$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json) Hash identifier: mCo1bzF1xNsgEoszNDfEpt474QumGQ3bktglNCrmdOM= Subject key identifier: D3:23:57:14:B9:DF:57:1F:7D:31:F4:B8:69:3E:AC:76:C9:D0:A6:B5 Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Certificate serial: 129A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft Manifest number: 129A Signing time: Sun 10 Aug 2025 17:04:42 +0000 Manifest this update: Sun 10 Aug 2025 17:04:42 +0000 Manifest next update: Sun 17 Aug 2025 17:04:42 +0000 Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: zgwQGCCquDOeZHRaGbsKc3FR76lgdzfHTNYsaFJyW1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4762 (0x129a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Validity Not Before: Aug 10 17:04:42 2025 GMT Not After : Aug 17 17:04:42 2025 GMT Subject: CN=6898d12a-761f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:59:9c:e8:c8:b9:a9:7e:cd:78:9a:62:7c: f0:e2:e3:d1:a1:01:68:33:9c:03:33:fc:e0:23:17: 5d:42:10:da:cd:0c:29:fd:83:7a:f3:ac:8d:70:4f: df:a6:8c:6c:28:29:94:6d:e5:fe:85:5a:df:43:e5: 5d:c5:3a:11:a1:c3:86:b1:0c:7e:a3:9d:5e:11:89: c1:3f:49:88:9c:9a:96:0d:f8:4d:70:a5:08:f2:85: ce:88:e1:f5:0b:7f:69:6d:ec:ce:82:07:7c:db:a9: 95:0f:ba:38:e5:ef:d6:6d:89:15:a2:ac:0a:52:17: eb:4f:9d:33:51:b1:b8:9b:a2:52:52:13:79:41:52: ad:e4:a5:c1:0d:10:65:10:5c:35:cc:8a:c0:8f:85: 4e:17:97:2b:6a:b1:5d:a2:80:6d:13:4b:84:a4:3f: e8:3a:5c:21:8d:d0:ed:1f:0e:9c:df:2d:32:2e:4e: c2:6f:cb:bc:91:ac:f8:c2:7b:61:4b:04:26:fb:45: 50:1b:cf:29:98:b6:58:c7:c6:d0:2b:5c:f8:3b:08: a8:13:73:3a:81:95:d3:43:e1:19:9a:de:9c:f7:db: b5:da:8b:b8:7b:d6:e0:56:ba:1a:ab:5d:1c:e8:9f: 88:a2:9f:88:dd:b9:b6:30:6b:d6:7a:a9:95:55:ea: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:23:57:14:B9:DF:57:1F:7D:31:F4:B8:69:3E:AC:76:C9:D0:A6:B5 X509v3 Authority Key Identifier: keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:41:70:c7:0f:50:88:59:15:cd:ea:09:66:3d:bf:9a:a7:be: 3d:e5:bd:3a:b6:72:9b:c9:a6:11:38:60:52:9e:1b:00:bc:47: 62:82:4c:06:ac:72:dc:41:1d:78:33:2b:41:d6:fe:11:65:d1: 84:16:f0:43:6a:89:8b:80:64:c5:e8:34:91:92:4b:66:65:25: 8a:b8:ec:4f:0c:65:5b:b6:c7:d3:4d:d9:e1:08:0b:e8:90:19: 04:b9:6b:24:c1:53:7c:3e:24:63:22:58:22:3e:e9:6a:ab:b1: ac:a7:10:f0:8c:7f:62:b4:c8:3a:1b:f6:91:d5:03:f7:a1:3b: 28:d1:d6:08:32:d2:7a:c1:47:fc:d8:33:32:a9:90:b5:f3:8e: fa:80:67:bd:53:4c:92:ac:bd:79:a1:5a:14:f9:64:a8:ee:80: 6e:ca:33:ff:be:c3:bb:0b:41:90:b9:db:a6:69:63:96:43:5f: 73:0d:97:37:83:da:45:04:69:fd:89:60:c1:9a:7d:c5:01:22: 78:88:7a:43:7b:3d:55:79:cd:83:ac:73:09:2f:69:ce:bb:b3: 18:ba:68:d2:f2:40:16:18:d5:e8:ba:b5:41:be:4c:c1:77:de: a9:0c:c5:bd:d8:9f:ad:e0:de:e7:b2:38:1d:2a:04:9e:eb:82: e6:85:0d:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF QkJEMjhEOTcwHhcNMjUwODEwMTcwNDQyWhcNMjUwODE3MTcwNDQyWjAYMRYwFAYD VQQDEw02ODk4ZDEyYS03NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A9ZnOjIual+zXiaYnzw4uPRoQFoM5wDM/zgIxddQhDazQwp/YN686yNcE/f poxsKCmUbeX+hVrfQ+VdxToRocOGsQx+o51eEYnBP0mInJqWDfhNcKUI8oXOiOH1 C39pbezOggd826mVD7o45e/WbYkVoqwKUhfrT50zUbG4m6JSUhN5QVKt5KXBDRBl EFw1zIrAj4VOF5crarFdooBtE0uEpD/oOlwhjdDtHw6c3y0yLk7Cb8u8kaz4wnth SwQm+0VQG88pmLZYx8bQK1z4OwioE3M6gZXTQ+EZmt6c99u12ou4e9bgVroaq10c 6J+Iop+I3bm2MGvWeqmVVeoqGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMjVxS5 31cffTH0uGk+rHbJ0Ka1MB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1 TTI4eVRETExwVmpydlNqWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3QXDHD1CIWRXN6glmPb+ap7495b06tnKbyaYROGBSnhsAvEdigkwG rHLcQR14MytB1v4RZdGEFvBDaomLgGTF6DSRkktmZSWKuOxPDGVbtsfTTdnhCAvo kBkEuWskwVN8PiRjIlgiPulqq7GspxDwjH9itMg6G/aR1QP3oTso0dYIMtJ6wUf8 2DMyqZC18476gGe9U0ySrL15oVoU+WSo7oBuyjP/vsO7C0GQudumaWOWQ19zDZc3 g9pFBGn9iWDBmn3FASJ4iHpDez1Vec2DrHMJL2nOu7MYumjS8kAWGNXourVBvkzB d96pDMW92J+t4N7nsjgdKgSe64LmhQ0L -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:01 2025 by rpki-client