$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: HA2+0tH9V5qAgW6OCdtXiRzOmRg6w2ZhwC67vuAYa4I= Subject key identifier: 71:47:F6:EE:A4:3D:E9:89:4B:08:31:EF:81:3E:69:49:9D:7F:A4:78 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 07:57:17 +0000 Manifest this update: Sat 23 Aug 2025 07:57:17 +0000 Manifest next update: Sat 30 Aug 2025 07:57:17 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: XrpTbykPZsqxmKclP5xaZb/AKuX3liGMZYAisv5VXY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Aug 23 07:57:17 2025 GMT Not After : Aug 30 07:57:17 2025 GMT Subject: CN=68a9745d-f45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:39:bf:41:1f:da:00:0c:77:5b:67:ac:0f: 3a:be:77:c7:73:28:91:7d:b2:0a:93:bb:a8:cd:ac: 74:08:71:bc:3b:63:83:97:1c:21:04:f9:3d:74:a0: dc:b3:82:8f:46:e1:92:0b:35:a5:70:ad:38:a6:87: 74:22:9c:34:53:75:6c:5e:6b:0a:bf:76:78:b5:33: 59:18:9f:6d:f5:af:c0:08:41:f7:fe:03:8d:71:c4: f9:82:4c:9a:88:94:b9:bf:65:69:bb:28:35:09:7d: e8:c9:2b:3d:94:0b:4e:ca:8c:d5:cf:ce:5d:a0:ba: 48:a5:c0:91:df:54:81:53:99:e3:f0:09:09:13:9b: c1:d5:a7:93:56:8a:b4:72:49:23:44:56:2e:32:7e: bd:09:ef:4b:51:2d:7b:ad:53:9b:80:16:9d:07:59: 47:d6:f9:75:49:ba:d4:cb:df:30:ba:a3:19:9e:95: d7:79:e5:3b:7b:27:3e:c9:33:f8:cd:b9:96:e9:07: 0f:1a:c7:ae:34:a0:ec:34:74:cd:34:58:ff:3d:07: a5:03:11:41:1f:f7:ba:97:22:0d:4c:b2:8a:c4:de: da:c0:d0:4e:dd:c2:38:98:d5:3a:b5:68:a0:2d:c5: 8b:6e:ac:c3:c0:c1:4a:29:59:d1:fe:41:7c:f3:45: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:47:F6:EE:A4:3D:E9:89:4B:08:31:EF:81:3E:69:49:9D:7F:A4:78 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:01:11:43:a9:4a:f6:88:4f:3f:b1:77:1f:85:df:39:a6:41: 51:ec:31:e1:a3:22:b3:d8:24:e2:51:f2:96:97:9c:05:be:84: b1:c6:68:d6:2d:42:92:7e:a0:54:a5:a2:ca:8a:91:73:47:4c: 4a:2b:1c:ba:28:2e:d6:2f:e0:ef:e2:a3:ab:62:93:3d:aa:63: 6e:34:54:34:c8:d3:cb:53:d4:6d:30:3d:9a:16:de:87:44:7d: 2e:30:b4:b7:3e:d5:e6:9d:91:2a:9d:72:30:18:12:e7:3a:7c: 12:1a:b6:1d:64:9f:42:89:ac:71:84:a5:22:8a:e3:d9:67:a9: 69:05:c5:3d:24:10:8f:32:eb:8a:a8:41:3e:59:29:aa:2c:71: ae:fe:ba:ee:99:e2:0e:fd:59:c1:8a:8f:59:53:03:fe:85:d3: 42:fc:27:fd:17:b2:b9:a0:98:a4:92:c6:bc:c7:d1:46:6e:91: 35:b1:c9:3c:6b:3b:1f:35:10:d3:fe:ed:dd:73:0f:60:ce:d8: 65:3d:08:83:e2:00:c5:5c:dc:22:89:d1:34:d4:08:1c:e1:84: b1:80:0e:d1:1b:9a:22:f6:05:7c:e4:90:73:eb:1a:b6:c4:84: 92:e5:4e:45:26:3d:8e:06:96:0d:bb:24:7c:23:5b:c3:2f:26: ed:58:c2:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoQzdGMDI4MzdEMjQ1Q0I4RkFCQ0Q0NzQxQ0ZBMkI0QTVB MkY3M0VBRDAeFw0yNTA4MjMwNzU3MTdaFw0yNTA4MzAwNzU3MTdaMBgxFjAUBgNV BAMTDTY4YTk3NDVkLWY0NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjBDm/QR/aAAx3W2esDzq+d8dzKJF9sgqTu6jNrHQIcbw7Y4OXHCEE+T10oNyz go9G4ZILNaVwrTimh3QinDRTdWxeawq/dni1M1kYn231r8AIQff+A41xxPmCTJqI lLm/ZWm7KDUJfejJKz2UC07KjNXPzl2gukilwJHfVIFTmePwCQkTm8HVp5NWirRy SSNEVi4yfr0J70tRLXutU5uAFp0HWUfW+XVJutTL3zC6oxmeldd55Tt7Jz7JM/jN uZbpBw8ax640oOw0dM00WP89B6UDEUEf97qXIg1MsorE3trA0E7dwjiY1Tq1aKAt xYturMPAwUopWdH+QXzzRZclAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcUf27qQ9 6YlLCDHvgT5pSZ1/pHgwHwYDVR0jBBgwFoAUx/AoN9JFy4+rzUdBz6K0paL3Pq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzVBRDc2OUIwM0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1Bx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveF9Bb045SkZ5NC1yelVkQno2SzBwYUwzUHEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzVBRDc2OUIwM0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQt cnpVZEJ6NkswcGFMM1BxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAsBEUOpSvaITz+xdx+F3zmmQVHsMeGjIrPYJOJR8paXnAW+hLHGaNYt QpJ+oFSlosqKkXNHTEorHLooLtYv4O/io6tikz2qY240VDTI08tT1G0wPZoW3odE fS4wtLc+1eadkSqdcjAYEuc6fBIath1kn0KJrHGEpSKK49lnqWkFxT0kEI8y64qo QT5ZKaosca7+uu6Z4g79WcGKj1lTA/6F00L8J/0XsrmgmKSSxrzH0UZukTWxyTxr Ox81ENP+7d1zD2DO2GU9CIPiAMVc3CKJ0TTUCBzhhLGADtEbmiL2BXzkkHPrGrbE hJLlTkUmPY4Glg27JHwjW8MvJu1Ywv0= -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:20 2025 by rpki-client