$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: N91e/ow9u2IamwEY+xSsfgUpNXU/6PKkX34Rpp+zwbA= Subject key identifier: DF:E2:F8:43:89:69:7E:DF:27:FC:95:CE:EE:85:8D:84:1C:DC:98:E8 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 134D Signing time: Fri 22 Aug 2025 18:39:59 +0000 Manifest this update: Fri 22 Aug 2025 18:39:58 +0000 Manifest next update: Fri 29 Aug 2025 18:39:58 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: SdX4mjKxcejmqHY8geF84jc9mX2c/3NxI5tUQzOl5i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Aug 22 18:39:58 2025 GMT Not After : Aug 29 18:39:58 2025 GMT Subject: CN=68a8b97e-3fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:ab:65:88:9f:d8:7e:ff:d0:ee:6f:15:a3: 15:72:a1:d1:69:76:cf:24:de:47:10:5d:bb:d8:8d: 10:14:09:22:a9:0f:dd:12:d8:38:e4:8a:7c:f2:ee: be:32:79:ec:a6:9e:a7:8c:03:dd:ed:1a:cc:14:7d: 01:71:8b:56:8b:da:5c:1b:b3:a9:88:2c:4a:a2:74: c7:98:e0:59:d4:9a:32:4c:ac:2a:9a:58:63:77:11: dc:e9:29:fe:bc:f5:e0:db:f9:41:84:5c:29:7e:56: a7:33:7a:6f:1b:22:60:8f:73:80:0d:24:1c:36:2b: e3:80:75:cb:8e:7d:84:33:10:14:e5:76:8a:23:7f: 90:ca:6e:91:4e:7b:0c:92:eb:4f:bf:84:f8:f7:95: 7c:46:31:99:16:6c:c9:46:d1:3c:bc:57:50:ed:40: ef:76:f7:3e:a4:79:c7:cc:5f:35:17:13:47:35:77: 3d:2e:ce:bb:4e:f1:2b:bd:88:3d:75:13:1a:fb:77: 8b:f0:1e:1b:4b:1c:18:98:96:60:d5:2b:4a:75:9f: 99:88:dc:08:1b:0e:bd:19:c5:f2:64:2a:51:aa:be: 07:e3:17:98:b5:48:d7:b6:8c:a1:8b:9c:4a:7b:75: 9e:7f:59:03:e6:80:04:8f:4c:43:ac:5c:6a:b4:fe: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:F8:43:89:69:7E:DF:27:FC:95:CE:EE:85:8D:84:1C:DC:98:E8 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:3c:a9:f2:1e:01:81:da:3e:67:25:05:67:38:fe:5f:73:38: c7:77:5b:18:04:99:99:cc:fc:19:ce:c6:37:c5:12:b9:55:4b: 25:31:eb:66:44:12:63:eb:b0:bd:ee:5b:5b:07:db:82:20:c4: 6f:0a:dc:d2:fc:2f:7e:6b:2d:da:da:5d:c6:44:e8:ba:2a:71: d2:b7:28:2e:bd:9b:61:af:68:4f:45:da:dc:ae:49:ca:17:4e: 75:43:9a:b3:75:9c:e8:4e:91:47:c5:a0:99:4b:9d:72:01:68: 6a:96:49:9d:f5:0e:90:fe:64:5a:ba:98:81:92:3d:61:f1:cc: 76:d7:e7:07:e2:bc:8b:3e:53:51:69:d7:c4:1d:57:c2:4b:5c: 78:5e:fe:1b:b1:44:44:f1:9c:e5:90:98:0c:98:9b:b7:02:78: 7b:9e:f5:55:ac:6c:ae:3c:37:12:cb:df:57:17:aa:da:c6:6e: 62:e7:fe:83:11:3c:4d:25:ce:11:9c:e8:f7:e9:20:c9:3a:b6: 57:26:99:f0:5f:a6:80:77:14:0f:06:48:d0:1b:ae:3a:64:95: 2e:69:41:bd:2e:26:5b:05:7c:b3:da:98:03:b8:b4:18:70:8d: ae:53:b9:32:01:fb:10:81:46:eb:aa:f2:9b:f0:de:d9:08:7b: 60:99:e8:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUwODIyMTgzOTU4WhcNMjUwODI5MTgzOTU4WjAYMRYwFAYD VQQDEw02OGE4Yjk3ZS0zZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu2rZYif2H7/0O5vFaMVcqHRaXbPJN5HEF272I0QFAkiqQ/dEtg45Ip88u6+ Mnnspp6njAPd7RrMFH0BcYtWi9pcG7OpiCxKonTHmOBZ1JoyTKwqmlhjdxHc6Sn+ vPXg2/lBhFwpflanM3pvGyJgj3OADSQcNivjgHXLjn2EMxAU5XaKI3+Qym6RTnsM kutPv4T495V8RjGZFmzJRtE8vFdQ7UDvdvc+pHnHzF81FxNHNXc9Ls67TvErvYg9 dRMa+3eL8B4bSxwYmJZg1StKdZ+ZiNwIGw69GcXyZCpRqr4H4xeYtUjXtoyhi5xK e3Wef1kD5oAEj0xDrFxqtP6s2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/i+EOJ aX7fJ/yVzu6FjYQc3JjoMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUPKnyHgGB2j5nJQVnOP5fczjHd1sYBJmZzPwZzsY3xRK5VUslMetm RBJj67C97ltbB9uCIMRvCtzS/C9+ay3a2l3GROi6KnHStyguvZthr2hPRdrcrknK F051Q5qzdZzoTpFHxaCZS51yAWhqlkmd9Q6Q/mRaupiBkj1h8cx21+cH4ryLPlNR adfEHVfCS1x4Xv4bsURE8ZzlkJgMmJu3Anh7nvVVrGyuPDcSy99XF6raxm5i5/6D ETxNJc4RnOj36SDJOrZXJpnwX6aAdxQPBkjQG646ZJUuaUG9LiZbBXyz2pgDuLQY cI2uU7kyAfsQgUbrqvKb8N7ZCHtgmegS -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:27 2025 by rpki-client