$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: bDU3jK5XLps6S3Sc7bmK+AXE/kCl1albyIHirBXqbLk= Subject key identifier: 0F:A3:60:C3:43:8D:67:E6:A7:95:BC:C0:27:CC:7A:00:3E:77:09:33 Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 1A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 253F Signing time: Fri 08 Aug 2025 16:29:13 +0000 Manifest this update: Fri 08 Aug 2025 16:29:12 +0000 Manifest next update: Fri 15 Aug 2025 16:29:12 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: cuNpJgl3YrMOy4ebuifyHu8/9/jlIP6UmV1FEOGZv20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6793 (0x1a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: Aug 8 16:29:12 2025 GMT Not After : Aug 15 16:29:12 2025 GMT Subject: CN=689625d9-7e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:0b:d7:ce:4d:ff:11:f8:86:37:bd:33:31: 40:3f:71:53:de:c3:77:05:34:cc:bb:2c:a0:34:e1: 7c:02:1f:65:25:70:2d:2f:1e:74:86:16:5a:e2:54: a5:12:cd:5e:e6:04:a8:9a:90:10:1b:ca:5e:c2:ff: 3c:66:00:ad:59:87:4b:2b:d1:4b:3b:e2:c0:b6:70: 38:2e:86:82:d5:af:03:7e:d9:55:62:8c:b8:43:cb: e1:9a:dd:4c:ea:e6:db:5c:8b:03:6c:57:f8:bb:ec: a2:50:31:28:64:a7:af:94:58:2e:19:b0:4d:31:4b: 11:13:66:04:e9:ea:b6:5e:e3:16:65:e8:bd:11:6c: ff:9f:50:06:05:7a:a7:55:a2:9e:24:ef:0d:cc:18: 5c:2e:21:b4:9e:aa:21:c2:da:d5:76:c0:fa:fc:fc: 5e:4f:bf:c4:16:00:b2:cc:e8:84:c9:f7:cd:af:57: 90:c0:6c:98:f6:de:05:cf:3f:cd:f0:b1:e3:98:f7: 2b:c1:32:20:70:22:83:a3:58:52:d8:ed:05:e6:19: dc:32:66:28:78:e6:3c:d9:23:7b:4b:03:e1:62:15: 9d:f2:c9:83:9e:60:40:ef:8a:55:bb:ba:21:66:d6: b2:6b:25:23:c0:b5:d5:8f:46:f5:b8:31:4b:a7:7a: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A3:60:C3:43:8D:67:E6:A7:95:BC:C0:27:CC:7A:00:3E:77:09:33 X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7e:c3:5e:15:1d:4c:70:bb:f0:07:41:c7:ec:75:6c:0c:fa: 0c:34:c5:b0:b1:ab:14:30:b7:73:f2:9c:f8:4b:91:77:88:2a: b9:c1:27:ef:f5:e9:38:01:ef:91:00:dc:ce:ec:5b:44:28:bb: e0:76:c6:be:fc:e6:20:a6:0e:c9:48:27:94:9f:d3:3e:80:db: 75:d6:34:03:ad:5e:d5:8d:25:a3:17:c0:67:15:a0:01:77:70: 16:42:7b:2d:00:d6:33:cc:70:89:4b:e4:59:6d:70:3d:77:45: 8a:7a:d2:91:15:3b:c2:51:31:ad:52:03:70:3f:d9:9d:65:e7: 27:3a:08:a4:5a:af:31:99:4b:16:79:7c:cf:54:14:fe:1c:03: 36:5d:da:0f:70:4b:3c:1b:de:be:72:64:0d:69:fe:3e:18:4c: 01:24:a4:6e:4e:ba:34:ad:d2:13:3c:26:21:7a:a5:69:c7:46: 0b:ea:3f:23:44:13:7a:92:d1:95:92:cb:19:a7:11:14:7b:a1: de:8b:cb:05:f4:5d:9b:9c:b7:65:ed:4c:94:ab:cb:ca:0b:f9: 3b:0d:ab:b5:b9:62:19:b0:28:14:d6:cb:96:9a:7a:29:48:9d: 3e:db:48:b3:05:1d:92:cb:5c:1a:0a:84:5f:04:5c:4b:90:75: 04:f9:d4:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjUwODA4MTYyOTEyWhcNMjUwODE1MTYyOTEyWjAYMRYwFAYD VQQDEw02ODk2MjVkOS03ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIEL185N/xH4hje9MzFAP3FT3sN3BTTMuyygNOF8Ah9lJXAtLx50hhZa4lSl Es1e5gSompAQG8pewv88ZgCtWYdLK9FLO+LAtnA4LoaC1a8DftlVYoy4Q8vhmt1M 6ubbXIsDbFf4u+yiUDEoZKevlFguGbBNMUsRE2YE6eq2XuMWZei9EWz/n1AGBXqn VaKeJO8NzBhcLiG0nqohwtrVdsD6/PxeT7/EFgCyzOiEyffNr1eQwGyY9t4Fzz/N 8LHjmPcrwTIgcCKDo1hS2O0F5hncMmYoeOY82SN7SwPhYhWd8smDnmBA74pVu7oh ZtayayUjwLXVj0b1uDFLp3p3QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+jYMND jWfmp5W8wCfMegA+dwkzMB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAffsNeFR1McLvwB0HH7HVsDPoMNMWwsasUMLdz8pz4S5F3iCq5wSfv 9ek4Ae+RANzO7FtEKLvgdsa+/OYgpg7JSCeUn9M+gNt11jQDrV7VjSWjF8BnFaAB d3AWQnstANYzzHCJS+RZbXA9d0WKetKRFTvCUTGtUgNwP9mdZecnOgikWq8xmUsW eXzPVBT+HAM2XdoPcEs8G96+cmQNaf4+GEwBJKRuTro0rdITPCYheqVpx0YL6j8j RBN6ktGVkssZpxEUe6Hei8sF9F2bnLdl7UyUq8vKC/k7Dau1uWIZsCgU1suWmnop SJ0+20izBR2Sy1waCoRfBFxLkHUE+dQi -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:29 2025 by rpki-client