$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: +QeO5dpGAN4PIY4QuuDbaO2seWQHyt0egAs/qNo0uUA= Subject key identifier: FB:FE:30:78:64:AB:F4:CA:3D:A0:88:48:47:D6:FB:2D:10:5B:DF:44 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0667 Signing time: Sun 10 Aug 2025 22:22:52 +0000 Manifest this update: Sun 10 Aug 2025 22:22:51 +0000 Manifest next update: Sun 17 Aug 2025 22:22:51 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: yrnZCEM4+VlYYrGTwUjxvEIocdWYEgzE9/4CLXM+K2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Aug 10 22:22:51 2025 GMT Not After : Aug 17 22:22:51 2025 GMT Subject: CN=68991bbb-c4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:a3:9c:51:44:f4:db:ee:83:c1:8a:3a:2a: 64:bc:62:00:64:7f:b2:87:1f:66:9d:cf:5f:5d:0e: 3c:8a:f1:b1:4f:4c:32:f6:ee:43:cc:1f:1d:0c:ef: c1:31:fc:cd:70:d5:8b:69:bd:a3:bb:55:4a:04:19: 15:9b:66:36:9e:87:14:3a:b1:bd:27:15:6e:cd:6c: 2e:f7:be:5c:f5:6a:66:b1:99:19:da:be:c5:96:a5: c7:c1:ab:d9:83:c1:d6:be:c2:f2:85:2a:c5:39:0a: 3d:71:82:25:de:6a:ed:08:a1:c5:b9:e3:33:07:d4: 54:a4:8a:fc:c3:f7:87:7e:ce:45:f6:cc:35:ca:79: f3:62:87:5a:77:70:71:1b:bb:69:d3:a7:c8:ee:ae: 94:1a:97:ec:bc:8f:c3:28:15:c4:12:88:7a:fa:89: 20:2b:73:d3:31:eb:a2:0f:8f:44:9e:f9:a3:2d:13: a9:31:91:67:08:8a:6f:5d:85:9b:65:8b:40:1b:6b: 8e:a5:69:92:81:b0:fb:61:cc:2a:df:d6:29:8a:2b: 02:96:27:f6:b9:cc:b0:e4:83:6a:8a:5a:81:4b:33: a6:2e:17:db:2d:f1:a0:15:d8:7c:b4:c2:70:b2:f6: 09:2e:7a:c5:3e:1e:e1:14:ef:a6:8f:88:13:58:65: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FE:30:78:64:AB:F4:CA:3D:A0:88:48:47:D6:FB:2D:10:5B:DF:44 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:df:6a:fd:e2:66:e8:3e:fc:40:7e:99:56:48:1e:00:13:ab: fe:24:54:31:47:4c:9a:ad:17:d6:b9:dc:f4:af:b7:56:1a:b3: b3:02:c4:c1:fc:e2:1b:d3:9a:55:b4:a5:4f:2d:4f:3a:13:06: e0:ed:5c:df:21:23:b5:7f:22:1a:40:55:60:ab:a9:e8:6c:8c: b9:a0:4b:c5:4b:a8:d2:5b:8b:b5:ef:c4:ca:a4:26:4a:b7:0a: 07:39:37:2e:04:c3:5e:02:bc:05:10:58:d5:e0:32:77:38:d2: 7c:39:d6:a7:3a:37:fb:51:e2:46:be:52:9c:73:43:4e:d2:97: a0:b4:d0:39:51:bd:d5:11:8c:90:59:82:d2:4c:e3:6e:4f:71: 30:4f:47:87:ae:bc:4c:c4:6c:48:d5:d2:38:bc:83:b4:f8:d7: e1:8b:69:54:df:9d:04:50:5e:f6:1a:e5:dd:66:6f:9f:5f:c6: a9:80:0a:26:8e:9b:f6:11:55:d5:2d:fa:8f:e1:75:7f:43:bf: bd:21:f1:32:84:60:7d:ba:7f:b1:5c:a3:23:68:12:22:72:19: 1e:5c:6e:00:52:1b:71:13:f0:67:94:b1:ee:6b:bc:8f:83:0e: 6b:f1:6f:1d:d4:53:4d:a4:01:20:2e:d9:96:84:91:a2:d4:bb: 3a:a0:c4:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUwODEwMjIyMjUxWhcNMjUwODE3MjIyMjUxWjAYMRYwFAYD VQQDEw02ODk5MWJiYi1jNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZujnFFE9Nvug8GKOipkvGIAZH+yhx9mnc9fXQ48ivGxT0wy9u5DzB8dDO/B MfzNcNWLab2ju1VKBBkVm2Y2nocUOrG9JxVuzWwu975c9WpmsZkZ2r7FlqXHwavZ g8HWvsLyhSrFOQo9cYIl3mrtCKHFueMzB9RUpIr8w/eHfs5F9sw1ynnzYodad3Bx G7tp06fI7q6UGpfsvI/DKBXEEoh6+okgK3PTMeuiD49EnvmjLROpMZFnCIpvXYWb ZYtAG2uOpWmSgbD7Ycwq39YpiisClif2ucyw5INqilqBSzOmLhfbLfGgFdh8tMJw svYJLnrFPh7hFO+mj4gTWGUcuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv+MHhk q/TKPaCISEfW+y0QW99EMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe32r94mboPvxAfplWSB4AE6v+JFQxR0yarRfWudz0r7dWGrOzAsTB /OIb05pVtKVPLU86Ewbg7VzfISO1fyIaQFVgq6nobIy5oEvFS6jSW4u178TKpCZK twoHOTcuBMNeArwFEFjV4DJ3ONJ8OdanOjf7UeJGvlKcc0NO0pegtNA5Ub3VEYyQ WYLSTONuT3EwT0eHrrxMxGxI1dI4vIO0+Nfhi2lU350EUF72GuXdZm+fX8apgAom jpv2EVXVLfqP4XV/Q7+9IfEyhGB9un+xXKMjaBIichkeXG4AUhtxE/BnlLHua7yP gw5r8W8d1FNNpAEgLtmWhJGi1Ls6oMS0 -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:56 2025 by rpki-client