$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: Zqc1p354Nqyrr+WTgA8e2AauNaB07uo5hRU/ySNPhBQ= Subject key identifier: 00:1A:88:B5:AB:9E:B4:BD:3E:CB:D2:58:07:8F:E2:89:E5:37:53:8F Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 09AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 09AF Signing time: Fri 22 Aug 2025 15:01:39 +0000 Manifest this update: Fri 22 Aug 2025 15:01:38 +0000 Manifest next update: Fri 29 Aug 2025 15:01:38 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: 31V4f56yiVDFh5DN3gnHey+lt1ofkuVXjNzS5MbCItc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Aug 22 15:01:38 2025 GMT Not After : Aug 29 15:01:38 2025 GMT Subject: CN=68a88652-19b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:5e:97:de:fd:b7:78:d5:80:ff:9a:50:c2: 98:e8:a8:81:15:f4:4c:eb:62:34:e6:55:11:9d:59: 18:d4:59:89:54:79:15:10:52:e3:80:06:75:a0:2c: 99:f6:30:4e:0a:74:8c:c3:e3:66:d5:04:4e:52:81: 9a:7d:16:7e:58:71:58:95:6c:b1:4c:83:0b:c2:54: 91:d2:6a:96:27:f9:db:d5:0f:14:cb:e7:8a:8a:1a: 28:35:51:68:0a:ac:63:ac:07:6f:95:d9:bb:b0:af: 3e:ac:23:48:88:22:7e:14:0d:cc:00:3a:48:7d:f0: 5a:bb:3e:d0:fc:44:af:e2:43:64:38:48:7c:04:79: 2d:d0:81:c7:ef:5e:e6:77:f4:af:e4:0b:fe:d5:08: d2:10:47:ef:c3:94:89:77:22:42:70:0f:b7:fb:27: e9:02:da:1e:0c:5a:be:15:13:13:aa:39:88:22:83: 8c:5a:41:e7:cb:6d:fa:b4:59:ad:c6:be:9a:82:8a: ab:f4:56:0f:70:93:23:dc:7e:63:d5:a8:9f:ff:25: 5e:a3:64:b4:b4:10:86:c7:77:e1:69:2a:4e:f0:65: c6:ad:8a:16:54:f0:27:33:9c:48:0b:7f:da:89:2b: d2:cb:00:c1:d9:df:a9:a4:ea:b1:54:85:c9:f7:c5: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1A:88:B5:AB:9E:B4:BD:3E:CB:D2:58:07:8F:E2:89:E5:37:53:8F X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a2:6b:05:61:c7:5c:a2:8f:11:2b:28:eb:92:76:3b:0d:5a: 4d:ec:23:9e:64:47:09:3c:58:42:b9:dd:ff:38:ed:50:ea:54: 27:c1:5c:fb:28:ce:12:bc:68:7a:fe:b6:85:05:5e:66:3e:b2: 89:23:4e:a2:23:7d:16:bf:df:02:d7:22:dc:72:26:fc:65:6b: 0e:dd:96:b1:a7:c2:45:5d:b6:69:4a:71:86:d6:64:9c:25:5b: 94:6b:46:83:ce:7d:1b:e9:49:d4:55:e3:d7:5a:7d:4d:8d:36: f3:84:c9:0d:63:8f:bf:e6:4c:c2:5b:b7:e4:23:3f:0d:04:f5: 69:e0:64:3d:7d:1d:4e:d4:8f:f8:0e:7f:4b:88:3e:c5:9d:dd: 20:1d:ac:89:ac:86:b2:3c:25:be:4e:3a:a6:47:a4:0a:d2:d2: 4c:fd:65:03:b3:3c:63:cb:bb:2b:d5:14:68:af:1b:12:a6:ec: 00:fd:e6:0e:e4:7d:cf:b0:2c:e7:8c:ea:45:83:4c:74:12:b5: cf:80:c1:1f:1b:55:9e:4c:5e:71:cf:74:9f:6f:ac:91:1b:89: 94:cd:80:d4:3c:cb:19:2f:89:56:aa:9c:57:c4:f6:50:0a:d6: a8:2e:51:e8:c9:7a:d1:d0:a3:46:dc:27:57:db:2a:15:b4:00: a3:c6:41:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjUwODIyMTUwMTM4WhcNMjUwODI5MTUwMTM4WjAYMRYwFAYD VQQDEw02OGE4ODY1Mi0xOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudVel979t3jVgP+aUMKY6KiBFfRM62I05lURnVkY1FmJVHkVEFLjgAZ1oCyZ 9jBOCnSMw+Nm1QROUoGafRZ+WHFYlWyxTIMLwlSR0mqWJ/nb1Q8Uy+eKihooNVFo CqxjrAdvldm7sK8+rCNIiCJ+FA3MADpIffBauz7Q/ESv4kNkOEh8BHkt0IHH717m d/Sv5Av+1QjSEEfvw5SJdyJCcA+3+yfpAtoeDFq+FRMTqjmIIoOMWkHny236tFmt xr6agoqr9FYPcJMj3H5j1aif/yVeo2S0tBCGx3fhaSpO8GXGrYoWVPAnM5xIC3/a iSvSywDB2d+ppOqxVIXJ98VlcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAaiLWr nrS9PsvSWAeP4onlN1OPMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHomsFYcdcoo8RKyjrknY7DVpN7COeZEcJPFhCud3/OO1Q6lQnwVz7 KM4SvGh6/raFBV5mPrKJI06iI30Wv98C1yLccib8ZWsO3Zaxp8JFXbZpSnGG1mSc JVuUa0aDzn0b6UnUVePXWn1NjTbzhMkNY4+/5kzCW7fkIz8NBPVp4GQ9fR1O1I/4 Dn9LiD7Fnd0gHayJrIayPCW+TjqmR6QK0tJM/WUDszxjy7sr1RRorxsSpuwA/eYO 5H3PsCznjOpFg0x0ErXPgMEfG1WeTF5xz3Sfb6yRG4mUzYDUPMsZL4lWqpxXxPZQ CtaoLlHoyXrR0KNG3CdX2yoVtACjxkGV -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:41 2025 by rpki-client