$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft File: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json) Hash identifier: BfOuy2HFNJmYQmEnJ1H/+TDUOEVaaLn8j0jdwFfX0UM= Subject key identifier: A2:EA:DD:0B:A8:D0:8E:DF:FE:BB:2F:F4:48:D4:1F:D0:C0:E4:8C:7A Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 Certificate issuer: /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft Manifest number: 057B Signing time: Wed 02 Jul 2025 23:36:59 +0000 Manifest this update: Wed 02 Jul 2025 23:36:58 +0000 Manifest next update: Wed 09 Jul 2025 23:36:58 +0000 Files and hashes: 1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: kDcNOvP2Qp3QJg1Z8Mn4+WP75iWrMT2ToK+K2uulIPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26 Validity Not Before: Jul 2 23:36:58 2025 GMT Not After : Jul 9 23:36:58 2025 GMT Subject: CN=6865c29b-2260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:d1:f1:ff:8d:70:6c:71:e1:5c:8d:04:a2: 0d:77:6b:46:6c:b1:66:73:20:94:7a:26:36:a1:cb: 48:0b:2b:e2:33:1c:29:ad:37:1f:f9:47:65:44:87: b9:28:71:06:e7:2b:31:ca:aa:08:83:39:02:30:6e: de:10:f2:4b:68:a8:2d:90:1e:8f:1d:08:25:9f:1b: a4:36:2e:a3:e0:bb:7e:ab:a9:26:e2:5b:09:3b:fc: 6f:07:7c:65:fe:d7:f3:9f:77:ae:97:ce:be:17:e7: bf:77:b6:8b:75:e7:e4:1d:f1:de:86:27:f2:f2:8b: cc:5e:52:45:ce:d9:37:1e:54:9f:4c:01:ab:25:4c: e2:76:0f:0f:db:58:6b:83:9d:e8:e4:45:3f:f3:b3: d9:ba:bb:5d:bf:a0:24:61:1e:ab:21:71:e5:0f:fc: 30:07:18:78:cf:f4:cc:fd:fa:b6:5c:d9:f6:71:a4: 55:54:0c:3d:5e:08:2d:be:47:2d:12:1f:6d:21:2c: ac:d9:63:9c:8e:17:97:70:36:9c:a1:b1:4a:7d:6f: 10:bf:38:e8:e1:e2:fd:71:8f:e5:d0:30:08:46:80: 3f:60:d3:ac:de:a1:c6:51:73:13:b3:aa:75:66:fa: 6f:1e:64:0d:ee:62:b4:56:fd:4a:54:0f:a8:f3:6c: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EA:DD:0B:A8:D0:8E:DF:FE:BB:2F:F4:48:D4:1F:D0:C0:E4:8C:7A X509v3 Authority Key Identifier: keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c6:e9:33:55:9e:48:9a:ca:f5:d9:8c:14:cb:c6:f1:17:4e: f0:f1:1d:94:41:b0:4a:77:d6:3e:af:8b:42:f7:2d:78:7d:5c: 3d:c8:84:5f:e1:03:16:57:1a:3d:2b:32:10:31:b2:12:ef:00: bc:7a:54:25:6e:4f:df:43:8a:96:78:63:b2:12:ce:34:69:59: 84:b7:c5:87:51:ad:f5:4c:ac:36:13:de:cd:de:e9:88:9d:de: a1:d5:b9:ff:d6:ba:78:a1:2b:37:d3:95:90:bc:33:7d:5f:84: 4b:3b:b9:c8:50:fd:e4:99:5f:65:1a:ca:f5:69:d5:bc:30:84: c3:7d:53:3f:61:cf:22:86:0b:f8:5c:56:f5:2d:47:9c:ce:64: 7a:74:70:34:36:25:3a:b4:11:93:a0:3b:bd:24:08:26:a4:07: 24:96:2c:25:2a:8b:24:d5:57:eb:d6:89:28:30:c5:65:20:1a: 97:f3:7b:12:7c:9d:dc:0e:08:71:27:6a:5b:e9:33:84:77:d4: 30:a7:87:4e:5a:4a:a2:a9:59:0c:b3:ed:82:38:e8:55:c7:18: 4c:6a:57:31:45:58:d9:2a:5d:86:ac:c2:9c:1a:b5:97:b4:d3: fb:5f:83:b7:d7:23:48:40:a4:c7:36:3c:06:cf:ff:b2:e2:c5: 7c:dd:5c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3QjAxMTAvBgNVBAUTKDM2QkZERjRDNjVDREVFNkJCNzZFOUYzRTYwODAzNDY2 MUE5RDdBMjYwHhcNMjUwNzAyMjMzNjU4WhcNMjUwNzA5MjMzNjU4WjAYMRYwFAYD VQQDEw02ODY1YzI5Yi0yMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MHR8f+NcGxx4VyNBKINd2tGbLFmcyCUeiY2octICyviMxwprTcf+UdlRIe5 KHEG5ysxyqoIgzkCMG7eEPJLaKgtkB6PHQglnxukNi6j4Lt+q6km4lsJO/xvB3xl /tfzn3eul86+F+e/d7aLdefkHfHehify8ovMXlJFztk3HlSfTAGrJUzidg8P21hr g53o5EU/87PZurtdv6AkYR6rIXHlD/wwBxh4z/TM/fq2XNn2caRVVAw9Xggtvkct Eh9tISys2WOcjheXcDacobFKfW8Qvzjo4eL9cY/l0DAIRoA/YNOs3qHGUXMTs6p1 ZvpvHmQN7mK0Vv1KVA+o82wWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLq3Quo 0I7f/rsv9EjUH9DA5Ix6MB8GA1UdIwQYMBaAFDa/30xlze5rt26fPmCANGYanXom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdCMC8yMUMwMDgxOEU0 NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdtdTNicDgtWUlBMFpocWRl aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05yX2ZUR1hON211M2JwOC1ZSUEwWmhxZGVpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdCMC8yMUMwMDgxOEU0NEYxMUVCQUFBMzdGMENDNEY5QUUwMi9Ocl9mVEdYTjdt dTNicDgtWUlBMFpocWRlaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApxukzVZ5Imsr12YwUy8bxF07w8R2UQbBKd9Y+r4tC9y14fVw9yIRf 4QMWVxo9KzIQMbIS7wC8elQlbk/fQ4qWeGOyEs40aVmEt8WHUa31TKw2E97N3umI nd6h1bn/1rp4oSs305WQvDN9X4RLO7nIUP3kmV9lGsr1adW8MITDfVM/Yc8ihgv4 XFb1LUeczmR6dHA0NiU6tBGToDu9JAgmpAckliwlKosk1Vfr1okoMMVlIBqX83sS fJ3cDghxJ2pb6TOEd9Qwp4dOWkqiqVkMs+2COOhVxxhMalcxRVjZKl2GrMKcGrWX tNP7X4O31yNIQKTHNjwGz/+y4sV83Vz0 -----END CERTIFICATE-----Generated at Fri Jul 4 21:15:07 2025 by rpki-client