$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: w3zXqnB+2PbmbCT0UZsAhirOg9xlL/SAqlJVwDTJ1os= Subject key identifier: 6F:22:67:8C:A8:C7:0F:EE:52:41:D2:40:DF:AD:27:CD:BB:5A:2B:7B Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: D2 Signing time: Tue 05 Aug 2025 06:06:09 +0000 Manifest this update: Tue 05 Aug 2025 06:06:08 +0000 Manifest next update: Tue 12 Aug 2025 06:06:08 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: cQFpjLwTIg1z0VxRbh5ZH4xMGzQoxLo1QKn3KanoQrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Aug 5 06:06:08 2025 GMT Not After : Aug 12 06:06:08 2025 GMT Subject: CN=68919f51-e187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:d3:a6:85:38:bc:b6:2b:56:9e:f8:fa:49: 1f:40:63:03:cb:f3:b7:80:61:0d:e8:c2:9e:03:12: 97:7f:bc:a1:de:a8:cf:5a:64:36:83:65:e6:f1:e3: 80:55:6f:2d:ae:47:4c:29:10:06:0e:98:ec:e5:03: 3a:86:57:34:34:3d:67:64:35:01:da:3a:73:68:14: ff:20:23:59:09:47:b5:c3:ce:3d:15:26:9f:3b:db: b6:fd:09:15:52:82:26:60:cc:27:c7:88:8d:f7:e8: 1d:bc:10:0c:f3:88:51:5f:15:90:6e:4e:e2:35:a8: a8:e9:bc:9c:e2:56:f2:d4:4b:6a:d7:89:5f:05:db: 51:9a:e2:74:0a:ba:5d:92:c7:6d:ec:8d:7e:bc:20: ee:75:80:d3:ce:c6:31:dd:45:1c:51:16:04:80:cf: de:4e:70:d7:9c:78:29:1b:99:da:d5:92:64:f0:c1: 3b:76:c0:c5:91:34:f2:45:1d:5e:92:5c:dd:93:b4: 82:46:42:11:7b:d1:9a:9e:ae:29:40:26:0e:78:68: 9f:70:c2:38:be:f2:1b:3e:09:9c:09:46:c6:fc:ff: 03:68:ef:9f:96:b7:b4:b6:cd:13:d2:62:22:c8:a1: ea:ac:0b:8d:49:35:7d:12:40:27:b0:5b:f3:1a:7d: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:67:8C:A8:C7:0F:EE:52:41:D2:40:DF:AD:27:CD:BB:5A:2B:7B X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:66:d5:99:52:5a:7f:5b:01:33:88:bc:88:38:58:ac:6e:5a: 64:b0:b2:f7:06:c1:ad:f5:35:31:7d:b7:75:fa:94:15:de:02: 60:d3:78:23:fa:0c:a4:d1:07:d9:0a:cf:ab:78:f3:00:ff:6c: 6f:6b:85:61:96:3f:f8:a3:14:4f:10:92:bb:05:c5:72:e8:3f: 68:6d:24:3b:b0:f2:51:f2:b7:f3:3e:0f:84:08:64:f2:b5:7b: 51:23:8c:d0:61:ba:00:ac:53:c5:31:d3:f8:c6:be:2e:1d:34: b0:b9:6c:45:d0:0e:2f:7f:a6:2c:0e:56:f7:f4:02:a0:f8:04: f5:31:0d:b6:1d:a4:34:73:5f:d4:03:ec:9d:8c:8b:68:e0:82: f6:33:8c:e4:7d:db:40:59:77:09:56:77:c5:82:a0:d9:50:93: dc:43:a0:91:40:02:c2:0c:e7:89:41:47:3e:d9:40:38:e7:14: 9c:37:61:3f:12:7f:aa:0c:be:0a:f6:c0:00:72:b6:a7:45:a9: b0:4a:13:f9:ce:2c:91:9a:bc:bf:80:b8:ba:54:db:3a:4c:c4: d8:05:09:cc:ea:b4:c9:0d:42:4a:e9:a8:e2:f4:75:b3:1f:bb: aa:12:38:ca:b7:27:ee:2c:3a:b8:52:eb:28:e9:5b:a1:6e:cf: e2:7b:3f:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUwODA1MDYwNjA4WhcNMjUwODEyMDYwNjA4WjAYMRYwFAYD VQQDEw02ODkxOWY1MS1lMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrjTpoU4vLYrVp74+kkfQGMDy/O3gGEN6MKeAxKXf7yh3qjPWmQ2g2Xm8eOA VW8trkdMKRAGDpjs5QM6hlc0ND1nZDUB2jpzaBT/ICNZCUe1w849FSafO9u2/QkV UoImYMwnx4iN9+gdvBAM84hRXxWQbk7iNaio6byc4lby1Etq14lfBdtRmuJ0Crpd ksdt7I1+vCDudYDTzsYx3UUcURYEgM/eTnDXnHgpG5na1ZJk8ME7dsDFkTTyRR1e klzdk7SCRkIRe9Ganq4pQCYOeGifcMI4vvIbPgmcCUbG/P8DaO+flre0ts0T0mIi yKHqrAuNSTV9EkAnsFvzGn1BVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8iZ4yo xw/uUkHSQN+tJ827Wit7MB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBZtWZUlp/WwEziLyIOFisblpksLL3BsGt9TUxfbd1+pQV3gJg03gj +gyk0QfZCs+rePMA/2xva4Vhlj/4oxRPEJK7BcVy6D9obSQ7sPJR8rfzPg+ECGTy tXtRI4zQYboArFPFMdP4xr4uHTSwuWxF0A4vf6YsDlb39AKg+AT1MQ22HaQ0c1/U A+ydjIto4IL2M4zkfdtAWXcJVnfFgqDZUJPcQ6CRQALCDOeJQUc+2UA45xScN2E/ En+qDL4K9sAAcranRamwShP5ziyRmry/gLi6VNs6TMTYBQnM6rTJDUJK6aji9HWz H7uqEjjKtyfuLDq4Uuso6Vuhbs/iez9L -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:51 2025 by rpki-client