$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.mft (raw, json) Hash identifier: zk9ojOI6buofPrHfHHw8DLyZudX1XwYYi9xj+NjzVhc= Subject key identifier: 0F:CE:A5:71:88:22:45:AE:8E:A7:33:3D:5E:2D:60:38:E6:64:79:6E Authority key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9 Certificate issuer: /CN=A91D0F0F/serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft Manifest number: 0F Signing time: Tue 05 Aug 2025 08:44:56 +0000 Manifest this update: Tue 05 Aug 2025 08:44:55 +0000 Manifest next update: Tue 12 Aug 2025 08:44:55 +0000 Files and hashes: 1: 60yRrrkBmKp9PHgiHY4Ytwdd77k.crl (hash: LQrpdA7dBayURt+v8gMJQc+OBPthJ4rySz02RyMk2fY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9 Validity Not Before: Aug 5 08:44:55 2025 GMT Not After : Aug 12 08:44:55 2025 GMT Subject: CN=6891c488-9310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:9c:c1:49:68:ad:af:a0:4a:65:b1:df:f6: 79:09:b9:9c:08:b2:56:b9:bf:bb:57:58:84:a8:0d: 39:4c:c4:a7:fc:2a:a8:ed:41:47:dd:4b:70:4e:a0: a9:b8:67:09:57:cb:dd:e2:e7:26:a8:8e:db:4c:c6: a4:bd:fb:15:86:cc:09:3f:45:c8:04:9a:b4:f7:85: ff:4c:84:3a:54:52:d8:5e:48:38:fb:07:e2:b6:c3: 25:62:6e:87:ba:0d:a1:84:7f:fa:84:06:1a:55:2d: 7d:75:80:1a:da:df:ee:ef:43:58:81:2e:62:ca:8d: 23:2a:0d:9d:b8:a5:a4:3d:80:3e:a6:8e:68:6d:a2: ef:0e:c9:45:07:e4:92:a3:20:62:e6:89:9b:91:1e: 6b:02:91:a0:cd:98:8b:19:78:21:6a:59:92:a4:5e: 0d:4a:fa:94:b8:c4:16:d0:05:35:65:79:b9:aa:e8: db:10:11:38:a8:19:99:6d:e9:81:da:6d:8c:71:9e: 89:64:0b:8b:f1:c4:98:9a:57:cb:98:70:11:0d:42: 0f:43:95:1d:e0:13:4d:3f:4e:d8:a6:fb:ee:e6:5c: 60:07:0b:e7:97:a9:50:b9:6c:e1:7e:1f:c8:a6:63: bf:f9:9d:e7:1d:3a:1b:3e:64:bb:dc:e6:dc:6d:6e: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:A5:71:88:22:45:AE:8E:A7:33:3D:5E:2D:60:38:E6:64:79:6E X509v3 Authority Key Identifier: keyid:EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:37:03:2c:e3:8e:a7:31:3a:b6:1a:d3:fb:88:fe:94:58:e2: 59:7a:b9:dd:c6:aa:c4:ef:5e:eb:15:fd:f7:5e:98:54:c6:5a: d0:46:cf:c3:f2:8d:74:61:55:46:39:fe:20:20:56:51:e7:00: 3f:57:f9:02:98:5b:b9:09:9a:96:b9:c1:0e:d4:bd:8a:e2:0a: 1b:2e:34:44:73:8d:a6:c8:cf:0f:34:70:27:b8:07:7d:a3:66: 4d:20:a8:c5:42:df:15:c0:29:66:45:b0:b8:a3:ca:72:1f:d2: 6a:8c:35:b3:1d:ef:72:66:4e:e9:ef:d7:b5:45:b2:d5:79:60: 2a:88:a0:aa:bf:35:f2:d5:4d:a1:1f:4e:13:9b:7a:c3:25:1b: fd:07:3d:15:39:37:8d:56:a7:03:cc:cd:19:de:f4:59:b6:a8: b0:f3:32:04:2e:33:4c:b3:08:65:d8:98:f1:8b:65:9a:9d:85: 3f:fb:f8:32:e9:0c:cc:29:c5:45:be:d3:aa:19:07:d1:0b:5b: 7e:d8:06:61:08:b1:29:05:a9:84:b1:64:99:d8:a8:9f:c4:69: b7:39:15:0d:32:1c:db:59:71:5d:10:68:83:e6:87:cc:56:bc: b9:56:05:f3:61:53:a8:eb:2d:0c:ca:bb:79:16:a6:1e:a0:1e: fb:20:cf:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEYwRjExMC8GA1UEBRMoRUI0QzkxQUVCOTAxOThBQTdEM0M3ODIyMUQ4RTE4Qjcw NzVERUZCOTAeFw0yNTA4MDUwODQ0NTVaFw0yNTA4MTIwODQ0NTVaMBgxFjAUBgNV BAMTDTY4OTFjNDg4LTkzMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGVZzBSWitr6BKZbHf9nkJuZwIsla5v7tXWISoDTlMxKf8KqjtQUfdS3BOoKm4 ZwlXy93i5yaojttMxqS9+xWGzAk/RcgEmrT3hf9MhDpUUtheSDj7B+K2wyViboe6 DaGEf/qEBhpVLX11gBra3+7vQ1iBLmLKjSMqDZ24paQ9gD6mjmhtou8OyUUH5JKj IGLmiZuRHmsCkaDNmIsZeCFqWZKkXg1K+pS4xBbQBTVlebmq6NsQETioGZlt6YHa bYxxnolkC4vxxJiaV8uYcBENQg9DlR3gE00/Ttim++7mXGAHC+eXqVC5bOF+H8im Y7/5necdOhs+ZLvc5txtbnyvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD86lcYgi Ra6OpzM9Xi1gOOZkeW4wHwYDVR0jBBgwFoAU60yRrrkBmKp9PHgiHY4Ytwdd77kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRjBGLzUyREZGQzlFNURF NzExRjBBODY3OTE0RUM0RjlBRTAyLzYweVJycmtCbUtwOVBIZ2lIWTRZdHdkZDc3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNjB5UnJya0JtS3A5UEhnaUhZNFl0d2RkNzdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RjBGLzUyREZGQzlFNURFNzExRjBBODY3OTE0RUM0RjlBRTAyLzYweVJycmtCbUtw OVBIZ2lIWTRZdHdkZDc3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKA3AyzjjqcxOrYa0/uI/pRY4ll6ud3GqsTvXusV/fdemFTGWtBGz8Py jXRhVUY5/iAgVlHnAD9X+QKYW7kJmpa5wQ7UvYriChsuNERzjabIzw80cCe4B32j Zk0gqMVC3xXAKWZFsLijynIf0mqMNbMd73JmTunv17VFstV5YCqIoKq/NfLVTaEf ThObesMlG/0HPRU5N41WpwPMzRne9Fm2qLDzMgQuM0yzCGXYmPGLZZqdhT/7+DLp DMwpxUW+06oZB9ELW37YBmEIsSkFqYSxZJnYqJ/Eabc5FQ0yHNtZcV0QaIPmh8xW vLlWBfNhU6jrLQzKu3kWph6gHvsgz3E= -----END CERTIFICATE-----Generated at Wed Aug 6 10:08:35 2025 by rpki-client