$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: L7byxzLb/V81HquBE7cZA3oR3be7kmyP/60AvwwT9L4= Subject key identifier: 9C:C9:03:9B:DF:A6:E5:FE:43:C3:EE:72:8A:1D:1C:8E:42:4E:43:22 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 032E Signing time: Sat 23 Aug 2025 01:20:58 +0000 Manifest this update: Sat 23 Aug 2025 01:20:57 +0000 Manifest next update: Sat 30 Aug 2025 01:20:57 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: KOjgeZahG6ApHqo7XxVZ9br6YhKLitOiOodz1o/LtoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Aug 23 01:20:57 2025 GMT Not After : Aug 30 01:20:57 2025 GMT Subject: CN=68a91779-9ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:5c:36:39:a7:a8:bf:04:88:78:a8:75:b1: 1e:73:6b:c7:71:25:33:57:4d:f3:78:c0:c1:f8:72: 7f:c3:78:b9:90:bb:5f:8c:27:87:21:bb:ab:7f:6a: 64:fa:bc:91:b7:08:64:e5:d0:ba:8c:c6:19:01:2a: 54:0c:16:3a:65:67:37:97:fe:cc:fe:26:00:17:90: 79:c0:24:40:5f:1a:9e:ff:49:a0:43:bd:72:86:45: 68:29:0d:60:42:41:f6:34:10:08:e7:13:54:93:54: bb:54:27:e5:50:d4:4b:e4:92:e3:48:dc:ef:98:99: c0:a5:ec:3d:4e:7b:37:43:04:a2:f2:26:79:b2:ff: 94:28:6c:9d:81:2e:58:89:99:eb:83:47:85:fc:f9: 6b:ce:26:7f:80:44:01:2e:cc:1e:13:e6:d8:77:22: c7:da:9c:33:21:ad:31:e1:07:1b:79:f3:5b:e0:6d: 20:7a:01:6e:9a:15:6d:90:fa:81:ea:64:96:98:d1: 9b:ab:79:30:75:89:38:83:b7:a5:29:d1:ef:fd:92: ed:02:b8:f6:ce:ed:e8:3e:09:37:f9:bf:7c:dc:09: b7:8f:69:c5:e9:8e:60:67:cd:b3:6d:46:a1:2d:35: 49:b6:fd:55:62:32:6c:44:44:09:49:ee:31:d6:74: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:03:9B:DF:A6:E5:FE:43:C3:EE:72:8A:1D:1C:8E:42:4E:43:22 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ac:2b:66:01:2c:dc:45:2e:54:21:27:97:8e:d9:77:cb:c1: 00:38:5c:ad:e8:07:ac:99:da:ef:ee:c7:ee:1b:6e:ae:14:82: 6a:74:a2:ec:c4:15:49:6f:4d:4b:bf:89:fa:34:71:12:4b:43: 7e:61:24:2c:77:b2:e8:84:85:f0:86:48:32:ba:61:f0:09:f2: c1:b9:5a:cd:d6:63:ff:52:92:60:83:aa:14:17:a1:62:d0:68: 0b:11:ca:9c:86:2e:81:98:6a:70:65:2b:2b:33:26:44:48:b9: 93:ee:f6:78:61:56:50:43:78:a9:a6:c4:ae:bb:33:ab:cd:a7: dc:76:1e:e3:91:3b:5f:97:e8:25:ed:17:19:ef:9f:41:83:79: 0f:4f:af:9c:9a:fb:55:a9:91:0f:5a:eb:59:3d:a9:25:e3:bb: 7d:aa:4f:ca:2f:c4:27:2c:e4:64:51:41:9a:3e:87:6d:f2:78: 92:61:e6:24:25:73:0d:f7:5b:61:cf:6d:a0:4d:8d:a9:80:2a: 13:67:60:14:3a:3b:7d:d1:88:42:b9:72:d9:39:4b:87:fc:a6: 50:13:df:ca:66:e6:4d:d7:b0:3f:47:42:96:36:9a:5c:1f:5f: 77:39:dc:5a:92:d7:3e:0c:88:d4:48:15:c7:75:5d:ca:8f:7a: 94:91:2e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUwODIzMDEyMDU3WhcNMjUwODMwMDEyMDU3WjAYMRYwFAYD VQQDEw02OGE5MTc3OS05ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXJcNjmnqL8EiHiodbEec2vHcSUzV03zeMDB+HJ/w3i5kLtfjCeHIburf2pk +ryRtwhk5dC6jMYZASpUDBY6ZWc3l/7M/iYAF5B5wCRAXxqe/0mgQ71yhkVoKQ1g QkH2NBAI5xNUk1S7VCflUNRL5JLjSNzvmJnApew9Tns3QwSi8iZ5sv+UKGydgS5Y iZnrg0eF/PlrziZ/gEQBLsweE+bYdyLH2pwzIa0x4QcbefNb4G0gegFumhVtkPqB 6mSWmNGbq3kwdYk4g7elKdHv/ZLtArj2zu3oPgk3+b983Am3j2nF6Y5gZ82zbUah LTVJtv1VYjJsREQJSe4x1nR7PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzJA5vf puX+Q8PucoodHI5CTkMiMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQrCtmASzcRS5UISeXjtl3y8EAOFyt6Aesmdrv7sfuG26uFIJqdKLs xBVJb01Lv4n6NHESS0N+YSQsd7LohIXwhkgyumHwCfLBuVrN1mP/UpJgg6oUF6Fi 0GgLEcqchi6BmGpwZSsrMyZESLmT7vZ4YVZQQ3ippsSuuzOrzafcdh7jkTtfl+gl 7RcZ759Bg3kPT6+cmvtVqZEPWutZPakl47t9qk/KL8QnLORkUUGaPodt8niSYeYk JXMN91thz22gTY2pgCoTZ2AUOjt90YhCuXLZOUuH/KZQE9/KZuZN17A/R0KWNppc H193Odxaktc+DIjUSBXHdV3Kj3qUkS7y -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:51 2025 by rpki-client