$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: wu+0selqKCcb0jg43S9XZ3MlQfRUtnEMs6Biu8q0524= Subject key identifier: C7:8F:E1:6F:4C:66:77:FB:A2:06:4D:0C:00:B9:44:AD:B1:BF:F1:28 Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:56:32 +0000 Manifest this update: Sat 23 Aug 2025 07:56:31 +0000 Manifest next update: Sat 30 Aug 2025 07:56:31 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: JdVC0q176avL0cdLUjyP5PlpT3Fc83Gw7kF2uZ6WDik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Aug 23 07:56:31 2025 GMT Not After : Aug 30 07:56:31 2025 GMT Subject: CN=68a97430-9b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:fa:7e:5f:7a:e9:e9:48:03:f4:bc:4c:92: bd:ac:15:d6:c8:4e:fd:61:77:db:1b:70:9e:5c:73: 3a:d9:3d:1e:67:08:f1:0c:c2:6d:b9:f0:9b:fa:00: fc:b6:21:40:56:0e:b0:74:08:0c:ce:e7:0a:dd:84: d7:ae:7d:b7:9f:d7:5d:80:3c:63:9e:ce:18:f6:52: 6c:9e:80:5a:29:7a:6c:9f:c3:4a:2b:a7:58:52:8e: e2:54:55:66:84:5a:7a:0c:66:8c:3d:ab:e0:e2:b6: c9:c7:d7:f2:c9:fa:ba:dc:60:62:cd:c0:26:3e:a4: 54:65:a2:52:b1:9d:58:bf:7f:d5:87:61:01:b4:c2: 40:f8:5b:fd:d4:f1:92:b4:63:73:92:7b:9d:6f:3f: 46:c0:72:be:9c:52:77:d8:53:dc:ed:1b:c0:0e:ba: cf:44:a0:d5:de:0f:ab:0d:06:b1:f2:4b:ad:ec:50: 57:dc:52:d6:45:0c:3e:32:9f:4b:5a:eb:18:43:07: 32:60:ab:df:17:52:48:f4:4a:68:80:8b:96:00:f5: fe:60:79:3f:83:f5:d9:63:be:cd:41:e3:7e:74:df: 3d:69:56:88:8f:b4:0b:3f:ee:53:5b:99:06:99:84: ef:8a:08:ee:53:af:23:e3:a7:ec:89:c9:fc:ea:71: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:E1:6F:4C:66:77:FB:A2:06:4D:0C:00:B9:44:AD:B1:BF:F1:28 X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:bf:3e:47:f5:e5:16:e1:54:5f:d2:c3:ee:e1:05:e4:a0:4c: c0:0d:75:62:f2:49:c7:83:ce:e3:5e:8c:40:51:cd:a6:0c:9c: af:3e:96:8d:e1:9f:69:24:51:57:18:85:70:7b:a3:77:c1:ba: aa:1e:ff:28:c8:71:09:05:df:27:95:17:15:34:92:fe:23:da: af:63:f8:e2:2b:30:ee:8d:bd:fc:90:c6:a9:c4:2e:77:ca:72: 60:7d:d8:ec:51:6b:41:91:34:c4:f6:81:e0:4a:9b:47:c0:50: 27:58:0b:49:79:94:30:f0:30:bc:c0:2d:61:03:0c:57:29:e0: 2f:f1:55:a4:e4:90:75:f7:9c:a3:64:2f:bc:74:f2:ac:db:52: 49:7b:15:6f:fb:86:90:d4:ff:d7:01:33:cf:1d:e7:ac:23:38: 0e:f0:d9:32:dc:d7:59:36:e2:45:ce:13:51:e6:a3:70:29:26: a1:f8:99:07:10:61:35:ab:d9:03:8f:5d:df:4c:ad:2f:ef:8a: 4b:14:81:df:51:29:e4:19:88:6a:21:88:09:90:f8:a8:35:33: 27:58:20:af:09:07:aa:23:1a:83:2f:a5:0e:da:3d:73:c0:f2: 2e:0a:9e:8e:62:38:3f:63:4d:64:c6:f8:e6:e2:04:e3:47:a0: ae:2c:84:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTA4MjMwNzU2MzFaFw0yNTA4MzAwNzU2MzFaMBgxFjAUBgNV BAMTDTY4YTk3NDMwLTliOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfPfp+X3rp6UgD9LxMkr2sFdbITv1hd9sbcJ5cczrZPR5nCPEMwm258Jv6APy2 IUBWDrB0CAzO5wrdhNeufbef112APGOezhj2UmyegFopemyfw0orp1hSjuJUVWaE WnoMZow9q+DitsnH1/LJ+rrcYGLNwCY+pFRlolKxnVi/f9WHYQG0wkD4W/3U8ZK0 Y3OSe51vP0bAcr6cUnfYU9ztG8AOus9EoNXeD6sNBrHyS63sUFfcUtZFDD4yn0ta 6xhDBzJgq98XUkj0SmiAi5YA9f5geT+D9dljvs1B43503z1pVoiPtAs/7lNbmQaZ hO+KCO5TryPjp+yJyfzqcU8bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx4/hb0xm d/uiBk0MALlErbG/8SgwHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACO/Pkf15RbhVF/Sw+7hBeSgTMANdWLySceDzuNejEBRzaYMnK8+lo3h n2kkUVcYhXB7o3fBuqoe/yjIcQkF3yeVFxU0kv4j2q9j+OIrMO6NvfyQxqnELnfK cmB92OxRa0GRNMT2geBKm0fAUCdYC0l5lDDwMLzALWEDDFcp4C/xVaTkkHX3nKNk L7x08qzbUkl7FW/7hpDU/9cBM88d56wjOA7w2TLc11k24kXOE1Hmo3ApJqH4mQcQ YTWr2QOPXd9MrS/viksUgd9RKeQZiGohiAmQ+Kg1MydYIK8JB6ojGoMvpQ7aPXPA 8i4Kno5iOD9jTWTG+ObiBONHoK4shEk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:41 2025 by rpki-client