$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: rsxhEglZdzd9FptK/HHh9VnOM6G0VRODOxHkSLOt3yQ= Subject key identifier: C2:20:3E:D0:19:34:E9:5D:13:98:BC:27:AC:81:9C:5D:20:42:F3:02 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:51:21 +0000 Manifest this update: Sat 23 Aug 2025 05:51:21 +0000 Manifest next update: Sat 30 Aug 2025 05:51:21 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: HTN/NH9Pa/lp7WLLNMIke9nTqVCnmpNA4xxvBMSHlUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Aug 23 05:51:21 2025 GMT Not After : Aug 30 05:51:21 2025 GMT Subject: CN=68a956d9-55e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:29:bb:1e:04:ea:ee:3f:03:3b:dc:58:85: b7:18:77:f0:44:a8:fd:5b:b2:e0:fb:c7:f3:c4:74: e0:f5:4d:63:29:76:d7:bd:2f:ae:9c:41:ab:93:ac: d5:60:84:cc:0a:c2:fe:ff:1b:fe:39:6d:d4:5c:ff: d8:e0:ad:b4:a7:d3:1b:69:59:49:a0:27:6a:29:77: ce:60:ca:15:a8:4e:75:c0:be:59:b1:ed:fd:5d:88: f2:e9:de:aa:ed:e0:6f:6c:a4:15:74:4f:4a:00:d9: 6e:62:22:1e:d5:d4:21:f6:74:90:39:79:83:06:e8: ed:6b:2d:93:81:81:26:69:0f:8a:a1:d1:4d:cd:75: 04:71:c1:09:2a:9b:be:fc:fa:ab:c6:c5:27:f2:11: c7:14:fd:e2:f7:78:e6:50:1b:61:84:77:c4:39:9e: 6b:1f:66:59:0a:3e:6d:08:af:91:5e:12:61:8e:74: 16:52:c5:ae:70:0d:8c:a4:df:2c:dd:e1:aa:f2:06: 41:1a:bd:16:90:d4:a4:55:76:fe:5f:76:d8:fe:c1: fe:60:e2:6d:4a:c3:aa:67:b3:6f:14:65:f4:3b:4f: 77:5d:10:d8:34:d1:ee:ea:bf:1a:50:7f:95:81:a5: b2:30:25:99:da:7a:14:13:32:86:ef:5e:94:6c:4b: e6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:20:3E:D0:19:34:E9:5D:13:98:BC:27:AC:81:9C:5D:20:42:F3:02 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:09:f4:cf:43:c5:b2:4e:10:7d:a0:4b:82:2d:03:8d:23:13: 8b:18:30:a0:31:62:eb:7d:ca:df:f1:26:8e:44:73:f8:85:12: 33:bb:98:06:88:01:d8:45:2a:a4:e5:2f:ea:fd:19:6c:48:f4: 66:f1:ba:e2:e9:a9:68:2d:08:e3:82:b1:64:2b:50:d6:37:cd: b4:2e:97:99:13:b1:df:91:11:f5:2a:cf:c4:55:67:92:04:61: ed:13:8f:1b:f4:12:31:e2:a3:f4:3d:e2:90:11:5e:4d:38:3e: 13:93:f3:7f:b5:f2:fa:6b:fd:67:31:a4:e1:c8:b4:44:c9:a0: b8:f7:2e:68:52:10:e5:d4:e8:e3:50:dc:48:de:08:da:5d:d8: 4c:c5:b4:e5:52:4f:0a:53:38:5b:b4:a8:a8:b4:4a:24:54:e9: 00:8a:fd:6e:17:7f:65:51:6a:9c:cb:a3:12:40:cb:0f:2d:83: 00:9d:fe:54:d0:b2:7c:26:d6:b3:37:ea:32:34:f7:7d:51:ae: 3e:28:72:e0:da:1f:54:d9:ce:4e:ce:3d:f3:99:57:ff:04:8f: 1c:77:08:a9:37:0a:70:8e:27:94:52:cb:52:04:23:3c:64:fb: df:37:05:af:10:d5:43:27:55:b1:1f:4e:c2:73:1e:9c:09:8f: e5:fc:ae:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUwODIzMDU1MTIxWhcNMjUwODMwMDU1MTIxWjAYMRYwFAYD VQQDEw02OGE5NTZkOS01NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lEpux4E6u4/AzvcWIW3GHfwRKj9W7Lg+8fzxHTg9U1jKXbXvS+unEGrk6zV YITMCsL+/xv+OW3UXP/Y4K20p9MbaVlJoCdqKXfOYMoVqE51wL5Zse39XYjy6d6q 7eBvbKQVdE9KANluYiIe1dQh9nSQOXmDBujtay2TgYEmaQ+KodFNzXUEccEJKpu+ /PqrxsUn8hHHFP3i93jmUBthhHfEOZ5rH2ZZCj5tCK+RXhJhjnQWUsWucA2MpN8s 3eGq8gZBGr0WkNSkVXb+X3bY/sH+YOJtSsOqZ7NvFGX0O093XRDYNNHu6r8aUH+V gaWyMCWZ2noUEzKG716UbEvmDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIgPtAZ NOldE5i8J6yBnF0gQvMCMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWCfTPQ8WyThB9oEuCLQONIxOLGDCgMWLrfcrf8SaORHP4hRIzu5gG iAHYRSqk5S/q/RlsSPRm8bri6aloLQjjgrFkK1DWN820LpeZE7HfkRH1Ks/EVWeS BGHtE48b9BIx4qP0PeKQEV5NOD4Tk/N/tfL6a/1nMaThyLREyaC49y5oUhDl1Ojj UNxI3gjaXdhMxbTlUk8KUzhbtKiotEokVOkAiv1uF39lUWqcy6MSQMsPLYMAnf5U 0LJ8JtazN+oyNPd9Ua4+KHLg2h9U2c5Ozj3zmVf/BI8cdwipNwpwjieUUstSBCM8 ZPvfNwWvENVDJ1WxH07Ccx6cCY/l/K43 -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:09 2025 by rpki-client