$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft File: 0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json) Hash identifier: lyysHVwG+zMW4/d4je5bIhg+hXswHiInEyT8d59h7Jo= Subject key identifier: 08:F7:D1:95:C1:BA:AA:8B:DD:E3:89:C6:BB:21:44:74:D0:45:FB:F0 Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A Certificate issuer: /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Certificate serial: 332B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft Manifest number: 9A57 Signing time: Fri 04 Jul 2025 15:25:06 +0000 Manifest this update: Fri 04 Jul 2025 15:25:06 +0000 Manifest next update: Fri 11 Jul 2025 15:25:06 +0000 Files and hashes: 1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: vndWvm0SkOO7igf5jytU0doz5nNyFVFfZTOUhuAbalo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13099 (0x332b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A Validity Not Before: Jul 4 15:25:06 2025 GMT Not After : Jul 11 15:25:06 2025 GMT Subject: CN=6867f252-cd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:b2:e8:b0:13:0e:0c:2d:41:77:d6:88:d9: 42:50:0d:76:f7:4e:b4:35:ee:11:9e:b0:a6:90:1c: b4:c7:79:25:92:69:3c:42:91:bf:28:86:24:e6:cd: f1:7e:a5:9b:af:ce:06:b0:e0:8d:c2:25:8a:43:e2: 0d:bf:e6:20:c1:5c:f5:43:c4:69:81:d8:37:4c:4f: 2d:34:84:94:42:fa:4b:ca:d3:f4:8b:f4:7a:82:0d: fa:cb:c9:7b:f5:5e:cb:23:58:4f:cf:30:df:3d:79: 48:c0:8d:ec:a9:0d:98:cb:ee:1a:7b:c7:c3:99:d8: e5:ff:2e:a5:1c:3c:df:d1:ad:59:ad:57:89:bc:1a: ab:49:d4:5b:e6:8c:0a:ce:61:24:b7:be:5f:1c:3d: 1a:6a:9a:63:38:fb:5a:c8:a0:53:1e:e9:5a:90:f8: 2f:f6:cd:51:30:df:7b:41:ba:04:b4:c0:4a:aa:d1: 73:ad:12:66:d2:40:5c:9c:cc:b8:32:68:3d:fd:26: 32:19:43:ea:96:25:85:b1:10:0d:9a:b7:cf:c9:f6: 1b:c0:82:5f:df:91:e3:f9:30:a9:8d:ab:8f:09:5b: e9:10:cf:72:fe:35:55:5f:b6:5b:3c:68:f4:d3:1a: 56:62:fa:a7:9d:05:24:3a:8f:db:b9:ed:99:2f:d6: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F7:D1:95:C1:BA:AA:8B:DD:E3:89:C6:BB:21:44:74:D0:45:FB:F0 X509v3 Authority Key Identifier: keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3e:80:09:d8:06:2f:dd:84:01:5e:20:ed:b9:bb:81:ed:60: 1e:de:ee:ec:85:35:80:71:8f:cf:bb:fe:26:ad:c2:86:2b:fc: a6:41:1b:7d:f5:e0:d6:4d:f1:41:ee:d9:4a:c7:db:99:7e:be: 49:0b:64:d5:8e:dc:b0:1a:af:ed:ed:85:26:73:76:af:ce:26: 85:c1:10:d0:7d:27:76:9a:4c:fb:13:ea:72:f1:ed:87:ae:c4: 46:20:83:c9:48:82:d8:02:e1:01:29:f3:c5:a1:1b:93:12:d9: f4:f2:d0:25:3d:df:34:e5:df:98:c6:58:d4:b0:81:2d:96:e7: b3:31:0c:cd:23:13:d0:1e:6e:f6:a5:5f:3f:f4:6f:b3:f6:88: 4a:99:40:d5:5c:2e:3d:bf:6a:98:fd:d9:67:2c:90:70:80:b5: a9:62:c3:af:33:88:8c:8b:3e:ad:dd:37:10:bc:e9:ba:a8:cf: de:30:d1:22:5a:06:fe:2c:d3:d8:20:fd:ac:06:88:72:38:8a: 1c:d1:b7:a2:cd:9e:39:41:17:6d:11:7f:03:6d:ed:be:46:a1: e8:81:04:31:0e:db:2e:62:5b:40:38:c9:a9:54:f0:1f:6b:ad: 68:37:86:fc:88:18:82:fb:ad:5b:07:d9:75:11:42:86:b8:11: 15:88:38:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKEQwQTA5M0I2NTEwNzkzMzU0ODRBRDBCQTFENzY2MTVG NUMzNjY4OEEwHhcNMjUwNzA0MTUyNTA2WhcNMjUwNzExMTUyNTA2WjAYMRYwFAYD VQQDEw02ODY3ZjI1Mi1jZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJqy6LATDgwtQXfWiNlCUA129060Ne4RnrCmkBy0x3klkmk8QpG/KIYk5s3x fqWbr84GsOCNwiWKQ+INv+YgwVz1Q8Rpgdg3TE8tNISUQvpLytP0i/R6gg36y8l7 9V7LI1hPzzDfPXlIwI3sqQ2Yy+4ae8fDmdjl/y6lHDzf0a1ZrVeJvBqrSdRb5owK zmEkt75fHD0aappjOPtayKBTHulakPgv9s1RMN97QboEtMBKqtFzrRJm0kBcnMy4 Mmg9/SYyGUPqliWFsRANmrfPyfYbwIJf35Hj+TCpjauPCVvpEM9y/jVVX7ZbPGj0 0xpWYvqnnQUkOo/bue2ZL9Zx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj30ZXB uqqL3eOJxrshRHTQRfvwMB8GA1UdIwQYMBaAFNCgk7ZRB5M1SErQuh12YV9cNmiK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6VklTdEM2SFhaaFgxdzJh SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBLQ1R0bEVIa3pWSVN0QzZIWFpoWDF3MmFJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi8wS0NUdGxFSGt6 VklTdEM2SFhaaFgxdzJhSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiPoAJ2AYv3YQBXiDtubuB7WAe3u7shTWAcY/Pu/4mrcKGK/ymQRt9 9eDWTfFB7tlKx9uZfr5JC2TVjtywGq/t7YUmc3avziaFwRDQfSd2mkz7E+py8e2H rsRGIIPJSILYAuEBKfPFoRuTEtn08tAlPd805d+YxljUsIEtluezMQzNIxPQHm72 pV8/9G+z9ohKmUDVXC49v2qY/dlnLJBwgLWpYsOvM4iMiz6t3TcQvOm6qM/eMNEi Wgb+LNPYIP2sBohyOIoc0beizZ45QRdtEX8Dbe2+RqHogQQxDtsuYltAOMmpVPAf a61oN4b8iBiC+61bB9l1EUKGuBEViDgs -----END CERTIFICATE-----Generated at Sat Jul 5 04:59:46 2025 by rpki-client