$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json) Hash identifier: Wt/3Ma0pE6TT1fShuf3S3rmAarnn3CQ0ggnflnu8RYI= Subject key identifier: C1:D6:22:51:26:A3:45:5C:83:86:31:82:C2:38:21:5E:B0:FB:41:ED Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft Manifest number: 40F0 Signing time: Fri 22 Aug 2025 15:04:48 +0000 Manifest this update: Fri 22 Aug 2025 15:04:47 +0000 Manifest next update: Fri 29 Aug 2025 15:04:47 +0000 Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: J5uGoE25zlrC+BtO17yvdhZTvdvG+53rszquAXrwxjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Validity Not Before: Aug 22 15:04:47 2025 GMT Not After : Aug 29 15:04:47 2025 GMT Subject: CN=68a8870f-5f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:c0:d6:13:d6:22:67:5f:b0:74:32:72:93: 79:1f:8f:4b:e9:84:3d:e8:3d:f1:7e:42:7e:eb:e5: e6:57:94:ac:a6:d1:73:b2:41:be:10:50:c4:09:23: c9:53:81:3f:b3:6a:54:ed:d9:f4:45:fe:54:a7:45: 77:4f:51:7b:a1:98:3a:76:d3:8b:83:73:82:3d:73: a7:73:a7:30:02:f4:96:c8:48:53:25:49:f4:fe:78: 92:5e:1d:7f:f3:42:ad:6a:54:8b:c0:81:7d:a7:35: 03:ed:d0:56:df:e1:b9:2e:5b:12:57:d4:55:98:87: 49:79:a9:69:35:52:2d:1d:a1:99:91:24:15:d0:5a: d8:a1:ca:49:7f:c0:69:54:06:45:ca:be:61:0e:83: 9d:d0:a3:a2:d8:9c:fd:87:fa:8e:41:1f:38:c6:d3: a3:be:c0:ea:44:db:81:86:57:0b:96:fd:73:69:dc: 2d:8c:c9:6c:1f:c0:38:e4:1c:99:23:9a:c3:f7:82: 5a:af:f3:3b:37:da:ef:1d:fc:56:1c:c3:84:16:ec: fc:8e:e5:58:67:db:88:6d:f8:25:4e:9e:23:d1:33: 53:d9:b4:91:89:a9:6c:8f:94:48:37:41:99:c8:51: b9:1a:d1:01:3a:7e:7e:01:85:22:f6:0c:ec:70:32: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D6:22:51:26:A3:45:5C:83:86:31:82:C2:38:21:5E:B0:FB:41:ED X509v3 Authority Key Identifier: keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7b:b5:11:d4:50:5d:43:79:2a:e1:e4:9c:0a:d3:d8:55:0d: 91:1d:c0:2c:68:93:f8:0f:de:95:35:5e:fd:23:78:9e:8b:32: a4:91:85:72:a3:70:d0:e0:bb:0b:cc:68:8c:e8:86:ac:46:8c: 08:57:bd:df:32:9a:3b:98:2a:38:26:33:52:8d:8c:f8:0b:d0: d0:d4:95:2c:cf:7f:17:e6:1e:06:d2:dc:bf:ec:83:a6:5a:f5: ce:cf:06:39:cb:d8:40:be:da:40:fe:25:6c:ed:a4:c4:c7:e5: 20:48:39:c5:ff:05:4f:19:54:03:c6:b9:c4:c5:08:df:c7:21: 81:38:cf:36:6d:80:35:99:84:97:9e:b5:9d:60:08:43:3d:5d: 0f:d2:e8:2d:ad:75:67:59:ba:fc:ce:b9:49:c5:1e:b3:cb:39: 85:1a:6b:91:23:8e:f8:da:ca:04:cd:2d:31:9d:6a:ac:79:d7: cd:1c:6d:af:5c:0d:b4:71:99:a9:fc:b4:a8:0d:9f:bf:5c:85: 4f:57:57:e0:a1:b3:47:97:4d:07:91:08:b7:44:3e:1d:33:ba: 04:74:28:b8:1f:c6:18:54:b3:cd:6d:c5:97:df:10:8e:96:0e: 4b:f2:83:d5:b5:58:a6:33:37:63:f9:f8:0e:18:e1:c9:20:dd: cb:90:7f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5 NEJFNTg1REQwHhcNMjUwODIyMTUwNDQ3WhcNMjUwODI5MTUwNDQ3WjAYMRYwFAYD VQQDEw02OGE4ODcwZi01ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pXA1hPWImdfsHQycpN5H49L6YQ96D3xfkJ+6+XmV5SsptFzskG+EFDECSPJ U4E/s2pU7dn0Rf5Up0V3T1F7oZg6dtOLg3OCPXOnc6cwAvSWyEhTJUn0/niSXh1/ 80KtalSLwIF9pzUD7dBW3+G5LlsSV9RVmIdJealpNVItHaGZkSQV0FrYocpJf8Bp VAZFyr5hDoOd0KOi2Jz9h/qOQR84xtOjvsDqRNuBhlcLlv1zadwtjMlsH8A45ByZ I5rD94Jar/M7N9rvHfxWHMOEFuz8juVYZ9uIbfglTp4j0TNT2bSRialsj5RIN0GZ yFG5GtEBOn5+AYUi9gzscDJSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHWIlEm o0Vcg4YxgsI4IV6w+0HtMB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12 MVpPbjVvbnRxZnlVdmxoZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBye7UR1FBdQ3kq4eScCtPYVQ2RHcAsaJP4D96VNV79I3ieizKkkYVy o3DQ4LsLzGiM6IasRowIV73fMpo7mCo4JjNSjYz4C9DQ1JUsz38X5h4G0ty/7IOm WvXOzwY5y9hAvtpA/iVs7aTEx+UgSDnF/wVPGVQDxrnExQjfxyGBOM82bYA1mYSX nrWdYAhDPV0P0ugtrXVnWbr8zrlJxR6zyzmFGmuRI4742soEzS0xnWqsedfNHG2v XA20cZmp/LSoDZ+/XIVPV1fgobNHl00HkQi3RD4dM7oEdCi4H8YYVLPNbcWX3xCO lg5L8oPVtVimMzdj+fgOGOHJIN3LkH+E -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:24 2025 by rpki-client