$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json) Hash identifier: d6x71gr6AXRQnV1cXuYmDrJrmFA4vQf5lxiFMp4QWaY= Subject key identifier: E6:4B:9F:42:CD:3C:3B:8E:7F:1B:71:28:10:6E:9B:5E:A8:5C:7D:59 Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft Manifest number: 16A3 Signing time: Fri 22 Aug 2025 16:47:48 +0000 Manifest this update: Fri 22 Aug 2025 16:47:48 +0000 Manifest next update: Fri 29 Aug 2025 16:47:48 +0000 Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: xhIy7xJJXRer2e++wkCQi0IcsiasAN20/8DsqoeDxwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Validity Not Before: Aug 22 16:47:48 2025 GMT Not After : Aug 29 16:47:48 2025 GMT Subject: CN=68a89f34-ba78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:a8:58:d6:17:f8:5b:8f:eb:aa:74:bf:07: 4d:7b:9c:3e:ee:23:c3:2a:59:f0:b6:79:23:de:e7: d6:67:d8:ed:7b:42:1b:98:c6:0c:fc:b3:67:0e:cc: bf:5b:77:d9:77:af:87:94:b1:64:18:2c:95:de:2e: a3:83:a8:34:77:13:ed:f5:2a:d3:54:e4:9d:13:db: 87:eb:ae:c6:a6:2e:5b:4d:44:bd:16:89:ff:9f:8d: 99:c9:5f:09:ad:af:cd:4c:d1:f4:63:2b:41:5a:7c: e6:a7:c5:65:10:0f:8a:3f:1a:bf:d2:c4:21:ac:b3: 9e:6d:77:ee:fe:7d:f8:37:cb:fc:05:8d:5a:36:64: f8:6b:2e:c8:d0:26:3c:f8:1d:63:0f:42:27:37:9b: 68:39:48:55:45:e7:c6:0c:9d:9f:07:f1:84:00:b0: eb:e4:e4:c8:5b:80:d0:8c:f5:ba:76:3b:32:44:fe: 9a:0c:e1:cc:da:9b:bb:ca:0f:b9:b9:8a:71:68:be: 4a:bc:54:2c:60:16:bd:3c:c3:30:bb:d6:e9:ef:1a: 02:f4:44:f3:ea:a2:3e:a9:af:9d:20:05:a9:1f:e4: c3:5d:d5:8a:41:b6:18:30:d4:fd:b7:b3:6e:4b:aa: 5e:ea:f1:2c:ce:54:a9:bb:5f:05:c4:6f:11:49:75: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4B:9F:42:CD:3C:3B:8E:7F:1B:71:28:10:6E:9B:5E:A8:5C:7D:59 X509v3 Authority Key Identifier: keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1a:67:31:2d:37:8e:c0:cd:4c:90:0f:8d:93:55:aa:c9:3d: 7d:42:5c:fa:5f:1e:b0:90:3c:47:a6:71:56:2b:37:eb:fc:ff: 89:19:29:44:66:f7:30:65:81:67:35:61:16:15:3e:06:7b:10: ef:29:32:c9:08:09:3c:93:22:72:91:30:ee:9b:04:bb:e1:a9: fe:06:75:e4:e4:23:fe:51:87:6d:76:0d:bc:bb:9c:f9:dc:29: 2f:b5:96:30:6c:c2:ad:ea:01:ae:2e:2e:4f:95:09:d8:2c:b8: 49:fb:32:f7:55:6e:10:72:89:f6:75:22:a9:90:18:03:a0:34: 88:d9:bd:f1:44:62:1f:cc:e0:ec:3f:eb:5a:ee:b3:c3:ee:55: 0c:21:0f:10:f3:33:34:5e:9a:17:fb:69:e6:d1:dd:9d:31:14: 9e:e5:87:27:ac:ae:f7:a3:e6:65:aa:ba:b2:28:2c:0e:60:a2: 10:db:13:c7:d4:d4:09:98:17:06:3d:16:95:8d:7a:7b:c6:a4: 94:d8:ba:41:d7:e5:ad:79:13:c8:53:3e:4e:7d:89:b5:5c:ba: 4a:e7:30:0f:7a:af:34:2b:d2:0e:3d:83:79:75:37:58:93:3f: 7d:00:98:7a:6d:dd:9c:0c:22:12:6f:8f:b2:d3:ef:5d:db:8f: 5d:00:9f:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzMzQjExMC8GA1UEBRMoOTQyRTI3RDY1QzQ3QUZCNTk3MEE5QUZFODI4MDlCMzE3 OUQ4QjQ2NjAeFw0yNTA4MjIxNjQ3NDhaFw0yNTA4MjkxNjQ3NDhaMBgxFjAUBgNV BAMTDTY4YTg5ZjM0LWJhNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc7KhY1hf4W4/rqnS/B017nD7uI8MqWfC2eSPe59Zn2O17QhuYxgz8s2cOzL9b d9l3r4eUsWQYLJXeLqODqDR3E+31KtNU5J0T24frrsamLltNRL0Wif+fjZnJXwmt r81M0fRjK0FafOanxWUQD4o/Gr/SxCGss55td+7+ffg3y/wFjVo2ZPhrLsjQJjz4 HWMPQic3m2g5SFVF58YMnZ8H8YQAsOvk5MhbgNCM9bp2OzJE/poM4czam7vKD7m5 inFovkq8VCxgFr08wzC71unvGgL0RPPqoj6pr50gBakf5MNd1YpBthgw1P23s25L ql7q8SzOVKm7XwXEbxFJdVVbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5kufQs08 O45/G3EoEG6bXqhcfVkwHwYDVR0jBBgwFoAUlC4n1lxHr7WXCpr+goCbMXnYtGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMzNCL0I0QzlGRTkyMDZG NTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdXWENwci1nb0NiTVhuWXRH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEM0bjFseEhyN1dYQ3ByLWdvQ2JNWG5ZdEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MzNCL0I0QzlGRTkyMDZGNTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdX WENwci1nb0NiTVhuWXRHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIkaZzEtN47AzUyQD42TVarJPX1CXPpfHrCQPEemcVYrN+v8/4kZKURm 9zBlgWc1YRYVPgZ7EO8pMskICTyTInKRMO6bBLvhqf4GdeTkI/5Rh212Dby7nPnc KS+1ljBswq3qAa4uLk+VCdgsuEn7MvdVbhByifZ1IqmQGAOgNIjZvfFEYh/M4Ow/ 61rus8PuVQwhDxDzMzRemhf7aebR3Z0xFJ7lhyesrvej5mWqurIoLA5gohDbE8fU 1AmYFwY9FpWNenvGpJTYukHX5a15E8hTPk59ibVcukrnMA96rzQr0g49g3l1N1iT P30AmHpt3ZwMIhJvj7LT713bj10AnzE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:35 2025 by rpki-client