$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: hhhViPgP46Kh4x/Yl7if5UFj7ZJpVKRwQGuKnjazD3Y= Subject key identifier: 09:E7:92:24:5E:F6:D7:2D:19:11:66:D1:49:17:F7:93:80:8D:99:B3 Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1E7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1E67 Signing time: Fri 22 Aug 2025 16:07:20 +0000 Manifest this update: Fri 22 Aug 2025 16:07:19 +0000 Manifest next update: Fri 29 Aug 2025 16:07:19 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: mFH1r/TiF1SSXguYQMzGQQooK4PJeMlavBXSpFKCNZE=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7804 (0x1e7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Aug 22 16:07:19 2025 GMT Not After : Aug 29 16:07:19 2025 GMT Subject: CN=68a895b7-63c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:b6:b2:81:ff:14:25:ca:54:aa:f7:5d:ea: 4e:2a:cb:38:bc:e9:64:d2:03:fb:ff:3c:cd:fa:8d: e2:f4:81:8f:c9:75:dd:fc:43:5f:2b:58:48:08:4b: cc:a7:17:53:8d:d1:48:0f:a2:aa:52:d6:c6:26:79: 3e:3f:7e:ea:98:7b:5c:9d:d7:31:56:63:53:12:55: 6e:04:51:3f:67:2f:6c:b3:f4:35:11:7a:a7:cb:c4: cd:bc:b9:fe:42:d8:bf:5a:40:42:b2:84:32:9a:93: e0:71:ec:bc:31:89:9c:79:a3:66:48:84:1f:8d:9e: f8:ae:f9:b8:83:9d:cd:ec:11:4a:ef:1b:b1:cf:30: f2:15:46:5a:36:33:9d:4d:72:7f:59:08:85:dd:2c: 85:8e:83:12:72:92:62:7e:ed:c2:6f:2d:f9:dc:a6: 96:55:66:a6:a8:ec:85:04:ad:0f:7a:66:d2:e5:b0: 38:43:b0:f1:0f:4e:a0:32:3d:6c:eb:8c:38:e1:2d: 7c:45:77:37:36:46:72:67:89:44:a4:05:8b:26:04: d1:01:34:7a:44:80:28:6c:5e:2f:2c:1d:3b:f0:23: bc:fd:47:a3:f9:c9:8d:7c:d2:bb:4d:01:d8:1c:23: 36:58:b7:6f:27:19:55:1e:14:86:cb:51:d2:f7:1c: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E7:92:24:5E:F6:D7:2D:19:11:66:D1:49:17:F7:93:80:8D:99:B3 X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:43:ed:c0:0b:c7:f9:87:98:bb:3d:50:40:d1:20:4f:1c:81: e2:9a:37:48:ff:15:cb:3d:ad:91:61:f8:09:14:82:66:fb:a4: ea:6e:b4:ac:11:aa:ff:0c:f8:f1:c6:e3:5e:92:84:4e:06:7c: 4d:a0:6d:43:d4:b3:c9:6e:69:ff:e7:f5:de:11:a8:7d:92:b1: f4:52:90:02:c6:62:8d:86:ad:c8:64:fb:6a:8a:f8:12:8f:93: 90:89:e5:c3:5f:b6:f4:a8:93:52:2e:d4:58:99:e8:2f:0e:e3: cc:4e:ee:3f:92:b5:5d:0e:54:c8:40:e6:fd:70:df:0a:af:cc: 01:94:e7:10:1d:6e:f0:9a:01:32:f6:fa:47:96:45:ab:c1:44: 32:23:fd:ae:73:42:50:33:77:66:86:c1:7f:9f:f5:04:3e:90: 5a:12:3a:b9:0e:52:0e:77:ca:53:5e:50:20:01:95:01:01:c9: f2:ad:40:d9:9f:ca:70:56:21:cf:8e:d8:b3:e5:02:23:54:f7: 9f:43:47:63:a3:52:0e:eb:cf:71:cd:7b:42:5d:de:4d:f1:89: 4a:4e:21:cb:fd:27:c2:4b:ae:80:a4:87:dc:63:70:23:72:ea: e9:26:55:47:19:bc:f3:d5:ef:15:17:04:9e:8c:6d:ac:06:71: 5c:ab:00:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjUwODIyMTYwNzE5WhcNMjUwODI5MTYwNzE5WjAYMRYwFAYD VQQDEw02OGE4OTViNy02M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0i2soH/FCXKVKr3XepOKss4vOlk0gP7/zzN+o3i9IGPyXXd/ENfK1hICEvM pxdTjdFID6KqUtbGJnk+P37qmHtcndcxVmNTElVuBFE/Zy9ss/Q1EXqny8TNvLn+ Qti/WkBCsoQympPgcey8MYmceaNmSIQfjZ74rvm4g53N7BFK7xuxzzDyFUZaNjOd TXJ/WQiF3SyFjoMScpJifu3Cby353KaWVWamqOyFBK0PembS5bA4Q7DxD06gMj1s 64w44S18RXc3NkZyZ4lEpAWLJgTRATR6RIAobF4vLB078CO8/Uej+cmNfNK7TQHY HCM2WLdvJxlVHhSGy1HS9xy9fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnnkiRe 9tctGRFm0UkX95OAjZmzMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpQ+3AC8f5h5i7PVBA0SBPHIHimjdI/xXLPa2RYfgJFIJm+6TqbrSs Ear/DPjxxuNekoROBnxNoG1D1LPJbmn/5/XeEah9krH0UpACxmKNhq3IZPtqivgS j5OQieXDX7b0qJNSLtRYmegvDuPMTu4/krVdDlTIQOb9cN8Kr8wBlOcQHW7wmgEy 9vpHlkWrwUQyI/2uc0JQM3dmhsF/n/UEPpBaEjq5DlIOd8pTXlAgAZUBAcnyrUDZ n8pwViHPjtiz5QIjVPefQ0djo1IO689xzXtCXd5N8YlKTiHL/SfCS66ApIfcY3Aj curpJlVHGbzz1e8VFwSejG2sBnFcqwDp -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:09 2025 by rpki-client