$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: 2kyBSI7y4kc9T8iwogJvX+0/9YiOE0btELbfnfFjCGM= Subject key identifier: 63:B9:C0:7C:8F:28:EF:58:52:0E:A3:70:F5:30:0B:51:12:DF:19:D7 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 07:51:21 +0000 Manifest this update: Sat 23 Aug 2025 07:51:21 +0000 Manifest next update: Sat 30 Aug 2025 07:51:21 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: 3PXiKDPn+edaRAfb2O8tepAgreY7KP2j5RFI7+EVc4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Aug 23 07:51:21 2025 GMT Not After : Aug 30 07:51:21 2025 GMT Subject: CN=68a972f9-d09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:a2:ac:8a:9f:0f:cf:82:d8:e0:63:56:e6: d6:a5:2a:7a:b0:6e:b4:11:62:1e:b7:17:0a:d5:e3: 50:35:36:a4:47:6e:ec:ee:96:fb:5a:c8:f5:60:09: 9b:7c:e8:4b:1a:15:02:50:0c:ee:c4:e9:83:31:48: e0:56:82:cc:72:38:59:30:e9:10:dc:6c:a4:73:81: 0a:8a:3f:b5:57:d3:2d:2e:38:cd:f4:a6:26:dd:e2: af:bd:08:23:11:54:45:fd:f7:c7:77:6c:31:59:17: cf:ae:9b:0b:90:5f:4e:3e:32:c9:a3:d1:eb:ac:8e: c5:84:e9:54:d6:11:84:41:f4:22:5e:7d:8d:86:5f: 9c:ad:e0:5b:b6:eb:cd:08:b0:e4:98:e9:af:1e:3b: 5f:35:b9:00:a7:f9:b9:ed:26:f3:f4:05:5f:b6:de: d7:f2:64:99:18:7e:98:cf:8e:45:93:2d:6f:c4:a4: 4b:05:fd:0c:1a:d7:44:bf:38:51:54:e0:d4:dc:31: 8c:ac:4b:41:ad:47:91:91:37:1f:ed:4d:8b:9c:eb: 49:73:f4:74:6a:28:6a:32:1d:98:d6:44:68:e3:60: 83:84:bb:1c:32:10:74:0b:a0:c6:eb:95:1b:78:cd: 99:72:14:22:f5:4f:d2:9a:3e:22:51:a2:04:f9:e4: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B9:C0:7C:8F:28:EF:58:52:0E:A3:70:F5:30:0B:51:12:DF:19:D7 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:99:58:b3:86:ea:db:b3:ae:77:4b:b0:61:81:e6:5b:1a:80: 10:80:cc:ff:38:e3:22:59:67:1e:57:57:2d:01:76:d0:5b:e6: c8:ab:af:91:da:83:57:17:58:40:18:0f:e2:70:95:a6:43:37: 2e:f0:08:ad:e4:6c:8d:28:c5:f7:bc:aa:bb:31:c4:a4:fc:ec: 12:e2:f7:3d:ab:59:d8:3f:10:0a:17:61:07:c6:5c:c9:dc:fc: 52:e9:cf:a3:f9:19:68:62:3e:72:45:e0:89:b5:2a:93:51:a3: ac:5c:28:4e:b3:b1:39:96:ae:77:39:7e:90:df:5b:b8:52:7c: dd:6c:68:cd:9f:01:42:ba:ad:03:dd:4f:4d:e8:27:b3:12:d4: cd:fc:5a:55:e1:a7:34:58:6a:74:c4:0c:4e:08:9b:e3:9b:2f: bc:27:52:b9:c0:92:a4:c6:62:9f:53:fc:5c:fe:6b:79:f8:fa: d1:97:25:3e:ac:d4:b5:af:1d:8a:13:31:2b:c9:fb:ab:58:15: 6e:4d:a5:51:ca:0a:3c:3f:07:a4:80:6a:43:53:4e:50:2e:3a: 86:49:46:d1:53:be:1a:68:7c:ff:9d:d2:61:b8:e6:a3:57:8f: 8e:78:5d:ef:96:97:db:8b:db:8b:c8:e2:98:be:72:af:61:24: 52:db:ed:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTA4MjMwNzUxMjFaFw0yNTA4MzAwNzUxMjFaMBgxFjAUBgNV BAMTDTY4YTk3MmY5LWQwOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr3aKsip8Pz4LY4GNW5talKnqwbrQRYh63FwrV41A1NqRHbuzulvtayPVgCZt8 6EsaFQJQDO7E6YMxSOBWgsxyOFkw6RDcbKRzgQqKP7VX0y0uOM30pibd4q+9CCMR VEX998d3bDFZF8+umwuQX04+Msmj0eusjsWE6VTWEYRB9CJefY2GX5yt4Fu2680I sOSY6a8eO181uQCn+bntJvP0BV+23tfyZJkYfpjPjkWTLW/EpEsF/Qwa10S/OFFU 4NTcMYysS0GtR5GRNx/tTYuc60lz9HRqKGoyHZjWRGjjYIOEuxwyEHQLoMbrlRt4 zZlyFCL1T9KaPiJRogT55KcHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY7nAfI8o 71hSDqNw9TALURLfGdcwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmZWLOG6tuzrndLsGGB5lsagBCAzP844yJZZx5XVy0BdtBb5sirr5Ha g1cXWEAYD+JwlaZDNy7wCK3kbI0oxfe8qrsxxKT87BLi9z2rWdg/EAoXYQfGXMnc /FLpz6P5GWhiPnJF4Im1KpNRo6xcKE6zsTmWrnc5fpDfW7hSfN1saM2fAUK6rQPd T03oJ7MS1M38WlXhpzRYanTEDE4Im+ObL7wnUrnAkqTGYp9T/Fz+a3n4+tGXJT6s 1LWvHYoTMSvJ+6tYFW5NpVHKCjw/B6SAakNTTlAuOoZJRtFTvhpofP+d0mG45qNX j454Xe+Wl9uL24vI4pi+cq9hJFLb7Zs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:33 2025 by rpki-client