$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: jOk1duRHng4SzwYzoGGiyPht/SAZbgYi2maXWh7hlSs= Subject key identifier: 37:FE:18:62:26:41:92:23:8F:EF:23:25:8E:AD:D8:AD:AE:BF:7A:5D Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: CE Signing time: Sat 23 Aug 2025 05:49:39 +0000 Manifest this update: Sat 23 Aug 2025 05:49:38 +0000 Manifest next update: Sat 30 Aug 2025 05:49:38 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: QzpfmrPtB44dTbAYkFe40HeY7oZHDH3ilThQtQGHasc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Aug 23 05:49:38 2025 GMT Not After : Aug 30 05:49:38 2025 GMT Subject: CN=68a95673-9e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:df:7f:2a:d5:0d:e7:d9:ee:fe:a2:f1:cd:11: 40:5e:d6:44:6e:79:c0:e1:8c:c6:b6:fd:b0:a5:d7: e9:9c:21:b4:e0:1f:c2:f5:26:e8:ab:5d:07:7c:19: 0a:15:77:d7:f9:db:74:e6:d1:fe:51:f0:65:78:72: a0:3c:f5:b5:5e:d7:4b:5c:5e:1c:88:09:0a:98:64: 59:48:ac:de:33:90:59:c1:36:90:05:fc:c5:8a:a8: aa:ea:e0:30:98:90:5a:9a:7b:ea:ed:d4:82:bb:52: b8:d1:c3:5f:6e:b7:2b:c6:8f:04:7a:87:dd:de:e2: 68:68:28:15:63:94:c6:b5:36:ca:ee:0a:fd:e3:b0: 9a:5c:67:49:ca:8f:b9:aa:f2:63:43:3f:e0:9b:34: 29:f6:b0:28:e9:b1:b0:79:17:a8:5d:55:27:88:19: 98:26:85:1e:db:d4:ec:ab:0f:6a:50:a4:20:a5:8f: 42:b5:6c:35:ba:b0:ce:41:23:7a:c4:7d:bb:59:fc: 18:24:9f:f2:d7:64:fd:ba:16:c9:be:78:cc:96:1f: ed:d7:2f:7e:3c:35:af:b1:5f:ec:2d:ac:99:79:15: 3d:84:75:0e:5f:27:3e:c8:6c:08:22:f2:fe:52:60: 75:b4:54:bf:1c:1e:dd:46:82:91:d0:18:54:3b:58: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:18:62:26:41:92:23:8F:EF:23:25:8E:AD:D8:AD:AE:BF:7A:5D X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:45:9c:46:27:45:62:bf:72:40:68:19:dd:63:59:44:f1:ec: ed:0d:e9:9c:44:30:bc:d9:e3:22:75:a2:0f:ab:89:6c:e3:44: 76:48:28:05:46:19:92:b8:eb:7d:8d:d3:30:2f:0e:51:fa:38: db:88:be:28:07:df:7d:1e:b2:0f:6c:79:4b:6e:f0:08:aa:ed: d9:ed:ed:0f:1d:b6:c9:81:e0:1e:e3:19:48:5e:1c:43:80:87: 19:6a:9e:86:41:54:5c:0d:37:2a:17:6b:33:a1:29:60:6e:3d: e4:97:32:4a:72:05:c0:16:df:fb:d1:15:fc:3a:5d:27:66:2e: 7a:e6:4d:f9:35:21:fa:13:ae:dc:8a:4e:62:a5:5d:48:e5:dc: 5d:2f:ba:40:6e:0f:64:5c:d5:fc:d8:76:0d:96:20:b0:14:20: 3a:66:bc:3e:ac:31:4f:54:d2:e1:0e:ee:15:1a:ac:ce:5d:ab: e9:10:d0:7f:80:63:e1:e3:77:29:f1:b2:ef:08:ba:bd:37:ab: be:4e:da:1e:88:80:b6:a6:9b:cc:1e:73:8d:5c:c4:29:b5:9f: ca:24:a5:07:fa:7f:f0:64:7f:a2:6b:19:ef:16:c4:a5:12:60: d7:69:2a:fc:f4:f2:08:f3:02:2f:f5:16:17:32:b2:f4:a7:d7: 6a:70:89:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUwODIzMDU0OTM4WhcNMjUwODMwMDU0OTM4WjAYMRYwFAYD VQQDEw02OGE5NTY3My05ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8N9/KtUN59nu/qLxzRFAXtZEbnnA4YzGtv2wpdfpnCG04B/C9Sboq10HfBkK FXfX+dt05tH+UfBleHKgPPW1XtdLXF4ciAkKmGRZSKzeM5BZwTaQBfzFiqiq6uAw mJBamnvq7dSCu1K40cNfbrcrxo8Eeofd3uJoaCgVY5TGtTbK7gr947CaXGdJyo+5 qvJjQz/gmzQp9rAo6bGweReoXVUniBmYJoUe29Tsqw9qUKQgpY9CtWw1urDOQSN6 xH27WfwYJJ/y12T9uhbJvnjMlh/t1y9+PDWvsV/sLayZeRU9hHUOXyc+yGwIIvL+ UmB1tFS/HB7dRoKR0BhUO1hThQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf+GGIm QZIjj+8jJY6t2K2uv3pdMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1RZxGJ0Viv3JAaBndY1lE8eztDemcRDC82eMidaIPq4ls40R2SCgF RhmSuOt9jdMwLw5R+jjbiL4oB999HrIPbHlLbvAIqu3Z7e0PHbbJgeAe4xlIXhxD gIcZap6GQVRcDTcqF2szoSlgbj3klzJKcgXAFt/70RX8Ol0nZi565k35NSH6E67c ik5ipV1I5dxdL7pAbg9kXNX82HYNliCwFCA6Zrw+rDFPVNLhDu4VGqzOXavpENB/ gGPh43cp8bLvCLq9N6u+TtoeiIC2ppvMHnONXMQptZ/KJKUH+n/wZH+iaxnvFsSl EmDXaSr89PII8wIv9RYXMrL0p9dqcIlc -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:18 2025 by rpki-client