$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: 9iI0KD1AhJYJ+voF74FYF8NATT0dDCbyOT9Co7baMAE= Subject key identifier: BE:01:45:74:EC:77:AA:5E:E6:EC:83:4F:1D:2C:7C:B1:D1:F6:C1:4D Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 07D0 Signing time: Sun 10 Aug 2025 21:11:12 +0000 Manifest this update: Sun 10 Aug 2025 21:11:11 +0000 Manifest next update: Sun 17 Aug 2025 21:11:11 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: z8/wA6gE/bg0f6dRfmD7fr1ofv4xr6vvshLlA1SDoD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 21:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Aug 10 21:11:11 2025 GMT Not After : Aug 17 21:11:11 2025 GMT Subject: CN=68990aef-bc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:b4:b9:30:91:37:37:16:a9:96:08:f6:ff: 30:3f:79:24:9d:ed:17:57:11:c6:d2:76:30:4a:b5: ac:f2:6a:e3:92:23:c4:de:5b:e9:03:2f:0f:b2:8b: 8e:2e:e6:fb:5f:76:24:c8:b9:bc:96:35:9b:60:dc: 69:aa:63:4a:db:af:a1:bb:69:66:95:93:50:42:e1: e8:98:de:59:02:d2:04:14:7c:75:0b:c1:1e:7d:f4: 4e:71:34:b8:bd:08:1a:2a:58:e7:18:36:13:f7:bc: 44:2a:1e:35:c9:7a:23:d4:0e:91:1e:23:ea:f2:18: b7:22:f0:fb:d9:0f:76:57:41:c4:b7:6a:c9:3f:78: a0:4c:91:6d:69:d1:3c:22:68:26:19:5a:3b:44:15: 39:88:dc:ae:65:bc:78:11:81:3e:22:6a:eb:87:75: db:b8:dd:5e:6e:f0:06:e3:bf:8b:ff:84:6f:f8:d4: 3f:6b:15:37:c9:75:c0:e3:1a:fd:20:11:38:49:03: cc:ed:91:de:b3:32:3f:32:bf:cb:48:12:4b:6a:e3: 9d:c0:5e:f5:b4:90:bd:ea:8b:98:4c:1f:e2:2b:e1: 1f:1f:22:a0:df:68:8e:d1:f8:d1:1b:a0:07:e4:c8: 9b:c9:04:f9:9b:eb:92:12:cc:bb:85:20:de:ba:1d: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:45:74:EC:77:AA:5E:E6:EC:83:4F:1D:2C:7C:B1:D1:F6:C1:4D X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:68:5b:4d:c8:63:b4:3f:e1:f9:19:5c:61:27:26:dc:62:c5: 2a:6f:5f:35:46:2e:9b:a5:15:4f:24:6f:6a:e3:65:67:87:37: a8:ee:dc:2f:f9:81:eb:ad:48:cf:d5:b7:96:27:51:3c:14:d3: 82:8e:4b:31:cb:1b:f6:24:16:60:b5:2e:e8:25:61:17:65:cf: 03:2e:56:a3:c1:13:4f:71:95:01:1d:ce:67:31:1a:5b:59:a5: 2a:de:93:e3:91:d5:24:37:21:b5:b8:60:3f:eb:f8:f9:3c:d1: c7:cc:66:fa:f7:43:b1:bd:aa:09:b1:42:e1:13:b2:2a:98:3e: 68:d0:a6:ef:38:71:76:31:92:31:6c:ee:7f:e0:dd:c7:63:7a: 09:54:8e:22:00:7a:bd:9c:12:a2:fa:1f:97:59:4d:4f:39:a8: 18:2a:8c:af:4c:4b:c2:bc:e4:1a:14:4d:2b:4e:12:58:70:d9: d4:e0:89:e2:7f:19:62:3b:c8:c2:1e:68:08:15:85:24:19:30: ec:22:bb:c6:80:1b:9b:69:44:cb:d8:1c:c7:04:37:e4:87:18: b2:d0:f7:db:8d:7f:d4:09:fd:e6:cf:de:84:57:65:88:28:a3: a6:5a:bc:e5:70:fc:bb:65:ee:6a:8c:7a:e4:e0:76:84:a2:4f: 49:e4:f0:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwODEwMjExMTExWhcNMjUwODE3MjExMTExWjAYMRYwFAYD VQQDEw02ODk5MGFlZi1iYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlu0uTCRNzcWqZYI9v8wP3kkne0XVxHG0nYwSrWs8mrjkiPE3lvpAy8PsouO Lub7X3YkyLm8ljWbYNxpqmNK26+hu2lmlZNQQuHomN5ZAtIEFHx1C8EeffROcTS4 vQgaKljnGDYT97xEKh41yXoj1A6RHiPq8hi3IvD72Q92V0HEt2rJP3igTJFtadE8 ImgmGVo7RBU5iNyuZbx4EYE+Imrrh3XbuN1ebvAG47+L/4Rv+NQ/axU3yXXA4xr9 IBE4SQPM7ZHeszI/Mr/LSBJLauOdwF71tJC96ouYTB/iK+EfHyKg32iO0fjRG6AH 5MibyQT5m+uSEsy7hSDeuh2q8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4BRXTs d6pe5uyDTx0sfLHR9sFNMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdaFtNyGO0P+H5GVxhJybcYsUqb181Ri6bpRVPJG9q42Vnhzeo7twv +YHrrUjP1beWJ1E8FNOCjksxyxv2JBZgtS7oJWEXZc8DLlajwRNPcZUBHc5nMRpb WaUq3pPjkdUkNyG1uGA/6/j5PNHHzGb690OxvaoJsULhE7IqmD5o0KbvOHF2MZIx bO5/4N3HY3oJVI4iAHq9nBKi+h+XWU1POagYKoyvTEvCvOQaFE0rThJYcNnU4Ini fxliO8jCHmgIFYUkGTDsIrvGgBubaUTL2BzHBDfkhxiy0PfbjX/UCf3mz96EV2WI KKOmWrzlcPy7Ze5qjHrk4HaEok9J5PAr -----END CERTIFICATE-----Generated at Tue Aug 12 14:39:46 2025 by rpki-client