7D:05:E5:10:83:1A:B5:C3:E3:0A:67:EA:1B X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:de:8e:4d:52:e2:17:91:cc:a2:2e:5b:a9:92:12:cb:40:ca: 97:9d:ca:6a:9a:b8:b5:63:4d:a3:1d:ca:a3:96:c2:52:50:de: b6:3d:07:55:70:bd:85:16:9e:bb:a7:f3:95:7a:8a:9b:14:88: 58:78:73:5d:e6:a8:67:1d:de:a9:fa:c4:0e:48:c5:04:0c:8f: 21:0d:c6:03:ab:d6:c4:aa:32:26:ce:09:1e:59:bc:70:ef:c4: 58:bd:90:67:b0:86:03:99:c8:30:70:63:04:c2:cf:1c:a4:d3: 24:0e:26:68:17:e7:20:ef:3c:66:5f:62:55:7e:4f:fa:0c:1c: 85:82:4a:30:81:4f:65:3c:f2:9f:12:f6:62:d0:b5:e6:8c:f1: 79:8c:d2:26:6d:76:9f:44:2a:a8:a1:3c:07:bf:da:51:76:87: f4:a6:29:ef:83:0d:10:11:59:6c:0b:ee:36:84:e8:5a:a6:79: 46:f1:18:5d:a4:7e:ea:03:b4:a2:4a:e7:62:ea:15:16:d4:0a: 3c:ea:66:23:52:b3:cb:8e:b0:a5:5d:49:0b:25:95:8d:09:b4: 06:41:6e:f6:1c:ce:7b:19:b7:0f:f6:06:0f:63:1a:d6:1b:c2: a5:30:c4:25:b3:20:c2:4e:7d:d4:4c:ed:ec:42:5d:81:98:7b: be:fc:7d:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUwNzAyMTczMjUwWhcNMjUwNzA5MTczMjUwWjAYMRYwFAYD VQQDEw02ODY1NmQ0My1iNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFihipPxclAFABWdPUymeOFUCXGyeo2Cx8zCz7PNhKykd5vffB5YjcPuf1ir 46C6WVTX9NQ60chOv3JTmWg8mDsL6aVpwydPoxPUDfOKU+9KKzUZnET+hCMXt7eE SwTBXB+ruMlQ1rZ1eQZbNw7kNDynMEkm+k1bz8aG/6U4mLSJdckXHDTCfdhxSj4M x9gxPtRgd8ho1cFbJQxBCHY6qXrptvlvVm1t3QieOfjeeDcNmSGrervklO/Jn/gZ sp+ZrgN+EuF6IX/1fUETBH4wY4+T07xG2BmllAqCOhSINhI1oc3tv6CDPJ0Qne3j zrOy1HRmoaGeiTUW0Xs1J98zjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMLQJ1J gwN9BeUQgxq1w+MKZ+obMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA53o5NUuIXkcyiLlupkhLLQMqXncpqmri1Y02jHcqjlsJSUN62PQdV cL2FFp67p/OVeoqbFIhYeHNd5qhnHd6p+sQOSMUEDI8hDcYDq9bEqjImzgkeWbxw 78RYvZBnsIYDmcgwcGMEws8cpNMkDiZoF+cg7zxmX2JVfk/6DByFgkowgU9lPPKf EvZi0LXmjPF5jNImbXafRCqooTwHv9pRdof0pinvgw0QEVlsC+42hOhapnlG8Rhd pH7qA7SiSudi6hUW1Ao86mYjUrPLjrClXUkLJZWNCbQGQW72HM57GbcP9gYPYxrW G8KlMMQlsyDCTn3UTO3sQl2BmHu+/H37 -----END CERTIFICATE-----Generated at Thu Jul 3 06:21:28 2025 by rpki-client