$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft File: j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json) Hash identifier: Izw6Becd2ElFD3ma33taMqsPYfwTq3FQ94gzQdh4OuE= Subject key identifier: E1:12:E7:60:9E:DB:23:A5:C0:B1:79:A9:DE:89:C1:1D:CE:26:7B:39 Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft Manifest number: 025E Signing time: Sat 23 Aug 2025 02:00:25 +0000 Manifest this update: Sat 23 Aug 2025 02:00:24 +0000 Manifest next update: Sat 30 Aug 2025 02:00:24 +0000 Files and hashes: 1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: rI1EstivtAF1OKSejj1p3RvQATUt4ikw60VpMkr0QKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Validity Not Before: Aug 23 02:00:24 2025 GMT Not After : Aug 30 02:00:24 2025 GMT Subject: CN=68a920b9-4766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:0b:d1:21:c7:2d:6d:c5:00:b3:2d:7c:61: 76:60:72:f3:71:b4:38:f2:02:9d:a6:58:6c:f4:05: e7:81:19:b9:52:22:41:2e:a6:b2:d1:0f:da:8a:76: 88:fc:bb:47:c9:5b:b7:c6:fb:1d:26:9d:be:1a:f0: d8:d3:16:a2:f3:4b:b4:6d:eb:70:14:5a:e4:dd:4f: f1:08:bf:6a:69:20:a7:c2:50:a5:b3:d0:5f:96:d7: 52:46:15:5b:a5:45:71:65:f0:2d:3d:52:77:37:0a: ad:ed:b9:f6:60:3a:ef:f5:71:64:bc:88:ed:24:5b: bd:35:df:aa:f9:90:03:42:58:af:7e:d4:91:8e:ae: 8f:97:1e:3b:a2:1c:3c:21:2d:0c:7b:53:37:f3:a5: e0:67:5a:db:14:5b:5a:f2:9d:ec:3f:76:b5:af:37: 4f:4f:e4:01:e6:37:10:e8:3d:fa:57:dc:16:6a:ea: 19:f1:03:6e:63:93:72:81:35:a9:59:fe:77:08:86: d0:cd:4e:44:9a:d4:ad:e3:d0:3a:98:01:01:90:1a: bd:98:aa:e3:c7:70:de:1d:48:d3:44:e5:84:4e:d3: 7a:7f:75:0a:9a:29:92:0a:3a:86:6e:92:51:62:66: e5:a8:a3:9c:3f:63:e3:12:94:3d:7f:05:04:10:fd: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:12:E7:60:9E:DB:23:A5:C0:B1:79:A9:DE:89:C1:1D:CE:26:7B:39 X509v3 Authority Key Identifier: keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:c4:e2:53:2e:d2:bf:44:c4:67:c6:25:b4:21:da:c6:b0: f1:4f:83:cf:9f:28:2d:55:ed:a6:a7:da:da:9f:97:9b:b7:12: 5d:2f:0d:d2:18:84:cf:8e:5a:a8:41:07:9a:24:4e:f3:a5:9f: 92:07:d4:3a:a3:83:d5:1e:99:7c:a2:06:fe:82:86:ae:06:20: 8e:bb:d2:bb:2d:f5:65:5e:06:80:3b:b0:96:06:ee:64:a7:8a: 33:1c:5f:0d:fe:1f:ac:84:e0:3f:c7:da:9f:43:bf:63:c3:d1: 8c:49:b1:4e:7e:43:97:05:29:3f:b9:b2:00:69:61:db:c6:5d: b1:0f:eb:3e:61:7c:88:c2:73:e4:62:da:4c:33:84:52:30:e6: 19:61:b2:65:3a:e7:67:c7:47:cb:f3:d8:fd:9f:cd:6d:b9:b0: 52:bb:3b:6c:e8:86:0e:fb:9f:8a:e7:94:64:aa:3d:b1:34:e8: 76:04:df:46:1b:26:46:36:3e:43:89:1f:ac:1b:d5:40:b2:2b: 45:c5:3a:e0:69:9e:b1:fc:e7:59:e8:7d:4b:6e:89:80:e9:35: 73:96:19:1e:d4:3b:0e:60:b6:5a:89:b7:59:a6:c5:7b:bb:b2: 84:89:11:92:f2:ac:fa:e5:8b:be:09:19:83:cb:e2:a4:4e:af: 85:02:8f:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxREUxMTAvBgNVBAUTKDhGOTY3MkFDQUQ5QTUxRjAzRDQ4QkM0M0I2MzNBOTU3 MzQ5OEUzREUwHhcNMjUwODIzMDIwMDI0WhcNMjUwODMwMDIwMDI0WjAYMRYwFAYD VQQDEw02OGE5MjBiOS00NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17AL0SHHLW3FALMtfGF2YHLzcbQ48gKdplhs9AXngRm5UiJBLqay0Q/ainaI /LtHyVu3xvsdJp2+GvDY0xai80u0betwFFrk3U/xCL9qaSCnwlCls9BfltdSRhVb pUVxZfAtPVJ3Nwqt7bn2YDrv9XFkvIjtJFu9Nd+q+ZADQlivftSRjq6Plx47ohw8 IS0Me1M386XgZ1rbFFta8p3sP3a1rzdPT+QB5jcQ6D36V9wWauoZ8QNuY5NygTWp Wf53CIbQzU5EmtSt49A6mAEBkBq9mKrjx3DeHUjTROWETtN6f3UKmimSCjqGbpJR YmblqKOcP2PjEpQ9fwUEEP0mPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOES52Ce 2yOlwLF5qd6JwR3OJns5MB8GA1UdIwQYMBaAFI+WcqytmlHwPUi8Q7YzqVc0mOPe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFERS83MzJENjlCNjI3 NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVmQTlTTHhEdGpPcFZ6U1k0 OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1WnlySzJhVWZBOVNMeER0ak9wVnpTWTQ5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFERS83MzJENjlCNjI3NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVm QTlTTHhEdGpPcFZ6U1k0OTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpjsTiUy7Sv0TEZ8YltCHaxrDxT4PPnygtVe2mp9ran5ebtxJdLw3S GITPjlqoQQeaJE7zpZ+SB9Q6o4PVHpl8ogb+goauBiCOu9K7LfVlXgaAO7CWBu5k p4ozHF8N/h+shOA/x9qfQ79jw9GMSbFOfkOXBSk/ubIAaWHbxl2xD+s+YXyIwnPk YtpMM4RSMOYZYbJlOudnx0fL89j9n81tubBSuzts6IYO+5+K55Rkqj2xNOh2BN9G GyZGNj5DiR+sG9VAsitFxTrgaZ6x/OdZ6H1LbomA6TVzlhke1DsOYLZaibdZpsV7 u7KEiRGS8qz65Yu+CRmDy+KkTq+FAo/s -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:43 2025 by rpki-client