$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: QTlheL1pCanq4+FtlR3fBoUChBPeTSy47AFyIFAKCj8= Subject key identifier: 49:1E:C3:08:80:C0:03:9B:82:46:06:B0:BB:B6:BC:67:BF:9A:01:90 Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 07B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 07B1 Signing time: Fri 22 Aug 2025 21:23:16 +0000 Manifest this update: Fri 22 Aug 2025 21:23:15 +0000 Manifest next update: Fri 29 Aug 2025 21:23:15 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: hAhdG4E33hvUbb1Lvz8iYdlwlDj7nQFMMrER4LK+SuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Aug 22 21:23:15 2025 GMT Not After : Aug 29 21:23:15 2025 GMT Subject: CN=68a8dfc4-398f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:5d:71:48:08:e7:46:1a:45:54:85:7e:99: e0:fd:b1:19:d0:66:d2:9a:cd:02:a2:37:eb:ee:f0: d4:73:1c:5a:47:9a:3b:3c:b0:9f:55:bb:c9:78:4f: 19:10:57:af:52:7a:12:63:01:46:65:46:50:fc:11: 9e:fc:ae:62:6e:55:ed:8c:7d:09:fe:6e:a9:9e:e2: e2:15:cf:fd:39:e4:f4:74:5f:7e:dd:ee:1e:27:71: 84:94:48:63:5b:a6:a3:fb:1e:77:c5:d1:20:e4:6d: 45:5e:20:b0:89:6d:d2:ed:6b:0b:11:bc:8f:12:c2: 66:a8:63:ef:11:9e:e1:29:0e:80:12:e8:01:d1:16: e9:ab:37:3b:70:f7:cc:5d:d5:42:c6:12:96:a0:96: c4:6c:24:b5:94:3b:82:2c:13:f2:5c:58:1f:7d:03: d0:65:3b:6a:28:79:27:ca:7f:aa:66:ee:79:46:05: 64:ce:41:dd:74:a4:01:82:9e:da:4c:f1:d3:f7:a0: 6f:75:d3:a9:2c:13:62:2b:6d:39:c0:93:fb:a8:43: 72:c3:32:2c:af:ed:3f:1d:51:69:9b:b6:8d:42:55: d8:d6:35:53:cc:0f:52:fc:df:68:6a:bc:af:32:de: 4b:22:91:98:d4:53:00:ea:ce:62:45:76:e2:30:91: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1E:C3:08:80:C0:03:9B:82:46:06:B0:BB:B6:BC:67:BF:9A:01:90 X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:c4:49:b4:76:95:42:5f:8f:89:3b:75:3c:f0:3a:fb:90:d3: 39:56:ba:45:b6:fb:38:81:77:33:1d:01:4a:3f:39:87:34:f8: 2b:df:fb:c4:a7:c0:74:c5:be:65:0b:00:45:a4:7c:ad:eb:3e: 18:bb:d8:cc:a4:8b:04:d6:97:08:4e:77:70:83:22:9e:96:ad: b4:df:2e:a0:3d:62:e5:e3:b1:bb:87:e9:8c:b1:e1:93:5f:8e: 7a:8e:4d:1d:75:06:bf:87:48:a1:0b:6e:1c:c4:ad:dc:43:4f: 80:89:ba:89:ab:e6:a4:04:44:fe:64:b6:b7:40:75:4f:6b:18: fe:35:71:0d:29:14:4d:09:d4:6a:19:40:79:dd:00:b4:90:17: 87:84:45:e1:2d:44:c4:d1:88:61:d0:9c:d5:e2:a7:3c:a5:14: 22:2a:cc:e4:86:76:9b:2f:34:53:ab:77:18:85:0e:54:0a:ef: 6a:4d:41:e2:04:fd:e2:01:4b:16:3c:ed:c0:b4:13:21:46:4d: da:a9:a0:90:42:09:55:91:b9:1c:5d:44:f3:6b:a7:c5:91:ac: 70:86:ad:68:84:d0:54:b3:19:fa:1c:e0:6f:df:98:60:c5:b9: 06:8b:16:96:32:1c:80:30:64:f2:9b:3a:1a:15:c9:7c:c0:47: 9d:01:fc:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjUwODIyMjEyMzE1WhcNMjUwODI5MjEyMzE1WjAYMRYwFAYD VQQDEw02OGE4ZGZjNC0zOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKpdcUgI50YaRVSFfpng/bEZ0GbSms0Cojfr7vDUcxxaR5o7PLCfVbvJeE8Z EFevUnoSYwFGZUZQ/BGe/K5iblXtjH0J/m6pnuLiFc/9OeT0dF9+3e4eJ3GElEhj W6aj+x53xdEg5G1FXiCwiW3S7WsLEbyPEsJmqGPvEZ7hKQ6AEugB0Rbpqzc7cPfM XdVCxhKWoJbEbCS1lDuCLBPyXFgffQPQZTtqKHknyn+qZu55RgVkzkHddKQBgp7a TPHT96BvddOpLBNiK205wJP7qENywzIsr+0/HVFpm7aNQlXY1jVTzA9S/N9oaryv Mt5LIpGY1FMA6s5iRXbiMJEpzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkewwiA wAObgkYGsLu2vGe/mgGQMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5xEm0dpVCX4+JO3U88Dr7kNM5VrpFtvs4gXczHQFKPzmHNPgr3/vE p8B0xb5lCwBFpHyt6z4Yu9jMpIsE1pcITndwgyKelq203y6gPWLl47G7h+mMseGT X456jk0ddQa/h0ihC24cxK3cQ0+AibqJq+akBET+ZLa3QHVPaxj+NXENKRRNCdRq GUB53QC0kBeHhEXhLUTE0Yhh0JzV4qc8pRQiKszkhnabLzRTq3cYhQ5UCu9qTUHi BP3iAUsWPO3AtBMhRk3aqaCQQglVkbkcXUTza6fFkaxwhq1ohNBUsxn6HOBv35hg xbkGixaWMhyAMGTymzoaFcl8wEedAfx3 -----END CERTIFICATE-----Generated at Sun Aug 24 04:56:54 2025 by rpki-client