$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json) Hash identifier: Y9dA/vi7ZahPyUSXhjRRN4K+tSOogE14LayI5E9z0a0= Subject key identifier: 10:D6:E2:3F:F5:99:C5:FF:CD:E5:A6:8D:A2:49:3E:26:DC:B5:9E:5F Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft Manifest number: 1695 Signing time: Fri 08 Aug 2025 16:51:32 +0000 Manifest this update: Fri 08 Aug 2025 16:51:32 +0000 Manifest next update: Fri 15 Aug 2025 16:51:32 +0000 Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: cX+JCJKlgWj1M6hckIvPaSW2TqsBAqOeiTHCXv6lkFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Validity Not Before: Aug 8 16:51:32 2025 GMT Not After : Aug 15 16:51:32 2025 GMT Subject: CN=68962b14-f5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:7f:92:dc:6b:0e:7d:cb:f9:cb:53:f9:b2: 65:24:a7:ee:98:f6:8b:c6:d4:c9:8f:be:32:cc:39: 9f:a8:e7:20:eb:76:93:fe:1f:2f:3b:06:21:e4:a6: 4f:8c:ae:33:df:a6:8e:f6:2a:5a:17:6f:9c:87:92: 97:cf:27:f9:8b:61:53:83:8c:c2:57:bc:30:ae:7a: f1:f5:ce:b3:32:e1:e4:c1:c3:44:56:33:13:4d:59: f4:d8:da:61:1f:0b:bf:45:31:e6:d7:d3:88:5e:2e: d3:a7:e8:d6:4a:9e:6a:33:85:34:ae:26:79:bd:6e: a9:74:d5:77:69:01:1a:a4:42:45:64:82:a1:39:40: b4:29:4b:50:ab:f2:2b:c7:3a:f1:49:ed:48:32:96: c6:65:a4:02:2b:62:24:14:b8:5c:35:b7:29:03:23: 5b:b4:7b:7b:e5:34:cc:df:cb:c5:cb:65:c8:f1:40: b3:85:d7:83:01:9a:a6:28:b3:a4:2c:90:d0:e0:98: fa:9f:40:b5:b5:fe:74:42:ee:88:ea:5f:90:11:2d: ec:b6:fc:91:56:6c:69:4f:94:c5:bc:64:2e:26:94: 16:43:b5:46:54:e8:ad:63:aa:d1:0d:eb:88:c4:37: 60:56:de:08:93:10:0e:52:f5:97:59:cc:9d:00:2d: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D6:E2:3F:F5:99:C5:FF:CD:E5:A6:8D:A2:49:3E:26:DC:B5:9E:5F X509v3 Authority Key Identifier: keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:71:69:e3:87:8e:8d:38:ce:34:a4:16:b0:07:50:c9:4e:7f: 82:46:c2:8f:a9:c3:02:a6:d2:81:38:09:45:9c:6b:be:9f:ed: 51:c7:6d:fd:15:9a:9b:0f:bc:a0:3a:19:a8:7d:b4:26:60:de: ec:0e:f5:76:86:2d:c2:be:65:d2:88:31:bd:cc:d9:9b:a8:b0: 88:e0:58:cd:1b:2b:8f:b4:06:6e:2a:53:f8:aa:5a:86:7d:57: 50:09:6b:86:2a:f3:aa:ec:fc:d7:73:ed:5a:0b:1f:1d:2e:ad: 7d:28:27:2a:a7:1f:26:ac:73:07:d6:1e:02:9f:ad:e3:dc:54: 99:a4:46:47:a0:ea:1f:7d:bf:ce:59:77:97:db:0e:02:94:69: 47:a0:1e:3c:20:c9:c4:58:49:89:c8:52:82:ac:7a:9a:31:b1: a4:b9:90:f3:df:4f:cd:04:3a:80:a4:54:24:3d:ab:c2:fc:7c: 79:1c:cd:26:d4:bc:da:b9:86:12:3c:9d:22:9b:94:68:7f:2c: e1:02:87:8a:02:48:96:bf:59:6c:ee:c5:63:c6:fd:a9:b5:f8: 70:50:03:90:53:11:31:54:b1:90:a6:ac:7c:ba:08:33:d2:17: 47:cc:61:f4:a3:4f:0d:1f:05:64:45:8e:41:70:79:e4:db:13: be:f1:73:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzMzQjExMC8GA1UEBRMoOTQyRTI3RDY1QzQ3QUZCNTk3MEE5QUZFODI4MDlCMzE3 OUQ4QjQ2NjAeFw0yNTA4MDgxNjUxMzJaFw0yNTA4MTUxNjUxMzJaMBgxFjAUBgNV BAMTDTY4OTYyYjE0LWY1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ03+S3GsOfcv5y1P5smUkp+6Y9ovG1MmPvjLMOZ+o5yDrdpP+Hy87BiHkpk+M rjPfpo72KloXb5yHkpfPJ/mLYVODjMJXvDCuevH1zrMy4eTBw0RWMxNNWfTY2mEf C79FMebX04heLtOn6NZKnmozhTSuJnm9bql01XdpARqkQkVkgqE5QLQpS1Cr8ivH OvFJ7UgylsZlpAIrYiQUuFw1tykDI1u0e3vlNMzfy8XLZcjxQLOF14MBmqYos6Qs kNDgmPqfQLW1/nRC7ojqX5ARLey2/JFWbGlPlMW8ZC4mlBZDtUZU6K1jqtEN64jE N2BW3giTEA5S9ZdZzJ0ALfGvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUENbiP/WZ xf/N5aaNokk+Jty1nl8wHwYDVR0jBBgwFoAUlC4n1lxHr7WXCpr+goCbMXnYtGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMzNCL0I0QzlGRTkyMDZG NTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdXWENwci1nb0NiTVhuWXRH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEM0bjFseEhyN1dYQ3ByLWdvQ2JNWG5ZdEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MzNCL0I0QzlGRTkyMDZGNTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdX WENwci1nb0NiTVhuWXRHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACpxaeOHjo04zjSkFrAHUMlOf4JGwo+pwwKm0oE4CUWca76f7VHHbf0V mpsPvKA6Gah9tCZg3uwO9XaGLcK+ZdKIMb3M2ZuosIjgWM0bK4+0Bm4qU/iqWoZ9 V1AJa4Yq86rs/Ndz7VoLHx0urX0oJyqnHyascwfWHgKfrePcVJmkRkeg6h99v85Z d5fbDgKUaUegHjwgycRYSYnIUoKsepoxsaS5kPPfT80EOoCkVCQ9q8L8fHkczSbU vNq5hhI8nSKblGh/LOECh4oCSJa/WWzuxWPG/am1+HBQA5BTETFUsZCmrHy6CDPS F0fMYfSjTw0fBWRFjkFweeTbE77xc+E= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:14 2025 by rpki-client