$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: bN8vMsOIBBJ/932V9sTKZqLfgjQRNGBFiblyC9QEXKw= Subject key identifier: 9F:0E:9A:C3:7F:0C:83:DA:F6:AF:99:C3:B7:90:59:23:FC:26:BE:AE Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 09B9 Signing time: Fri 22 Aug 2025 20:41:55 +0000 Manifest this update: Fri 22 Aug 2025 20:41:54 +0000 Manifest next update: Fri 29 Aug 2025 20:41:54 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: ZShipn1uHRfmoFJSJD3VcDa23jdedLHo/KNpUJAuy0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Aug 22 20:41:54 2025 GMT Not After : Aug 29 20:41:54 2025 GMT Subject: CN=68a8d612-df57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:14:1b:2a:8a:c3:33:12:19:16:01:c9:16: 67:2c:75:9a:42:6a:62:d4:ce:4a:9e:86:40:4c:37: e6:cd:c8:42:f3:7a:0b:8d:1f:bc:71:1f:3e:14:e9: bb:63:6c:93:fd:42:6a:7c:6c:9d:88:3e:4a:34:27: 00:16:f0:9a:61:25:17:d4:45:c4:9e:7b:99:b9:41: 62:67:2d:e3:46:05:0f:a2:01:ed:37:2e:19:33:1d: 58:24:11:d4:60:93:b1:d4:6a:e2:06:0a:5f:3f:65: 93:4a:60:b8:0c:38:e1:18:c8:59:1f:7a:64:f8:5e: 92:67:16:0e:e0:bd:1b:71:29:a9:1c:29:ab:bf:81: af:b3:12:b4:5e:f2:1b:62:46:09:00:d8:11:b8:6c: a7:d4:1e:1a:a8:09:f7:d6:5a:45:dc:82:cc:2c:fa: b5:24:d5:1c:73:46:92:bf:00:20:d4:85:94:d8:c9: 6f:16:48:77:92:1d:72:be:ba:56:1e:8d:2c:05:2a: f3:43:c6:f6:51:3b:3f:a0:39:0d:64:a2:5c:02:f5: e6:03:1a:3b:2a:0b:4a:8a:15:f1:1d:8b:6b:3a:46: b2:6a:32:56:ad:4c:0c:35:ca:59:4f:c1:1f:f5:18: 57:0b:c2:63:0e:59:54:ef:5f:49:20:5f:25:06:d6: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0E:9A:C3:7F:0C:83:DA:F6:AF:99:C3:B7:90:59:23:FC:26:BE:AE X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:1b:0d:17:02:42:3c:26:26:42:61:03:16:ab:e6:c4:02: 1a:df:40:30:b6:ad:8e:6c:a3:9e:0b:6c:c9:30:a7:cb:3d:6a: cd:fe:05:95:71:fd:0e:a0:88:03:8b:d8:be:76:ec:d3:be:53: d3:23:cf:e7:da:ea:09:55:a0:fa:af:79:96:2a:15:b7:13:3b: d0:1f:f0:b9:f6:9b:8e:a3:f0:96:0e:1e:48:16:6d:49:88:63: a4:cf:c2:25:40:75:3e:da:77:e4:7d:fc:fd:f4:10:74:8b:7a: ab:23:af:8b:b1:47:8c:bd:a8:97:8d:9f:d7:ef:e1:6c:74:fe: 14:d6:65:6d:ac:bd:16:4f:7c:85:37:cd:0b:ba:14:b1:77:1d: 63:63:6a:6c:3d:f9:5e:ab:3a:39:32:d4:1a:65:9d:8e:f4:98: 0d:e3:a7:ab:0f:7a:fa:6f:85:25:b5:3c:6a:66:5e:4c:ee:35: e5:7f:04:80:62:93:1e:cc:39:b1:8c:cc:ce:d9:59:c5:fb:f4: 44:2e:32:61:9d:45:11:c4:64:27:f7:68:6d:08:45:2b:46:26: f3:b0:d5:b9:94:6f:ac:9e:97:ba:3d:b7:95:cb:4f:25:b9:48: 7d:9e:33:57:1a:7e:ff:04:6e:cf:4d:f9:3f:0a:8f:61:76:b5: c9:5b:9e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwODIyMjA0MTU0WhcNMjUwODI5MjA0MTU0WjAYMRYwFAYD VQQDEw02OGE4ZDYxMi1kZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4AUGyqKwzMSGRYByRZnLHWaQmpi1M5KnoZATDfmzchC83oLjR+8cR8+FOm7 Y2yT/UJqfGydiD5KNCcAFvCaYSUX1EXEnnuZuUFiZy3jRgUPogHtNy4ZMx1YJBHU YJOx1GriBgpfP2WTSmC4DDjhGMhZH3pk+F6SZxYO4L0bcSmpHCmrv4GvsxK0XvIb YkYJANgRuGyn1B4aqAn31lpF3ILMLPq1JNUcc0aSvwAg1IWU2MlvFkh3kh1yvrpW Ho0sBSrzQ8b2UTs/oDkNZKJcAvXmAxo7KgtKihXxHYtrOkayajJWrUwMNcpZT8Ef 9RhXC8JjDllU719JIF8lBtZ9RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8OmsN/ DIPa9q+Zw7eQWSP8Jr6uMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXCBsNFwJCPCYmQmEDFqvmxAIa30Awtq2ObKOeC2zJMKfLPWrN/gWV cf0OoIgDi9i+duzTvlPTI8/n2uoJVaD6r3mWKhW3EzvQH/C59puOo/CWDh5IFm1J iGOkz8IlQHU+2nfkffz99BB0i3qrI6+LsUeMvaiXjZ/X7+FsdP4U1mVtrL0WT3yF N80LuhSxdx1jY2psPfleqzo5MtQaZZ2O9JgN46erD3r6b4UltTxqZl5M7jXlfwSA YpMezDmxjMzO2VnF+/RELjJhnUURxGQn92htCEUrRibzsNW5lG+snpe6PbeVy08l uUh9njNXGn7/BG7PTfk/Co9hdrXJW54p -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:21 2025 by rpki-client