$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: v/SYHboLbuWmAgsW5IDiiP4pLvnEIs9J/19PSJxtjXM= Subject key identifier: 9E:06:52:AE:59:D8:95:35:64:E9:95:12:73:8D:4B:B3:E8:F8:1B:C0 Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 028F Signing time: Mon 11 Aug 2025 03:21:24 +0000 Manifest this update: Mon 11 Aug 2025 03:21:24 +0000 Manifest next update: Mon 18 Aug 2025 03:21:24 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: sdTGmFOA5DpHxbK5ajoY08GU2++4UqnaJSs7SHiI830=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Aug 11 03:21:24 2025 GMT Not After : Aug 18 03:21:24 2025 GMT Subject: CN=689961b4-e84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:42:6f:5c:fc:66:6b:7c:02:b5:9d:8c:14: 13:f6:88:9f:23:d8:64:e9:58:27:0c:78:23:8d:a9: cb:cc:2f:bd:99:18:a6:6f:61:5a:4b:39:3b:b9:26: bc:a5:57:48:8b:a8:5f:b3:33:27:84:34:80:dc:1c: d5:2f:b3:f5:24:b2:04:9b:87:42:f7:82:51:47:ba: 55:c7:df:32:bb:06:96:9e:dd:fc:fd:af:da:81:65: 09:2f:16:f1:72:4f:96:42:ae:79:e8:5b:3e:9d:fa: 5a:e0:0c:d4:f8:20:fe:6e:86:b9:05:5c:81:4e:33: c9:0e:81:9c:17:2b:ba:c5:f9:11:7e:be:02:f9:00: 6c:d9:60:16:ff:7d:40:9e:ca:f2:e9:e7:c4:08:92: 71:f2:43:81:e6:83:5a:12:4b:1f:d5:00:b2:1a:ab: 02:7b:ae:d2:7f:4f:f5:c9:e7:12:0e:98:79:d7:2c: 1e:75:c7:d2:92:5c:3f:44:88:ec:84:e2:fb:aa:64: 64:36:29:43:54:53:ed:44:93:6a:cf:a2:8b:67:39: 17:e1:39:12:ca:76:53:cd:06:64:24:b2:e5:3d:57: 7f:fd:74:a5:61:11:09:50:3a:bc:55:52:9c:93:c4: c6:8b:06:d7:61:37:86:f1:f3:af:59:52:6a:12:8e: 23:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:52:AE:59:D8:95:35:64:E9:95:12:73:8D:4B:B3:E8:F8:1B:C0 X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:c6:d2:90:29:2f:64:e1:5f:20:3e:db:00:f7:25:58:fb: 5d:f0:cd:fc:69:a0:5b:9e:7f:ec:6b:f9:96:b4:06:ac:0e:94: bb:ca:f1:a7:93:90:36:82:7e:aa:4c:53:05:8d:a7:81:f9:ee: 29:cf:e9:69:2e:f2:8f:ab:3b:7c:b2:db:81:bc:b4:04:3c:86: 37:b2:cb:75:e5:3a:9b:8d:86:5b:ea:22:45:d4:0a:20:21:7c: cc:09:32:ce:91:7b:d5:0d:b8:47:5f:64:0b:d0:fd:16:93:a9: fc:21:f4:2b:5d:e7:a6:7a:41:e9:06:ec:ee:4a:af:5d:09:39: ef:63:27:b7:9c:16:18:39:7d:df:ba:59:c8:9f:16:7e:d5:6c: 87:a9:44:1d:fb:6c:a1:6e:86:8d:f2:7f:d8:d8:3c:df:0c:77: 8f:15:2b:9b:2d:00:9f:39:88:bd:20:ef:7d:21:f8:b3:c2:af: b8:5e:2f:6c:56:fc:d0:ba:08:1a:09:0d:fe:51:6e:bc:2a:95: cf:4a:c9:03:4c:cc:0b:6c:3e:19:93:6a:b7:69:8f:dc:34:32: 11:19:2c:74:38:c6:83:7e:89:cd:63:cd:02:0d:0d:d5:2d:bf: 71:d5:cb:71:5c:ee:b8:1f:a4:01:c1:7c:be:e9:29:d2:f3:80: 67:ac:2e:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUwODExMDMyMTI0WhcNMjUwODE4MDMyMTI0WjAYMRYwFAYD VQQDEw02ODk5NjFiNC1lODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhdCb1z8Zmt8ArWdjBQT9oifI9hk6VgnDHgjjanLzC+9mRimb2FaSzk7uSa8 pVdIi6hfszMnhDSA3BzVL7P1JLIEm4dC94JRR7pVx98yuwaWnt38/a/agWUJLxbx ck+WQq556Fs+nfpa4AzU+CD+boa5BVyBTjPJDoGcFyu6xfkRfr4C+QBs2WAW/31A nsry6efECJJx8kOB5oNaEksf1QCyGqsCe67Sf0/1yecSDph51ywedcfSklw/RIjs hOL7qmRkNilDVFPtRJNqz6KLZzkX4TkSynZTzQZkJLLlPVd//XSlYREJUDq8VVKc k8TGiwbXYTeG8fOvWVJqEo4jIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4GUq5Z 2JU1ZOmVEnONS7Po+BvAMB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVrMbSkCkvZOFfID7bAPclWPtd8M38aaBbnn/sa/mWtAasDpS7yvGn k5A2gn6qTFMFjaeB+e4pz+lpLvKPqzt8stuBvLQEPIY3sst15TqbjYZb6iJF1Aog IXzMCTLOkXvVDbhHX2QL0P0Wk6n8IfQrXeemekHpBuzuSq9dCTnvYye3nBYYOX3f ulnInxZ+1WyHqUQd+2yhboaN8n/Y2DzfDHePFSubLQCfOYi9IO99Ifizwq+4Xi9s VvzQuggaCQ3+UW68KpXPSskDTMwLbD4Zk2q3aY/cNDIRGSx0OMaDfonNY80CDQ3V Lb9x1ctxXO64H6QBwXy+6SnS84BnrC5i -----END CERTIFICATE-----Generated at Wed Aug 13 02:19:01 2025 by rpki-client