$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: pExcyIu+vk6C/EIKDfIxnTyDlmDaudNqROJfE98u6rw= Subject key identifier: 95:79:66:05:76:4F:26:D8:95:56:AC:4F:04:15:AD:48:39:C2:8F:18 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 07B3 Signing time: Fri 08 Aug 2025 21:42:16 +0000 Manifest this update: Fri 08 Aug 2025 21:42:16 +0000 Manifest next update: Fri 15 Aug 2025 21:42:16 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: dZe0WrTCuksHdqe+Et+9YBxx9EwEnWD/bcmWZtk++aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Aug 8 21:42:16 2025 GMT Not After : Aug 15 21:42:16 2025 GMT Subject: CN=68966f38-496e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:92:e5:d7:7c:6e:fa:92:cb:8d:e9:0a:38: bd:4a:3a:f5:a2:54:ed:5f:12:1f:f8:2e:56:28:94: a6:c3:49:b4:53:de:af:eb:32:85:9f:c7:ab:28:b9: bc:73:48:4c:f2:4f:8d:6f:3c:c5:cd:2d:45:69:c9: 9d:22:b8:93:2e:8a:c2:a2:fb:83:da:c2:99:52:69: cd:24:3d:38:ff:fb:b8:e3:5e:4c:d0:0d:b4:d9:13: 08:09:1d:05:c9:07:0a:ed:f6:22:71:c2:74:96:bc: 95:55:5a:ef:70:bf:17:ef:12:81:83:62:74:68:db: 86:9a:e5:ae:ed:6a:81:59:5d:7c:44:f5:f3:3f:8f: 7c:48:68:c6:b3:1a:65:f4:40:4b:18:3d:36:fb:76: 6e:dc:0c:c7:a9:60:81:d0:fa:01:44:9a:26:05:02: b0:73:0f:03:54:d3:57:67:4e:8b:54:d6:a9:5c:05: 19:94:7a:ec:c5:47:1b:b9:c4:ed:45:cd:e0:12:c8: cb:f6:58:87:81:b4:8b:47:c4:6e:64:e9:24:ae:b5: 7a:24:9d:1b:03:ea:b0:f5:e8:90:ea:52:df:87:36: 06:8f:79:d3:45:f2:d3:cd:4b:c5:18:a7:e7:0a:12: 38:5c:cb:d1:10:02:be:0a:01:fc:0c:5d:e5:a3:2d: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:66:05:76:4F:26:D8:95:56:AC:4F:04:15:AD:48:39:C2:8F:18 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:64:f3:c7:e6:34:b7:7e:80:a8:66:04:8a:db:bf:3d:82:eb: 28:69:c9:24:f3:ca:71:4d:05:07:16:07:63:04:60:ac:ef:31: ef:54:20:53:ab:b9:6f:0c:ba:c5:7e:5a:f9:6e:55:0a:25:13: 5d:b5:07:26:98:30:01:ff:3f:93:10:46:f5:44:d4:6f:89:a2: a4:8a:2e:69:0c:e2:c2:b8:1a:a0:ab:71:e2:94:87:88:36:e9: d4:9f:2a:6e:3c:79:28:a9:8d:d1:7a:a3:dc:05:87:36:cc:f3: d3:18:0e:86:d2:39:ff:bb:ba:80:c6:44:8a:b7:27:f7:3b:74: b5:92:eb:79:58:66:be:55:db:fe:46:24:f0:8e:ea:af:94:59: a8:e0:14:dd:99:64:87:20:d5:ff:64:63:91:3b:44:6e:8d:1f: e4:40:67:6f:79:9b:77:a2:3d:5f:54:01:77:ef:d9:3a:b1:7c: c8:14:2b:55:03:f7:f0:66:dd:97:ed:85:27:e3:bd:04:2d:c1: 1c:62:e9:21:0b:3a:82:cc:bd:43:de:73:27:11:92:2a:11:19: 52:ec:b7:3a:d0:9f:14:4a:ec:c6:0e:b5:b1:e1:f6:03:72:9a: 62:20:6b:69:8c:02:15:0d:4d:7a:36:21:d4:ab:d4:19:a5:f7: 0a:ac:e6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUwODA4MjE0MjE2WhcNMjUwODE1MjE0MjE2WjAYMRYwFAYD VQQDEw02ODk2NmYzOC00OTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3t6S5dd8bvqSy43pCji9Sjr1olTtXxIf+C5WKJSmw0m0U96v6zKFn8erKLm8 c0hM8k+NbzzFzS1FacmdIriTLorCovuD2sKZUmnNJD04//u4415M0A202RMICR0F yQcK7fYiccJ0lryVVVrvcL8X7xKBg2J0aNuGmuWu7WqBWV18RPXzP498SGjGsxpl 9EBLGD02+3Zu3AzHqWCB0PoBRJomBQKwcw8DVNNXZ06LVNapXAUZlHrsxUcbucTt Rc3gEsjL9liHgbSLR8RuZOkkrrV6JJ0bA+qw9eiQ6lLfhzYGj3nTRfLTzUvFGKfn ChI4XMvREAK+CgH8DF3loy2IVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV5ZgV2 TybYlVasTwQVrUg5wo8YMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ZPPH5jS3foCoZgSK2789gusoackk88pxTQUHFgdjBGCs7zHvVCBT q7lvDLrFflr5blUKJRNdtQcmmDAB/z+TEEb1RNRviaKkii5pDOLCuBqgq3HilIeI NunUnypuPHkoqY3ReqPcBYc2zPPTGA6G0jn/u7qAxkSKtyf3O3S1kut5WGa+Vdv+ RiTwjuqvlFmo4BTdmWSHINX/ZGORO0RujR/kQGdveZt3oj1fVAF379k6sXzIFCtV A/fwZt2X7YUn470ELcEcYukhCzqCzL1D3nMnEZIqERlS7Lc60J8USuzGDrWx4fYD cppiIGtpjAIVDU16NiHUq9QZpfcKrOb9 -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:01 2025 by rpki-client