$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: L3CbNN9Z4mLamd4IFM5+2UHnYOV0a9dHSbpDysN5Uck= Subject key identifier: 99:BC:75:5B:4D:E4:F6:DA:92:40:4D:C4:2B:7B:4F:59:CA:5F:98:AE Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 1970 Signing time: Sun 10 Aug 2025 17:20:28 +0000 Manifest this update: Sun 10 Aug 2025 17:20:27 +0000 Manifest next update: Sun 17 Aug 2025 17:20:27 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: JXXy2H67qK2Zv8FCJDIow4CX+imO0nR9L3cuGikKVq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4277 (0x10b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Aug 10 17:20:27 2025 GMT Not After : Aug 17 17:20:27 2025 GMT Subject: CN=6898d4db-3a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:55:af:d0:b4:b1:63:38:4e:80:06:3c:96: f9:e1:3a:c3:c4:62:3b:bc:87:b0:44:74:9d:b7:d4: 12:2e:bb:9f:13:51:2b:03:23:5a:0b:21:f2:c6:da: 28:39:9a:f0:1c:c1:9b:e6:46:4b:79:2d:93:2e:25: 9f:aa:f7:cb:7c:a1:6d:3a:39:06:d3:72:2b:7c:47: ca:3a:14:69:34:21:6a:07:b7:0c:3b:6e:b6:76:ab: 9a:a9:53:61:a9:18:c9:23:f0:80:42:b3:78:f7:2e: 85:dc:3c:04:62:08:00:36:d7:c1:e4:1f:bc:4a:7e: a8:30:a8:6f:31:fe:20:53:5d:08:4d:62:c7:f0:9e: 53:b6:91:f5:3d:02:f7:51:e3:d0:c6:35:b6:ac:9b: 43:ac:58:2e:f6:60:97:19:7f:c3:3c:31:42:f3:53: 4b:ee:87:e0:41:c6:17:0e:89:6f:38:24:9d:9c:2f: c7:a3:20:a1:07:28:b3:9f:fc:4f:bc:bf:46:dd:44: ec:b5:01:72:e6:71:8c:40:dc:22:c5:e5:cc:f1:59: f1:b4:bc:32:b3:5a:18:d3:e4:d2:59:b6:ec:f0:f1: 9e:31:da:97:d3:91:0b:4f:8a:73:34:c6:a2:03:84: 9e:73:7c:03:1d:b8:40:fe:0a:3c:b1:93:af:a3:bd: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BC:75:5B:4D:E4:F6:DA:92:40:4D:C4:2B:7B:4F:59:CA:5F:98:AE X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:70:6b:7f:39:f8:07:06:fe:1f:60:d9:4f:73:55:6d:2e:8e: 38:20:ec:6b:91:c2:c6:48:83:fe:d0:3b:c6:cf:c6:2b:94:0c: c3:2f:4c:0c:6e:16:a4:c9:e6:b7:ee:ae:a1:b3:a4:c4:86:28: 86:f5:cf:c5:76:82:c5:e5:8f:2f:9d:c3:60:06:0b:33:f0:4a: 9f:17:3f:25:cb:93:b9:bb:31:90:0c:43:73:e8:e8:c1:d0:d1: 7a:ed:70:c3:92:03:00:bd:eb:6a:10:5b:15:d0:ff:5f:3e:dd: 29:83:44:f5:2d:1d:24:93:9f:2b:c0:20:81:ed:c1:74:81:0d: 6d:34:75:5f:1a:46:65:1f:c3:75:37:82:97:7d:7d:d6:83:1c: 0c:90:10:6d:81:b4:40:06:14:46:9a:81:40:9b:5b:e2:69:48: 3b:1a:db:bd:6a:34:be:ef:ff:92:0e:76:14:1e:ac:f1:7e:12: ff:c8:71:7c:7d:a8:58:ac:86:6b:48:31:4a:83:7a:c5:3d:b2: 72:36:c6:e6:e9:7c:2d:dd:6d:47:55:5b:03:4f:c8:96:53:e3: 87:d9:d2:d0:f7:b1:e6:60:eb:e8:23:40:26:2f:19:51:6f:ed: 85:10:fc:3e:0f:c3:06:ba:04:91:63:2e:93:45:29:4d:d9:0c: dd:50:b5:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUwODEwMTcyMDI3WhcNMjUwODE3MTcyMDI3WjAYMRYwFAYD VQQDEw02ODk4ZDRkYi0zYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuJVr9C0sWM4ToAGPJb54TrDxGI7vIewRHSdt9QSLrufE1ErAyNaCyHyxtoo OZrwHMGb5kZLeS2TLiWfqvfLfKFtOjkG03IrfEfKOhRpNCFqB7cMO262dquaqVNh qRjJI/CAQrN49y6F3DwEYggANtfB5B+8Sn6oMKhvMf4gU10ITWLH8J5TtpH1PQL3 UePQxjW2rJtDrFgu9mCXGX/DPDFC81NL7ofgQcYXDolvOCSdnC/HoyChByizn/xP vL9G3UTstQFy5nGMQNwixeXM8VnxtLwys1oY0+TSWbbs8PGeMdqX05ELT4pzNMai A4Sec3wDHbhA/go8sZOvo70jmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJm8dVtN 5PbakkBNxCt7T1nKX5iuMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKcGt/OfgHBv4fYNlPc1VtLo44IOxrkcLGSIP+0DvGz8YrlAzDL0wM bhakyea37q6hs6TEhiiG9c/FdoLF5Y8vncNgBgsz8EqfFz8ly5O5uzGQDENz6OjB 0NF67XDDkgMAvetqEFsV0P9fPt0pg0T1LR0kk58rwCCB7cF0gQ1tNHVfGkZlH8N1 N4KXfX3WgxwMkBBtgbRABhRGmoFAm1viaUg7Gtu9ajS+7/+SDnYUHqzxfhL/yHF8 fahYrIZrSDFKg3rFPbJyNsbm6Xwt3W1HVVsDT8iWU+OH2dLQ97HmYOvoI0AmLxlR b+2FEPw+D8MGugSRYy6TRSlN2QzdULUX -----END CERTIFICATE-----Generated at Sun Aug 10 18:54:35 2025 by rpki-client