$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: 3z220qMC0cI/uwWpZoRkcNpd66COm23uaQHYXvKVQzQ= Subject key identifier: 7F:EE:BE:0A:EF:A8:CF:53:8D:52:9D:1A:A2:EC:AA:B9:26:AF:55:3B Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 04B8 Signing time: Sat 09 Aug 2025 01:07:31 +0000 Manifest this update: Sat 09 Aug 2025 01:07:31 +0000 Manifest next update: Sat 16 Aug 2025 01:07:31 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: mSgYdKclMXN4mn9p3qvu8eeKYOrAawrGKitk8pONNjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: Aug 9 01:07:31 2025 GMT Not After : Aug 16 01:07:31 2025 GMT Subject: CN=68969f53-adf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:1c:f7:66:83:15:f4:3d:a0:08:cf:92:cd: b8:9f:d8:34:13:03:2f:cb:c1:e9:14:0a:d6:71:06: d4:ef:0e:7e:ab:c4:62:8e:01:41:88:ca:df:f7:63: c6:cd:37:3a:67:76:b0:fc:c2:6c:8a:47:f2:a9:3c: 1f:51:ce:d5:55:60:fd:da:5f:59:1c:27:b7:b0:0c: 93:97:af:2c:b9:a4:0c:a2:36:e1:e1:32:01:d7:e8: fa:b5:90:97:cf:fe:1d:11:f6:89:9c:b3:bd:71:64: 70:1b:db:ad:f5:67:33:a3:fc:a6:0b:1d:33:d9:b9: 9c:09:6e:0d:5e:bf:91:03:fc:0a:7f:f0:8c:d5:e4: ee:47:f6:e2:5b:ea:d5:81:d0:e7:18:8f:35:76:71: 18:d5:ad:51:93:eb:00:2c:49:76:4f:42:88:f9:76: 8c:75:eb:ac:39:4a:b7:f2:fe:3e:ca:c8:0d:1a:c2: bb:f6:6a:38:8a:9d:33:bf:dc:55:37:72:ee:4a:d6: a3:57:9d:d9:69:6e:dc:a7:3b:49:ef:35:df:0b:c3: 8f:4c:a7:9d:2f:be:03:6d:b7:bf:11:77:89:77:0d: 3d:0a:48:86:1f:84:89:e4:93:b2:22:cb:5f:ff:21: 07:c7:b8:03:6f:ac:d3:df:57:a3:39:c8:f0:1f:4b: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:BE:0A:EF:A8:CF:53:8D:52:9D:1A:A2:EC:AA:B9:26:AF:55:3B X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:ee:79:9a:62:ae:0b:dc:e1:f3:6a:38:b5:cf:4b:5d:80: d3:88:78:3f:29:69:1c:ca:16:3f:0f:34:47:d5:9e:71:ab:72: 46:0a:35:19:59:dc:41:7d:a4:ff:56:62:56:ad:6b:7f:88:37: 20:a4:fe:96:91:1d:b2:81:f9:af:67:71:01:48:ec:29:46:3a: a6:ec:62:79:0c:99:1f:ea:7b:2a:a3:0e:9f:e2:6e:e9:78:9a: e2:9c:8d:db:e8:be:6e:62:b3:c3:a0:0f:7e:77:db:8a:a2:a7: 0d:96:10:30:7e:36:f2:c6:ea:7e:0d:c1:b0:9a:e1:22:34:1d: 4b:61:60:eb:56:76:1a:ec:34:5f:34:77:97:e3:48:fb:72:3f: cf:08:f8:cc:9b:80:5f:4d:41:21:c2:35:4c:de:35:81:72:a9: 17:2d:66:5c:b0:52:39:7d:44:8e:28:6d:57:50:b3:d4:ea:9d: 8d:60:4d:1f:f1:fe:18:5c:be:bd:dc:3c:05:75:39:c4:32:7b: 64:87:59:d8:56:c5:5a:69:5e:34:01:21:d6:7e:d9:7d:45:aa: a6:7b:bd:f2:a2:69:b5:14:11:da:bd:97:bb:a5:57:e4:09:04: c5:cc:ee:61:76:05:9e:a5:e2:8c:10:da:84:c0:15:d4:f6:5f: 09:4e:48:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUwODA5MDEwNzMxWhcNMjUwODE2MDEwNzMxWjAYMRYwFAYD VQQDEw02ODk2OWY1My1hZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG8c92aDFfQ9oAjPks24n9g0EwMvy8HpFArWcQbU7w5+q8RijgFBiMrf92PG zTc6Z3aw/MJsikfyqTwfUc7VVWD92l9ZHCe3sAyTl68suaQMojbh4TIB1+j6tZCX z/4dEfaJnLO9cWRwG9ut9Wczo/ymCx0z2bmcCW4NXr+RA/wKf/CM1eTuR/biW+rV gdDnGI81dnEY1a1Rk+sALEl2T0KI+XaMdeusOUq38v4+ysgNGsK79mo4ip0zv9xV N3LuStajV53ZaW7cpztJ7zXfC8OPTKedL74Dbbe/EXeJdw09CkiGH4SJ5JOyIstf /yEHx7gDb6zT31ejOcjwH0v6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/uvgrv qM9TjVKdGqLsqrkmr1U7MB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJoO55mmKuC9zh82o4tc9LXYDTiHg/KWkcyhY/DzRH1Z5xq3JGCjUZ WdxBfaT/VmJWrWt/iDcgpP6WkR2ygfmvZ3EBSOwpRjqm7GJ5DJkf6nsqow6f4m7p eJrinI3b6L5uYrPDoA9+d9uKoqcNlhAwfjbyxup+DcGwmuEiNB1LYWDrVnYa7DRf NHeX40j7cj/PCPjMm4BfTUEhwjVM3jWBcqkXLWZcsFI5fUSOKG1XULPU6p2NYE0f 8f4YXL693DwFdTnEMntkh1nYVsVaaV40ASHWftl9Raqme73yomm1FBHavZe7pVfk CQTFzO5hdgWepeKMENqEwBXU9l8JTkgr -----END CERTIFICATE-----Generated at Sun Aug 10 13:46:37 2025 by rpki-client