$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: WtxtyM7YCU/Xy24TOpas8uPuChTSw1Hq5u5ynzBH+70= Subject key identifier: 12:0B:A5:B5:65:F1:B3:F8:50:84:F3:9E:74:5C:E8:81:E7:F6:72:58 Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 34A3 Signing time: Fri 08 Aug 2025 15:16:35 +0000 Manifest this update: Fri 08 Aug 2025 15:16:35 +0000 Manifest next update: Fri 15 Aug 2025 15:16:35 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: NsLL8ixWjK7oHvlvn8qxCDDz/08/GFAlSDwfqA/hm8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Aug 8 15:16:35 2025 GMT Not After : Aug 15 15:16:35 2025 GMT Subject: CN=689614d3-e2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:84:a7:60:ee:23:8a:92:76:56:55:ac:dd: 78:05:04:87:84:a4:5e:f5:c8:e7:03:52:d8:01:16: f7:55:66:4e:c1:86:5a:ca:84:71:76:39:55:8c:03: ad:d9:17:7f:ca:bd:7f:30:3f:cb:e3:90:ef:4f:c1: 47:eb:26:af:f5:a8:3b:62:c9:23:f7:e6:ab:83:d0: 80:35:e1:48:4b:7a:81:36:c8:47:3b:96:2c:fe:98: 34:64:71:e4:ec:48:23:64:fa:6d:5d:2d:9e:fc:73: 3c:82:0f:e2:7c:1e:c3:77:de:03:e0:cf:e0:2f:af: c1:1f:46:c3:db:72:d6:65:70:9d:07:be:9a:d0:62: 59:98:d6:3b:61:01:c8:0c:6d:b5:d6:6f:35:34:37: 6b:7a:9c:38:81:82:eb:b8:5c:5c:df:74:2e:b5:2e: 76:b1:45:5f:c7:f4:3a:6f:e7:5d:76:d6:4e:be:7c: 82:81:43:10:80:22:57:a3:02:fe:35:fb:32:18:47: 0e:f1:78:cc:96:49:e6:97:9a:39:7f:51:80:e1:82: ec:36:d5:80:2f:27:a2:87:55:0f:4e:20:09:e4:6c: b8:11:b0:af:b1:31:d3:3a:6f:ba:7d:1a:dc:6c:05: e7:75:df:77:97:68:d6:09:98:7c:9e:86:2b:7f:9f: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0B:A5:B5:65:F1:B3:F8:50:84:F3:9E:74:5C:E8:81:E7:F6:72:58 X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:40:c1:72:f1:da:33:9b:53:e9:5d:0f:f4:e2:05:b8:24:d1: 18:df:17:c7:d1:18:ca:c8:71:87:cf:a2:37:8a:00:9c:b7:85: 4c:b2:d2:12:c4:c3:05:8a:4a:9d:4d:fc:cc:42:e5:2d:82:81: fe:4e:29:04:45:90:3c:f3:ec:02:88:d3:66:58:5f:92:d4:05: 82:d1:e0:af:31:58:92:9e:22:d3:1c:58:f4:f5:fd:10:ff:f0: 7c:46:2a:cd:41:63:22:7b:a8:c3:11:cd:79:da:6a:13:c5:64: 5d:6b:9f:40:f5:42:45:38:60:f2:83:27:d8:35:32:f6:83:57: 2c:16:6e:ea:75:1e:90:f3:42:2f:80:5c:31:0f:b7:dc:cd:15: fd:81:23:a9:c8:e7:e3:6b:e1:86:05:ec:c2:28:f5:4a:a3:ad: 14:bc:9d:59:50:19:43:81:86:47:ce:87:67:64:cd:ec:0f:00: ea:22:dc:92:fb:6d:73:d1:65:9f:72:c3:82:b0:4f:1e:d6:29: e1:19:1d:57:19:3e:b0:7a:cf:65:7d:30:d2:4f:91:43:46:26: bc:b7:f5:82:7a:fb:72:e5:73:46:f7:8f:13:b6:91:c9:49:1a: 2f:67:01:4e:eb:99:98:0b:ee:97:75:f5:96:59:f8:f3:25:be: 00:3c:16:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjUwODA4MTUxNjM1WhcNMjUwODE1MTUxNjM1WjAYMRYwFAYD VQQDEw02ODk2MTRkMy1lMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2KEp2DuI4qSdlZVrN14BQSHhKRe9cjnA1LYARb3VWZOwYZayoRxdjlVjAOt 2Rd/yr1/MD/L45DvT8FH6yav9ag7Yskj9+arg9CANeFIS3qBNshHO5Ys/pg0ZHHk 7EgjZPptXS2e/HM8gg/ifB7Dd94D4M/gL6/BH0bD23LWZXCdB76a0GJZmNY7YQHI DG211m81NDdrepw4gYLruFxc33QutS52sUVfx/Q6b+dddtZOvnyCgUMQgCJXowL+ NfsyGEcO8XjMlknml5o5f1GA4YLsNtWALyeih1UPTiAJ5Gy4EbCvsTHTOm+6fRrc bAXndd93l2jWCZh8noYrf58TYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBILpbVl 8bP4UITznnRc6IHn9nJYMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfQMFy8dozm1PpXQ/04gW4JNEY3xfH0RjKyHGHz6I3igCct4VMstIS xMMFikqdTfzMQuUtgoH+TikERZA88+wCiNNmWF+S1AWC0eCvMViSniLTHFj09f0Q //B8RirNQWMie6jDEc152moTxWRda59A9UJFOGDygyfYNTL2g1csFm7qdR6Q80Iv gFwxD7fczRX9gSOpyOfja+GGBezCKPVKo60UvJ1ZUBlDgYZHzodnZM3sDwDqItyS +21z0WWfcsOCsE8e1inhGR1XGT6wes9lfTDST5FDRia8t/WCevty5XNG948TtpHJ SRovZwFO65mYC+6XdfWWWfjzJb4APBbB -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:43 2025 by rpki-client