$ rpki-client -vvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft File: P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json) Hash identifier: 7l6lzCuFx9D8AX98qZvqzQmSyxJBkeTzpSyH0NY//10= Subject key identifier: E1:BF:36:E7:0A:61:A5:5F:50:CB:4A:E5:C6:B4:F8:36:82:9C:85:00 Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80 Certificate issuer: /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft Manifest number: 1E Signing time: Tue 05 Aug 2025 08:34:19 +0000 Manifest this update: Tue 05 Aug 2025 08:34:18 +0000 Manifest next update: Tue 12 Aug 2025 08:34:18 +0000 Files and hashes: 1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: JdO0ycMqhKRUf9AAgxHZKdOXs18j5/VTY0djp7OWDls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80 Validity Not Before: Aug 5 08:34:18 2025 GMT Not After : Aug 12 08:34:18 2025 GMT Subject: CN=6891c20b-956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:c4:3b:09:ce:ff:99:15:2a:46:a3:13:01: e7:c4:58:6d:3a:b4:64:89:f7:bb:f5:70:57:ae:66: 0b:26:67:84:df:4d:e3:c0:42:85:da:ad:d1:d3:f5: 8f:79:ee:b5:13:9d:8d:34:a4:df:3b:e3:6f:86:fe: 2d:f3:4e:18:e6:4e:b8:90:46:42:39:7c:ca:0f:03: 00:72:52:49:07:b5:b5:a8:6b:b0:9f:88:f6:5d:1b: 9a:e6:ed:03:e1:11:47:f4:0b:4e:59:e3:8b:a4:69: 68:7b:85:be:65:3f:73:f5:be:5f:0f:67:d2:0c:b0: 5e:19:b0:ef:34:db:92:5e:62:49:8b:7b:60:99:29: a7:e6:6a:9c:e1:c0:11:a6:92:da:bb:2e:f5:01:d7: e4:9b:85:c9:53:3c:36:78:c1:4c:15:de:8f:1a:81: 66:52:75:95:db:af:c5:cc:9f:72:9f:10:bd:dc:d5: 84:a1:a9:9e:72:58:db:36:5f:ea:35:eb:95:4e:62: 76:76:ab:a9:e3:7d:39:cf:8d:39:d6:da:df:0d:06: ae:64:b8:7c:e9:d2:d5:26:d4:70:e6:5d:46:70:38: 33:f0:af:81:ed:11:ac:1d:7e:e0:8f:67:39:93:e9: 1a:21:54:29:d5:9d:08:a1:f6:44:e7:f6:96:2f:9b: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:36:E7:0A:61:A5:5F:50:CB:4A:E5:C6:B4:F8:36:82:9C:85:00 X509v3 Authority Key Identifier: keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:02:22:f2:7c:38:c6:a7:0e:d8:9f:f2:54:6d:c5:6f:77:95: 16:a5:32:4b:3b:ff:0a:31:a7:ce:ef:b1:e7:09:0f:f6:e3:4a: cb:74:2a:61:15:79:9d:22:49:4b:c7:ba:df:e0:69:2a:d6:e4: df:b5:f2:8e:80:16:0f:ef:d8:53:e8:33:23:3f:fe:5a:b3:5b: aa:e7:8b:23:cb:dd:03:74:95:3d:c3:9a:9a:76:72:cd:2b:fe: 1b:9a:7b:99:39:17:39:87:ae:d7:88:24:a8:2f:e5:e9:a8:f7: 52:df:f9:d7:05:d7:bb:78:5f:60:02:ae:e5:e2:c3:30:df:18: f5:d9:aa:24:3c:72:82:f1:c3:35:90:e0:3f:bc:e7:70:59:c0: 07:e6:57:7f:85:6b:81:ba:8e:9b:d8:51:ee:79:ed:96:88:ab: d7:1e:de:ea:6e:f9:5b:22:33:e8:88:66:91:37:3d:61:18:19: 6a:35:55:5c:70:c4:41:4a:12:96:52:53:f3:35:51:d9:db:2a: 06:b8:d6:12:b2:ec:39:c3:cf:09:f7:a5:97:54:42:b8:cd:49: c7:5b:66:77:6b:86:c7:fd:c9:5f:cf:73:b2:77:87:3b:69:9d: a0:11:c1:36:39:7f:fe:aa:22:41:88:41:0a:d9:ab:16:1a:bc: c2:63:1e:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTJGQjExMC8GA1UEBRMoM0Y0OEFDQTEyQTU5MjdBNzAyRUNFRTI0NDE1MTg5MTk0 RUQ0QUE4MDAeFw0yNTA4MDUwODM0MThaFw0yNTA4MTIwODM0MThaMBgxFjAUBgNV BAMTDTY4OTFjMjBiLTk1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4LMQ7Cc7/mRUqRqMTAefEWG06tGSJ97v1cFeuZgsmZ4TfTePAQoXardHT9Y95 7rUTnY00pN8742+G/i3zThjmTriQRkI5fMoPAwByUkkHtbWoa7CfiPZdG5rm7QPh EUf0C05Z44ukaWh7hb5lP3P1vl8PZ9IMsF4ZsO8025JeYkmLe2CZKafmapzhwBGm ktq7LvUB1+SbhclTPDZ4wUwV3o8agWZSdZXbr8XMn3KfEL3c1YShqZ5yWNs2X+o1 65VOYnZ2q6njfTnPjTnW2t8NBq5kuHzp0tUm1HDmXUZwODPwr4HtEawdfuCPZzmT 6RohVCnVnQih9kTn9pYvm1bzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4b825wph pV9Qy0rlxrT4NoKchQAwHwYDVR0jBBgwFoAUP0isoSpZJ6cC7O4kQVGJGU7UqoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMkZCLzlGOEY5RDAwNDY4 NzExRjBBRjY0Mjc0NEM0RjlBRTAyL1AwaXNvU3BaSjZjQzdPNGtRVkdKR1U3VXFv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDBpc29TcFpKNmNDN080a1FWR0pHVTdVcW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MkZCLzlGOEY5RDAwNDY4NzExRjBBRjY0Mjc0NEM0RjlBRTAyL1AwaXNvU3BaSjZj QzdPNGtRVkdKR1U3VXFvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYCIvJ8OManDtif8lRtxW93lRalMks7/woxp87vsecJD/bjSst0KmEV eZ0iSUvHut/gaSrW5N+18o6AFg/v2FPoMyM//lqzW6rniyPL3QN0lT3Dmpp2cs0r /huae5k5FzmHrteIJKgv5emo91Lf+dcF17t4X2ACruXiwzDfGPXZqiQ8coLxwzWQ 4D+853BZwAfmV3+Fa4G6jpvYUe557ZaIq9ce3upu+VsiM+iIZpE3PWEYGWo1VVxw xEFKEpZSU/M1UdnbKga41hKy7DnDzwn3pZdUQrjNScdbZndrhsf9yV/Pc7J3hztp naARwTY5f/6qIkGIQQrZqxYavMJjHoY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:15 2025 by rpki-client