$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: DwpHTJtEvRiV2TSrdM03zS/sSUyXKToOII6GAeNnQf4= Subject key identifier: 07:F6:87:FD:35:85:74:83:15:6E:41:38:77:5C:3A:48:7B:43:95:18 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 81 Signing time: Sat 09 Aug 2025 07:08:24 +0000 Manifest this update: Sat 09 Aug 2025 07:08:24 +0000 Manifest next update: Sat 16 Aug 2025 07:08:24 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: ruJD1yD3EMZUzOWafFrHg9TWWbLwQ63fkyN10YgbJKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Aug 9 07:08:24 2025 GMT Not After : Aug 16 07:08:24 2025 GMT Subject: CN=6896f3e8-49fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:be:a7:0a:72:ec:75:b6:dc:ef:94:c7:7b: 06:6d:25:40:c8:46:4b:2a:f1:6d:56:fa:f0:ba:f0: ec:8f:3a:27:f1:13:f5:e6:23:13:74:5f:ac:f3:3d: e8:7f:d3:65:68:c0:ac:90:a5:94:3e:00:dd:64:2b: 24:6f:5b:1b:f7:a7:9b:45:49:62:36:76:5e:ac:71: d7:b3:1a:10:56:0f:e6:b9:9d:a2:a3:28:ab:b2:06: 53:1a:39:f6:26:40:e0:0c:ac:7e:9b:28:b4:9c:67: 4d:1d:76:21:94:c3:3d:35:65:8c:8c:3e:53:cc:1c: d8:e3:2c:7a:42:c3:67:07:9e:42:88:86:b3:44:4e: e3:bd:28:3f:97:05:21:f2:6d:0c:9f:42:40:b4:fc: 46:b2:6a:be:f3:c0:1a:2f:04:9f:6d:47:67:53:8b: 69:e5:03:4c:68:f1:5d:78:18:ae:6b:6c:07:a8:98: 35:c9:02:06:d1:c7:8d:e1:3e:12:f7:4d:fd:52:0b: 81:35:9d:3a:bc:b2:49:c9:b0:7e:f7:37:33:d4:31: 11:d9:50:80:ac:4c:aa:f7:5b:1b:47:a0:0a:e9:2d: 20:92:f3:f0:a6:f0:04:b4:7a:43:16:0b:df:a1:7d: ef:1a:50:60:38:4e:e2:d0:19:62:cc:7b:fd:b3:29: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F6:87:FD:35:85:74:83:15:6E:41:38:77:5C:3A:48:7B:43:95:18 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:77:04:23:01:ea:00:ea:0c:a5:59:b3:96:c9:d5:4a:aa:50: d5:8b:78:95:c0:5e:65:85:c4:a1:e2:dc:8b:ad:ce:ca:3c:25: f9:fa:2d:0c:44:84:12:5f:15:48:40:d6:11:54:54:4a:a2:e6: 0b:27:bf:66:30:c1:45:34:3a:0f:af:25:5e:00:68:c8:e0:2a: db:99:20:07:47:21:1c:bc:ec:9f:05:ec:6b:e7:0a:82:eb:08: 72:83:59:fb:25:db:47:9a:63:ef:0e:e6:76:e7:1e:79:3d:e3: 8b:f2:c9:ba:b8:e1:a3:fd:40:21:5b:83:a6:3b:dc:31:bb:54: b6:54:05:53:f1:b8:a5:c2:28:f4:47:a8:6a:74:b9:88:fc:e9: 20:64:ca:a1:8c:c2:8d:e4:93:79:9e:84:42:fd:11:f7:e9:30: d0:4f:6f:63:b8:ae:ef:33:65:4b:a2:18:aa:95:62:9d:f2:7a: 7a:a9:8e:a3:84:26:bf:9f:e9:5b:a9:12:ea:be:ea:05:83:f3: 80:83:36:4e:d9:2c:e9:e9:ee:82:5c:b0:18:d8:85:39:66:18: eb:3c:75:52:8a:b9:1d:00:01:a5:98:10:18:d0:4c:e8:2b:9f: 72:e8:9f:ec:11:33:70:10:3c:2c:ef:d1:47:67:a1:f8:95:7b: a0:a2:52:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUwODA5MDcwODI0WhcNMjUwODE2MDcwODI0WjAYMRYwFAYD VQQDEw02ODk2ZjNlOC00OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytu+pwpy7HW23O+Ux3sGbSVAyEZLKvFtVvrwuvDsjzon8RP15iMTdF+s8z3o f9NlaMCskKWUPgDdZCskb1sb96ebRUliNnZerHHXsxoQVg/muZ2ioyirsgZTGjn2 JkDgDKx+myi0nGdNHXYhlMM9NWWMjD5TzBzY4yx6QsNnB55CiIazRE7jvSg/lwUh 8m0Mn0JAtPxGsmq+88AaLwSfbUdnU4tp5QNMaPFdeBiua2wHqJg1yQIG0ceN4T4S 9039UguBNZ06vLJJybB+9zcz1DER2VCArEyq91sbR6AK6S0gkvPwpvAEtHpDFgvf oX3vGlBgOE7i0BlizHv9sykf6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAf2h/01 hXSDFW5BOHdcOkh7Q5UYMB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+dwQjAeoA6gylWbOWydVKqlDVi3iVwF5lhcSh4tyLrc7KPCX5+i0M RIQSXxVIQNYRVFRKouYLJ79mMMFFNDoPryVeAGjI4CrbmSAHRyEcvOyfBexr5wqC 6whyg1n7JdtHmmPvDuZ25x55PeOL8sm6uOGj/UAhW4OmO9wxu1S2VAVT8bilwij0 R6hqdLmI/OkgZMqhjMKN5JN5noRC/RH36TDQT29juK7vM2VLohiqlWKd8np6qY6j hCa/n+lbqRLqvuoFg/OAgzZO2Szp6e6CXLAY2IU5ZhjrPHVSirkdAAGlmBAY0Ezo K59y6J/sETNwEDws79FHZ6H4lXugolLa -----END CERTIFICATE-----Generated at Sun Aug 10 20:02:54 2025 by rpki-client