$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: yN7JeLZWgAtLLyi6DxULtmI02tFSVslNTMVoiCMUbfc= Subject key identifier: AA:1C:9F:A0:78:F6:3A:1B:08:67:25:66:28:FE:D7:C2:E9:B7:6F:8C Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 22 Signing time: Tue 05 Aug 2025 08:31:16 +0000 Manifest this update: Tue 05 Aug 2025 08:31:15 +0000 Manifest next update: Tue 12 Aug 2025 08:31:15 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: P3WdmrGbBs6rRTroR+WRz5g8jl6iLwXH4mD7FavsuiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Aug 5 08:31:15 2025 GMT Not After : Aug 12 08:31:15 2025 GMT Subject: CN=6891c153-b1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:53:ac:c4:0e:33:9b:1d:71:cb:67:2e:9c: 33:3e:10:45:9b:9e:34:ca:41:11:ee:ee:ac:f0:71: 3a:aa:96:fc:57:81:e3:16:5b:ef:e8:b8:dd:3d:fc: ba:71:61:da:ac:2e:b8:7e:fe:74:04:1d:07:82:d3: 5f:b2:4e:6c:eb:a0:c7:2e:e3:53:7b:84:a8:82:1d: ad:78:44:e0:b8:c1:d1:7c:c5:fc:40:11:e9:d1:ac: 20:34:35:33:f4:41:40:a7:96:8f:04:02:ad:1b:05: 15:78:4d:ec:44:bb:4f:d7:e8:ec:a5:f0:5b:00:0f: f1:1d:fb:d2:80:33:3c:42:15:d0:a7:91:44:c3:51: 94:d7:5d:21:61:93:1b:f7:b7:f5:75:6f:02:b8:03: bb:88:27:8a:31:50:45:c7:0f:8b:41:80:d1:97:d9: b3:3e:23:6a:bd:25:56:ca:68:9e:01:e3:5a:f1:ac: 19:20:c0:93:97:96:80:97:e8:23:36:a8:92:76:b7: 66:b1:e9:ed:ce:b0:e6:45:80:6e:38:58:2d:39:40: 04:48:08:6d:31:f6:0c:8d:77:48:97:9e:d6:a6:d8: 47:8c:d9:81:77:4b:86:55:b7:4a:9b:7b:28:45:aa: 32:93:52:56:95:7c:80:d8:33:60:b2:e6:46:bc:66: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:9F:A0:78:F6:3A:1B:08:67:25:66:28:FE:D7:C2:E9:B7:6F:8C X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:09:d4:aa:33:6a:b6:ef:20:8c:13:94:af:24:be:f4:20:90: 00:e6:81:de:53:f0:fa:61:e3:ee:b9:52:bf:82:02:5f:2b:d7: e7:15:fc:86:c1:68:03:15:2a:1f:66:df:4f:a6:d8:2f:3a:67: 27:a9:2f:fc:b4:45:be:d8:d6:5d:8b:6b:bb:8a:9e:77:1f:31: 9a:85:10:83:ca:27:0a:62:99:f0:d7:e2:c2:0e:97:d6:e0:5b: 26:11:df:f4:53:50:25:99:b3:3c:f1:7b:80:ff:13:80:4e:9c: ab:cb:dc:19:dc:25:72:e2:3c:59:64:2d:78:b1:e9:f4:17:67: b6:6c:73:81:5d:0b:72:5d:05:d7:d0:b8:bd:a5:88:c1:ac:83: ec:62:c0:4b:8f:1c:e8:66:1b:8c:20:4d:51:91:e4:7c:76:f7: 27:c6:12:c4:22:26:49:e7:ef:e6:0c:5c:4b:9c:cd:4e:9e:5f: 0c:ef:69:f6:83:d3:ee:55:d9:0b:77:f9:cb:02:fa:96:af:55: 6e:18:7b:69:75:fe:b6:20:4f:fc:92:ea:71:cc:33:4c:de:74: 7e:cd:e8:49:62:ff:20:a1:70:25:ab:d5:6e:43:55:38:9d:cf: 50:26:59:25:c6:3d:67:a5:09:48:da:22:5e:ed:f5:41:a3:b7: dd:39:dd:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTA4MDUwODMxMTVaFw0yNTA4MTIwODMxMTVaMBgxFjAUBgNV BAMTDTY4OTFjMTUzLWIxZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClplOsxA4zmx1xy2cunDM+EEWbnjTKQRHu7qzwcTqqlvxXgeMWW+/ouN09/Lpx YdqsLrh+/nQEHQeC01+yTmzroMcu41N7hKiCHa14ROC4wdF8xfxAEenRrCA0NTP0 QUCnlo8EAq0bBRV4TexEu0/X6Oyl8FsAD/Ed+9KAMzxCFdCnkUTDUZTXXSFhkxv3 t/V1bwK4A7uIJ4oxUEXHD4tBgNGX2bM+I2q9JVbKaJ4B41rxrBkgwJOXloCX6CM2 qJJ2t2ax6e3OsOZFgG44WC05QARICG0x9gyNd0iXntam2EeM2YF3S4ZVt0qbeyhF qjKTUlaVfIDYM2Cy5ka8ZlNVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqhyfoHj2 OhsIZyVmKP7Xwum3b4wwHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEEJ1KozarbvIIwTlK8kvvQgkADmgd5T8Pph4+65Ur+CAl8r1+cV/IbB aAMVKh9m30+m2C86ZyepL/y0Rb7Y1l2La7uKnncfMZqFEIPKJwpimfDX4sIOl9bg WyYR3/RTUCWZszzxe4D/E4BOnKvL3BncJXLiPFlkLXix6fQXZ7Zsc4FdC3JdBdfQ uL2liMGsg+xiwEuPHOhmG4wgTVGR5Hx29yfGEsQiJknn7+YMXEuczU6eXwzvafaD 0+5V2Qt3+csC+pavVW4Ye2l1/rYgT/yS6nHMM0zedH7N6Eli/yChcCWr1W5DVTid z1AmWSXGPWelCUjaIl7t9UGjt9053Zw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:21:55 2025 by rpki-client