$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: cFTf/rlx9S3AfIe2vvG2TLb4XvlSluBcwOcmBNnO/Jg= Subject key identifier: F5:11:30:C7:7E:5D:C8:6B:5C:A4:B1:FC:2E:28:AF:C5:35:DF:D9:8C Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 34 Signing time: Sat 23 Aug 2025 07:50:12 +0000 Manifest this update: Sat 23 Aug 2025 07:50:12 +0000 Manifest next update: Sat 30 Aug 2025 07:50:12 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: EjwFaKQNRcHfP7izuCv7OP5ozHwOhdmfHdly6CYiPAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Aug 23 07:50:12 2025 GMT Not After : Aug 30 07:50:12 2025 GMT Subject: CN=68a972b4-4b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:2b:be:99:be:2d:1a:b7:ba:a7:b2:01:08: 35:6d:e8:48:14:e2:d1:74:b1:e8:15:76:69:af:64: eb:c8:be:aa:65:d7:ab:0d:57:e2:72:ae:cf:85:d3: 2e:4f:25:5f:70:3e:1e:e3:94:11:5f:89:5c:2a:55: 52:2e:2b:54:22:60:9b:42:18:93:5d:fb:85:b7:9c: 08:59:13:11:ab:29:33:79:76:eb:63:1a:ca:ee:1f: 2b:a9:23:90:30:fc:34:90:66:c8:b7:1d:66:03:6f: e7:50:ae:32:17:b8:23:b9:53:33:e4:24:ba:46:11: 44:07:d8:e1:d4:40:3c:dd:0f:b7:58:38:55:42:cb: 01:da:3b:af:11:c4:83:f5:0c:bc:11:8b:e0:da:15: 38:7b:6c:68:a0:60:de:d2:74:5a:67:0e:ca:55:7e: ea:f2:89:6c:7d:6f:b9:ce:4b:21:a0:3e:c2:bf:c2: ec:a8:d3:fb:73:9b:48:8f:5e:be:6f:7f:f8:7a:36: 7c:01:35:e3:fb:71:f2:69:9d:fc:9e:81:22:4b:59: ba:9d:3f:2f:69:ec:c8:c0:67:21:a9:a3:7c:21:97: fa:65:b7:95:72:2a:0f:f5:93:ef:22:77:3a:cd:db: f7:41:17:8f:17:2a:e3:f9:1d:ed:7e:fd:e6:fa:38: 42:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:11:30:C7:7E:5D:C8:6B:5C:A4:B1:FC:2E:28:AF:C5:35:DF:D9:8C X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:47:f5:d1:b3:89:36:29:6f:a1:1c:1b:bb:c9:ea:33:ec:03: 9b:b0:4c:4b:a1:5c:3d:ed:aa:8d:8a:75:89:7e:2b:cb:ea:00: 37:3e:68:aa:2e:cb:da:7f:28:2c:e7:27:a2:aa:06:c9:c6:31: 22:2c:4b:8d:ef:21:ac:5d:4c:e5:b1:2b:65:bc:e3:36:9b:63: fb:f0:79:3c:25:51:1a:25:65:54:6c:de:40:9c:f6:78:4c:39: f9:34:6a:88:6b:4c:78:58:f6:55:03:18:64:4c:41:20:6a:4b: da:2c:c8:b0:69:cb:a4:2c:6d:78:50:18:95:b5:e5:05:80:5b: bd:25:49:93:72:3d:7d:34:77:ec:3c:ca:e0:cd:eb:67:17:6a: 5f:41:a5:c1:a3:66:5b:9e:97:8f:51:5e:5a:0c:df:f2:71:e6: e2:84:63:90:11:ef:a8:13:40:23:c7:20:f7:04:08:c0:78:6c: c7:cc:0e:af:ef:87:0e:14:21:8f:84:7f:99:12:14:2a:77:91: be:2e:ef:fd:54:c5:05:61:d9:b9:74:1d:da:1d:5c:b8:d2:85: a0:5d:cb:96:77:b5:7b:39:cb:de:ff:e8:68:88:da:d7:1e:72: 93:dc:b7:f3:00:39:48:b5:3d:91:b8:2c:68:d9:d8:53:61:a6: 51:68:e6:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTA4MjMwNzUwMTJaFw0yNTA4MzAwNzUwMTJaMBgxFjAUBgNV BAMTDTY4YTk3MmI0LTRiN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+qSu+mb4tGre6p7IBCDVt6EgU4tF0segVdmmvZOvIvqpl16sNV+Jyrs+F0y5P JV9wPh7jlBFfiVwqVVIuK1QiYJtCGJNd+4W3nAhZExGrKTN5dutjGsruHyupI5Aw /DSQZsi3HWYDb+dQrjIXuCO5UzPkJLpGEUQH2OHUQDzdD7dYOFVCywHaO68RxIP1 DLwRi+DaFTh7bGigYN7SdFpnDspVfuryiWx9b7nOSyGgPsK/wuyo0/tzm0iPXr5v f/h6NnwBNeP7cfJpnfyegSJLWbqdPy9p7MjAZyGpo3whl/plt5VyKg/1k+8idzrN 2/dBF48XKuP5He1+/eb6OEILAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9REwx35d yGtcpLH8LiivxTXf2YwwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtH9dGziTYpb6EcG7vJ6jPsA5uwTEuhXD3tqo2KdYl+K8vqADc+aKou y9p/KCznJ6KqBsnGMSIsS43vIaxdTOWxK2W84zabY/vweTwlURolZVRs3kCc9nhM Ofk0aohrTHhY9lUDGGRMQSBqS9osyLBpy6QsbXhQGJW15QWAW70lSZNyPX00d+w8 yuDN62cXal9BpcGjZluel49RXloM3/Jx5uKEY5AR76gTQCPHIPcECMB4bMfMDq/v hw4UIY+Ef5kSFCp3kb4u7/1UxQVh2bl0HdodXLjShaBdy5Z3tXs5y97/6GiI2tce cpPct/MAOUi1PZG4LGjZ2FNhplFo5vI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:51 2025 by rpki-client