$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: LXrutaAixDM+ak2OC9b5u9yuECPIkdP/FCzHoVcOlZA= Subject key identifier: 17:B7:5C:05:52:0E:06:41:45:51:11:74:70:B2:16:FB:92:28:D0:7B Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0C84 Signing time: Mon 04 Aug 2025 20:58:01 +0000 Manifest this update: Mon 04 Aug 2025 20:58:00 +0000 Manifest next update: Mon 11 Aug 2025 20:58:00 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: EpUU+3zFhRHymfKFFD6wntxOal8lwqeQ6Bh7h5dekvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Aug 4 20:58:00 2025 GMT Not After : Aug 11 20:58:00 2025 GMT Subject: CN=68911ed8-e683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:10:fd:02:3b:ed:db:81:66:ae:b0:da:e1: ce:01:70:e3:98:d4:fe:b7:dc:ab:b3:14:b7:36:3d: b8:d5:ba:e5:01:bf:71:d3:b9:9c:32:70:d2:70:f6: 24:94:15:2c:4c:a0:72:2a:26:88:ea:3f:df:57:e4: dd:8b:8f:ce:be:60:9e:cf:ad:5d:bd:59:1f:d6:5b: 16:a2:0a:71:be:57:dd:f2:8f:33:19:45:88:db:c8: 45:25:24:17:1f:27:98:15:25:7d:dc:7f:2e:67:52: ab:45:89:16:24:26:47:25:4f:d4:b6:57:e5:9c:6d: d4:a0:74:69:82:fc:e9:d2:7f:a2:3e:59:17:a4:73: 8e:3d:4f:20:f0:20:22:ae:ef:97:0a:30:e4:f9:ea: 72:3a:e2:c2:5c:01:18:7d:58:e6:20:b3:df:b1:71: db:24:7e:d4:4e:5e:07:1b:4f:ac:4d:fc:ca:53:a7: e6:a4:6f:e0:51:88:33:0c:a6:d8:41:12:fc:38:1e: 2b:f7:9f:e5:44:cf:e3:44:3e:56:89:b1:1b:a7:69: 0c:b9:bb:b3:25:d4:ca:9c:80:9e:26:6e:0c:61:18: 04:0d:39:5f:bf:01:ff:ed:53:6e:47:61:25:e8:be: ab:aa:16:2c:5f:59:2d:d7:e7:6f:e6:f4:50:25:2f: a8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B7:5C:05:52:0E:06:41:45:51:11:74:70:B2:16:FB:92:28:D0:7B X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:9a:e6:d7:aa:42:67:34:0f:6c:47:a1:f0:00:2b:6a:2d:74: bf:d4:8a:48:78:2d:45:c2:b3:f1:db:56:63:20:46:79:a1:87: 96:4f:e6:38:08:d9:1f:8e:01:66:fd:74:8c:c5:0f:e6:a9:5e: 22:00:56:70:dc:93:00:c2:ec:a0:72:6d:66:75:8c:d4:01:41: 33:6d:b4:ee:74:79:3b:28:89:3f:a3:66:d1:e4:ff:de:51:31: 74:16:ca:71:2e:6c:8c:f7:49:0a:dd:0f:23:44:26:4a:4a:3d: 0d:24:2e:ab:ab:40:c4:92:c1:b9:92:4a:88:5b:ec:24:55:29: 9e:31:f1:e5:64:0d:7d:2f:e4:d6:8b:58:db:e5:df:d5:ba:1d: 43:fa:da:ea:83:4d:84:e2:c5:d3:e1:9f:47:8a:9c:df:8f:0c: 40:3f:3c:cb:e6:47:b4:c8:c9:db:9a:cb:f5:c2:d1:10:a2:8d: 5f:3c:51:c9:ac:d2:dd:b8:cb:37:0e:d1:88:61:25:96:a1:01: df:0d:7c:43:cb:07:85:1e:ca:64:2f:b7:0d:4f:a1:22:7b:fd: 22:a4:5e:0f:29:e1:d0:e0:fa:8c:9e:6d:a4:76:c9:84:a2:c2: ad:23:d3:6c:5a:6d:c9:b4:00:75:50:fc:1b:24:19:6e:a6:60: a4:ed:6a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjUwODA0MjA1ODAwWhcNMjUwODExMjA1ODAwWjAYMRYwFAYD VQQDEw02ODkxMWVkOC1lNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6MQ/QI77duBZq6w2uHOAXDjmNT+t9yrsxS3Nj241brlAb9x07mcMnDScPYk lBUsTKByKiaI6j/fV+Tdi4/OvmCez61dvVkf1lsWogpxvlfd8o8zGUWI28hFJSQX HyeYFSV93H8uZ1KrRYkWJCZHJU/UtlflnG3UoHRpgvzp0n+iPlkXpHOOPU8g8CAi ru+XCjDk+epyOuLCXAEYfVjmILPfsXHbJH7UTl4HG0+sTfzKU6fmpG/gUYgzDKbY QRL8OB4r95/lRM/jRD5WibEbp2kMubuzJdTKnICeJm4MYRgEDTlfvwH/7VNuR2El 6L6rqhYsX1kt1+dv5vRQJS+o8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe3XAVS DgZBRVERdHCyFvuSKNB7MB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVmubXqkJnNA9sR6HwACtqLXS/1IpIeC1FwrPx21ZjIEZ5oYeWT+Y4 CNkfjgFm/XSMxQ/mqV4iAFZw3JMAwuygcm1mdYzUAUEzbbTudHk7KIk/o2bR5P/e UTF0FspxLmyM90kK3Q8jRCZKSj0NJC6rq0DEksG5kkqIW+wkVSmeMfHlZA19L+TW i1jb5d/Vuh1D+trqg02E4sXT4Z9HipzfjwxAPzzL5ke0yMnbmsv1wtEQoo1fPFHJ rNLduMs3DtGIYSWWoQHfDXxDyweFHspkL7cNT6Eie/0ipF4PKeHQ4PqMnm2kdsmE osKtI9NsWm3JtAB1UPwbJBlupmCk7WrY -----END CERTIFICATE-----Generated at Wed Aug 6 05:20:54 2025 by rpki-client