$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: x6T8xG2J3ZOYFJgXpLh8p3KV6PckEtjmEwaMDuDhyNg= Subject key identifier: EE:CA:98:1B:58:4E:8B:F9:BC:F2:10:42:19:1C:0F:B9:90:9E:5B:12 Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 023C Signing time: Sat 23 Aug 2025 02:05:59 +0000 Manifest this update: Sat 23 Aug 2025 02:05:59 +0000 Manifest next update: Sat 30 Aug 2025 02:05:59 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: ET8dYLzPF8qJOXz2cFLztiW87IhRknhDaUoTWPyJagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: Aug 23 02:05:59 2025 GMT Not After : Aug 30 02:05:59 2025 GMT Subject: CN=68a92207-2b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:62:e1:e2:5a:cb:dc:54:13:e8:90:44:6f: 43:7c:1b:93:28:66:f3:e5:27:dd:54:82:01:b3:2d: de:65:11:a4:be:34:cd:e9:fb:60:1f:74:fe:10:47: fd:af:8d:50:63:94:02:e0:d9:90:2f:fc:cb:09:f4: 86:70:c0:02:c9:b1:15:a9:e3:6c:29:e4:11:5a:b1: 47:83:17:8e:ad:ac:c0:db:41:7c:9c:67:85:cb:b7: 0b:a6:65:15:33:e0:8c:12:46:26:0e:76:d4:c1:66: d7:61:19:d4:b5:fe:1d:ff:69:97:3c:3c:a7:1a:d4: bd:e2:a5:6f:4f:24:2a:16:95:3b:dd:02:83:57:e0: 5d:5e:fd:2d:5f:02:df:e7:42:a9:20:d1:c8:60:2e: 9b:d1:ac:ae:3a:1b:48:be:6e:06:ca:39:6d:9e:78: e4:e1:08:3c:d8:bb:ce:b0:0d:f7:c3:fd:f7:48:bd: cc:23:5a:dd:89:d6:e8:52:b0:eb:73:99:be:ba:34: 68:de:a9:ba:20:c8:bd:d8:59:79:b7:c7:eb:83:48: 38:ea:23:2d:55:d6:2b:7e:bb:3a:d0:66:b3:f8:ec: 57:3e:58:5f:55:e5:99:eb:86:8d:b4:b6:78:c1:7c: 05:38:7e:8d:93:de:5e:c4:13:dd:60:1c:17:aa:e3: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:98:1B:58:4E:8B:F9:BC:F2:10:42:19:1C:0F:B9:90:9E:5B:12 X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f9:99:a7:09:69:8a:07:5f:86:8a:3c:c2:cc:33:3d:ca:2c: 75:8a:2b:f5:5f:9d:6b:19:33:23:df:96:1f:e9:ca:6a:b8:f8: 82:e7:30:da:16:5b:a6:43:81:b3:53:53:c3:bb:00:dd:5f:17: 75:ef:14:47:ae:8a:f7:b0:f7:30:ae:6a:a1:f2:94:15:f2:1e: 3e:9b:1a:21:b5:b5:04:b9:41:e4:6d:7e:e6:c8:07:87:de:5e: e4:1d:3c:08:71:39:50:30:35:e9:e8:51:76:05:ef:4e:8e:09: 74:97:b9:11:f2:40:d4:dd:7c:24:0c:13:11:c4:d6:72:83:df: a7:75:36:d4:de:9f:d1:5f:db:74:da:03:ce:25:17:7e:7e:6a: f8:8c:da:37:1a:e4:5b:5c:be:e9:47:f6:06:57:e0:72:67:dd: 0e:57:ca:c6:fe:91:1a:a8:1c:99:64:7b:89:ef:a0:44:88:28: 97:05:ee:f1:83:5d:a5:2c:b4:79:d6:d9:ec:97:87:e5:27:28: 21:44:66:2c:71:39:76:56:e7:5b:fe:0d:1f:be:3e:b4:40:4d: 12:a8:4a:1b:e5:4b:b1:c4:f6:7e:65:dd:19:80:56:bb:e5:85: 16:9b:b9:b9:db:51:df:1a:30:fc:e9:27:a2:42:45:2c:75:9c: 9b:af:75:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUwODIzMDIwNTU5WhcNMjUwODMwMDIwNTU5WjAYMRYwFAYD VQQDEw02OGE5MjIwNy0yYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvNi4eJay9xUE+iQRG9DfBuTKGbz5SfdVIIBsy3eZRGkvjTN6ftgH3T+EEf9 r41QY5QC4NmQL/zLCfSGcMACybEVqeNsKeQRWrFHgxeOrazA20F8nGeFy7cLpmUV M+CMEkYmDnbUwWbXYRnUtf4d/2mXPDynGtS94qVvTyQqFpU73QKDV+BdXv0tXwLf 50KpINHIYC6b0ayuOhtIvm4Gyjltnnjk4Qg82LvOsA33w/33SL3MI1rdidboUrDr c5m+ujRo3qm6IMi92Fl5t8frg0g46iMtVdYrfrs60Gaz+OxXPlhfVeWZ64aNtLZ4 wXwFOH6Nk95exBPdYBwXquOu3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7KmBtY Tov5vPIQQhkcD7mQnlsSMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4+ZmnCWmKB1+GijzCzDM9yix1iiv1X51rGTMj35Yf6cpquPiC5zDa FlumQ4GzU1PDuwDdXxd17xRHror3sPcwrmqh8pQV8h4+mxohtbUEuUHkbX7myAeH 3l7kHTwIcTlQMDXp6FF2Be9Ojgl0l7kR8kDU3XwkDBMRxNZyg9+ndTbU3p/RX9t0 2gPOJRd+fmr4jNo3GuRbXL7pR/YGV+ByZ90OV8rG/pEaqByZZHuJ76BEiCiXBe7x g12lLLR51tnsl4flJyghRGYscTl2Vudb/g0fvj60QE0SqEob5UuxxPZ+Zd0ZgFa7 5YUWm7m521HfGjD86SeiQkUsdZybr3UJ -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:09 2025 by rpki-client