$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: TH7ZRi7n8Lkz+n4AJrNTQWjirY59BYAXKYTp8m1UxHw= Subject key identifier: 37:95:C5:56:DC:52:3E:10:97:BF:FD:9E:52:D4:A1:A9:D5:E1:91:49 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 27 Signing time: Sat 09 Aug 2025 08:18:32 +0000 Manifest this update: Sat 09 Aug 2025 08:18:32 +0000 Manifest next update: Sat 16 Aug 2025 08:18:31 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: hWp04MUCSB+yINhYd7dQBFh/z8bHOYMqTzaVPuU9zIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Aug 9 08:18:32 2025 GMT Not After : Aug 16 08:18:31 2025 GMT Subject: CN=68970458-7afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:c3:7b:34:c9:1f:e9:cb:dd:b8:41:4c:fe: 39:65:fd:1d:09:5d:c3:0e:da:3c:ef:55:f6:ef:5e: 1d:0e:cc:5c:c0:96:6b:f2:95:d4:6c:8e:9c:02:ab: 73:3e:51:7a:18:15:cf:be:71:45:f7:22:e5:56:7f: cb:a0:5b:61:82:f4:cc:ba:07:c4:5a:58:c6:73:4f: 81:c3:70:a6:d3:17:4c:5c:9d:78:e1:ea:5d:6b:7d: c5:6d:28:a6:90:62:aa:de:d8:1a:af:39:51:28:58: 92:d4:76:a8:54:d9:7b:e1:6d:d3:84:c8:36:bf:de: e8:2d:e9:0e:c7:c2:46:f5:59:24:76:24:6d:71:b0: b4:3a:4e:e8:94:86:e7:b4:1c:25:ed:af:56:47:47: fd:ed:71:e7:27:ac:6d:0b:53:5e:25:e4:98:bd:26: 2f:e0:85:ef:20:6a:7a:41:28:72:06:1e:b0:11:b5: 80:70:0b:1d:10:bd:ed:e5:24:01:dd:c9:4b:4a:6d: dd:8d:43:ba:eb:46:68:fd:f6:07:c7:4e:73:71:a8: a7:97:30:2d:be:1a:0c:5d:d4:39:cc:44:5d:b1:82: 3b:e1:36:62:c0:9d:54:d3:e5:0e:49:6b:33:6a:ef: 17:dd:0f:12:ba:d0:fc:c1:83:f9:87:83:1f:68:0e: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:C5:56:DC:52:3E:10:97:BF:FD:9E:52:D4:A1:A9:D5:E1:91:49 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:db:94:6d:f0:15:39:f5:1a:be:a1:58:99:b0:87:52:3f: 18:54:a2:7f:77:58:48:12:5c:38:aa:77:dc:1b:a1:c5:f4:74: 33:2f:34:e2:1a:e3:d7:82:02:1c:25:9d:d5:55:db:f6:04:e0: aa:de:ae:fb:1a:09:75:8a:86:c8:78:ab:b6:d3:83:0f:b9:21: 50:d1:16:ab:41:e3:4a:c2:f5:96:53:4a:b3:db:5c:39:2d:fc: 8d:ab:39:fe:cf:b7:a7:76:cb:8b:b7:09:3f:c3:43:04:86:a9: 7e:94:e9:41:5b:a3:17:89:2c:5f:ef:21:c3:ac:0b:7d:6c:ff: d0:52:d7:dd:59:83:fd:76:bf:e3:8f:3c:f5:b1:7d:08:d2:90: bd:90:24:5d:84:af:26:0f:bc:60:35:f5:2e:50:fa:a8:91:00: 4c:36:8d:30:bc:7a:9d:5a:a1:be:d2:18:02:60:03:58:b1:07: ac:9f:73:1e:68:a6:17:2b:ad:f4:dc:aa:35:94:ac:7f:d9:82: 47:2c:46:4c:a0:81:45:d4:b5:77:b8:f1:96:8f:50:93:47:d0: 64:b1:6d:77:fb:0d:6f:a3:bf:e2:2b:5b:6a:8a:19:e8:19:42: e3:97:66:93:90:52:75:99:88:8c:2a:ec:51:8a:b9:af:4b:8a: 51:3d:70:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTA4MDkwODE4MzJaFw0yNTA4MTYwODE4MzFaMBgxFjAUBgNV BAMTDTY4OTcwNDU4LTdhZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPL8N7NMkf6cvduEFM/jll/R0JXcMO2jzvVfbvXh0OzFzAlmvyldRsjpwCq3M+ UXoYFc++cUX3IuVWf8ugW2GC9My6B8RaWMZzT4HDcKbTF0xcnXjh6l1rfcVtKKaQ Yqre2BqvOVEoWJLUdqhU2XvhbdOEyDa/3ugt6Q7Hwkb1WSR2JG1xsLQ6TuiUhue0 HCXtr1ZHR/3tcecnrG0LU14l5Ji9Ji/ghe8ganpBKHIGHrARtYBwCx0Qve3lJAHd yUtKbd2NQ7rrRmj99gfHTnNxqKeXMC2+Ggxd1DnMRF2xgjvhNmLAnVTT5Q5JazNq 7xfdDxK60PzBg/mHgx9oDiMHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN5XFVtxS PhCXv/2eUtShqdXhkUkwHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/u25Rt8BU59Rq+oViZsIdSPxhUon93WEgSXDiqd9wbocX0dDMvNOIa 49eCAhwlndVV2/YE4KrervsaCXWKhsh4q7bTgw+5IVDRFqtB40rC9ZZTSrPbXDkt /I2rOf7Pt6d2y4u3CT/DQwSGqX6U6UFboxeJLF/vIcOsC31s/9BS191Zg/12v+OP PPWxfQjSkL2QJF2EryYPvGA19S5Q+qiRAEw2jTC8ep1aob7SGAJgA1ixB6yfcx5o phcrrfTcqjWUrH/ZgkcsRkyggUXUtXe48ZaPUJNH0GSxbXf7DW+jv+IrW2qKGegZ QuOXZpOQUnWZiIwq7FGKua9LilE9cAk= -----END CERTIFICATE-----Generated at Sun Aug 10 13:47:52 2025 by rpki-client