$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: lKlw6qvJYcvXmwCySvN9nFsBG109hd+HnixrTp42/us= Subject key identifier: 1F:27:05:A8:77:B9:AD:AD:21:F5:36:E9:7B:9F:6B:C9:6D:8C:ED:A8 Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 016A Signing time: Mon 04 Aug 2025 21:55:10 +0000 Manifest this update: Mon 04 Aug 2025 21:55:09 +0000 Manifest next update: Mon 11 Aug 2025 21:55:09 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: dZooUZjr8P5E3kxz2k4N0SMVFhJOahUZFvtI3XfLAjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: Aug 4 21:55:09 2025 GMT Not After : Aug 11 21:55:09 2025 GMT Subject: CN=68912c3d-482a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:0b:78:9a:39:ce:5e:c4:4a:67:02:08:5a: 3e:75:45:47:55:e5:77:23:8b:4f:af:3e:80:7c:f6: c3:96:5a:e6:1a:56:79:80:e7:7d:1e:58:79:05:bc: d1:a7:e5:3e:f0:e6:15:dc:ac:65:d5:3a:b9:e0:ee: 17:9a:3c:fd:bf:d9:a0:ca:bb:4e:26:94:28:43:3c: cb:58:71:5b:5a:69:da:4c:10:3a:fa:87:a3:78:ff: 53:3e:44:54:0f:24:e2:06:14:27:96:c8:53:17:e4: 8c:70:37:95:35:97:6e:0f:27:9b:15:8c:4d:a7:e0: ef:13:30:62:d4:8d:44:d9:a6:91:74:d1:ba:8f:05: cb:92:ce:cd:7b:76:8d:e0:90:1b:e3:5a:93:7b:d0: 1d:83:49:38:26:c3:52:10:29:b2:73:02:07:7a:33: 90:9b:0d:f1:b8:dc:85:1f:09:68:02:98:60:52:86: 62:de:5a:cc:32:fa:25:67:18:ca:a1:1e:66:f6:44: d6:f0:98:12:d3:8d:ae:0f:1b:17:e7:f2:23:98:54: 2e:73:eb:e8:f3:65:18:db:b0:cc:43:92:62:ef:ec: ef:0b:a8:ea:77:4d:c9:d8:c6:3e:d5:78:56:00:46: 48:24:da:99:4f:45:b9:a2:3e:24:50:ba:d7:7a:92: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:05:A8:77:B9:AD:AD:21:F5:36:E9:7B:9F:6B:C9:6D:8C:ED:A8 X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:73:41:d5:10:98:92:0b:24:f1:eb:05:96:de:f4:b5:8b:85: e0:ab:d5:a4:a7:a9:05:1e:7b:e0:32:76:10:0f:de:bb:bb:c9: 75:7e:a8:95:f7:67:d2:19:8e:c2:fe:28:cb:42:a2:f4:f3:69: db:90:0e:e9:fd:e1:fb:a4:a2:64:c3:7f:98:41:90:65:95:d9: 2a:39:44:2c:7a:92:28:98:5e:ba:cb:dc:13:cf:b0:0f:cb:ee: bd:ac:15:9f:87:42:8d:ba:a8:be:f6:95:5a:fb:50:5a:1e:e0: b1:00:38:dd:45:0e:89:47:6c:cb:a6:33:05:13:de:04:11:17: 4f:4c:89:c0:96:8d:1c:f1:c3:1f:e7:0e:b8:b7:7f:b5:06:8f: f3:60:c4:23:bc:27:cb:36:1d:27:3c:4d:a7:16:af:d4:e3:63: 40:89:0b:89:70:d4:d1:77:d3:4d:98:ee:d0:44:01:71:9a:3e: dc:64:03:96:97:e7:79:7d:cd:f6:de:cd:f5:37:5b:6e:25:f5: 65:92:37:9f:02:62:c9:da:68:27:a6:28:20:5e:e1:91:97:a2: 92:92:39:ab:ad:97:40:ab:8f:0a:61:f9:fe:6d:68:28:45:21: ad:e8:aa:c8:b9:57:ba:63:d2:09:b4:ed:91:b4:b1:8e:25:02: b5:00:09:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjUwODA0MjE1NTA5WhcNMjUwODExMjE1NTA5WjAYMRYwFAYD VQQDEw02ODkxMmMzZC00ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0MLeJo5zl7ESmcCCFo+dUVHVeV3I4tPrz6AfPbDllrmGlZ5gOd9Hlh5BbzR p+U+8OYV3Kxl1Tq54O4Xmjz9v9mgyrtOJpQoQzzLWHFbWmnaTBA6+oejeP9TPkRU DyTiBhQnlshTF+SMcDeVNZduDyebFYxNp+DvEzBi1I1E2aaRdNG6jwXLks7Ne3aN 4JAb41qTe9Adg0k4JsNSECmycwIHejOQmw3xuNyFHwloAphgUoZi3lrMMvolZxjK oR5m9kTW8JgS042uDxsX5/IjmFQuc+vo82UY27DMQ5Ji7+zvC6jqd03J2MY+1XhW AEZIJNqZT0W5oj4kULrXepJISwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8nBah3 ua2tIfU26Xufa8ltjO2oMB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgc0HVEJiSCyTx6wWW3vS1i4Xgq9Wkp6kFHnvgMnYQD967u8l1fqiV 92fSGY7C/ijLQqL082nbkA7p/eH7pKJkw3+YQZBlldkqOUQsepIomF66y9wTz7AP y+69rBWfh0KNuqi+9pVa+1BaHuCxADjdRQ6JR2zLpjMFE94EERdPTInAlo0c8cMf 5w64t3+1Bo/zYMQjvCfLNh0nPE2nFq/U42NAiQuJcNTRd9NNmO7QRAFxmj7cZAOW l+d5fc323s31N1tuJfVlkjefAmLJ2mgnpiggXuGRl6KSkjmrrZdAq48KYfn+bWgo RSGt6KrIuVe6Y9IJtO2RtLGOJQK1AAnk -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:13 2025 by rpki-client