$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: f3QC1S6GF+/w9T2V/M2Gc8pez/aTwdVpg1yBAlGqeTs= Subject key identifier: 12:90:71:02:78:DE:B4:60:7B:8B:23:BA:68:4A:03:49:2C:55:D4:A8 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 47CE Signing time: Sun 10 Aug 2025 14:20:50 +0000 Manifest this update: Sun 10 Aug 2025 14:20:49 +0000 Manifest next update: Sun 17 Aug 2025 14:20:49 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: /v5/R5OP7RhayN+5m1eCcrVBWXFxfw4UHnJEg1Yinzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Aug 10 14:20:49 2025 GMT Not After : Aug 17 14:20:49 2025 GMT Subject: CN=6898aac1-5b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:f0:53:80:a5:62:37:a2:10:82:44:23:9f: 37:23:19:43:67:8f:8f:42:67:89:f3:ea:d8:35:81: 80:89:8c:18:ad:00:1f:f5:69:0c:f7:bf:ed:c0:85: cf:db:65:ac:ba:26:31:6b:dc:ef:0b:4b:11:5b:64: 3a:2b:98:3f:7c:66:98:93:a2:14:5c:df:e0:18:0b: 1b:7e:e2:19:50:8f:b3:ba:80:db:91:35:18:e9:cb: 3f:1c:cd:ff:ae:33:d3:0b:bf:58:5e:85:83:43:30: c0:20:10:a5:39:95:b7:a6:84:57:fc:ec:72:ca:27: 45:4f:11:cf:9e:db:19:28:c1:bd:b3:e8:ea:b9:6f: d8:04:fa:f6:33:3d:a7:97:ca:a8:9b:c7:20:f4:e4: 69:25:57:e9:7e:ad:ed:c2:50:27:65:4b:d2:c4:58: 42:57:2a:91:a7:45:46:f7:89:00:b9:eb:27:3a:e8: 04:0c:fe:38:99:06:bf:33:94:8a:65:2f:59:71:f3: 23:d6:07:95:6e:2b:4f:90:c8:06:06:09:d1:96:8f: f7:e8:16:a3:5c:56:8d:a8:07:a4:33:ac:e9:a8:30: 64:4d:75:83:38:4f:33:ec:3c:7a:31:56:4e:82:c0: a9:59:4f:28:61:56:6c:5e:5a:3d:95:69:24:31:2f: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:90:71:02:78:DE:B4:60:7B:8B:23:BA:68:4A:03:49:2C:55:D4:A8 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:ee:67:5f:98:0e:f1:e6:fe:4f:70:f8:05:cb:0f:8a:f2: 92:48:a3:1c:79:8c:af:fa:d3:eb:84:f0:f0:fa:a6:65:e2:15: 15:00:62:88:5e:a8:8b:d7:f7:58:3c:14:55:08:90:97:6e:4a: 8c:c8:6a:e0:9f:7d:a6:91:78:f9:56:a5:4c:3e:5b:3c:ff:6a: 06:cf:c5:32:08:fc:19:a0:03:03:ce:ed:9b:cb:a4:c8:31:3d: 8c:1c:e6:93:20:13:68:23:73:89:9f:45:6e:cd:15:bc:39:01: 33:ce:15:15:1c:fd:d8:3e:9e:c3:89:dc:9a:0c:e4:65:75:bb: 40:1c:e1:bd:84:ef:7d:61:5e:4b:a1:ec:f4:ce:26:9c:e7:bf: 06:fe:dc:1a:b5:95:d8:a5:74:13:73:04:34:fc:55:ee:e5:b5: 4d:9f:18:19:dc:e2:be:6f:87:f5:bd:e7:28:8b:cc:05:1e:a7: 5d:ec:2e:03:d4:43:98:5f:02:62:93:1d:7c:0a:2e:ae:98:35: 2b:82:1e:62:c9:81:93:cd:35:ec:14:66:b4:26:d3:df:26:87: 4b:80:6f:98:18:91:f3:5a:e1:19:f8:f0:e1:20:c1:ee:ef:f4: 1c:09:5d:2b:71:a8:05:dc:4a:0a:a4:31:dd:23:f6:fb:19:82: 85:b9:5d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUwODEwMTQyMDQ5WhcNMjUwODE3MTQyMDQ5WjAYMRYwFAYD VQQDEw02ODk4YWFjMS01YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoHwU4ClYjeiEIJEI583IxlDZ4+PQmeJ8+rYNYGAiYwYrQAf9WkM97/twIXP 22WsuiYxa9zvC0sRW2Q6K5g/fGaYk6IUXN/gGAsbfuIZUI+zuoDbkTUY6cs/HM3/ rjPTC79YXoWDQzDAIBClOZW3poRX/OxyyidFTxHPntsZKMG9s+jquW/YBPr2Mz2n l8qom8cg9ORpJVfpfq3twlAnZUvSxFhCVyqRp0VG94kAuesnOugEDP44mQa/M5SK ZS9ZcfMj1geVbitPkMgGBgnRlo/36BajXFaNqAekM6zpqDBkTXWDOE8z7Dx6MVZO gsCpWU8oYVZsXlo9lWkkMS8HcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKQcQJ4 3rRge4sjumhKA0ksVdSoMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQqe5nX5gO8eb+T3D4BcsPivKSSKMceYyv+tPrhPDw+qZl4hUVAGKI XqiL1/dYPBRVCJCXbkqMyGrgn32mkXj5VqVMPls8/2oGz8UyCPwZoAMDzu2by6TI MT2MHOaTIBNoI3OJn0VuzRW8OQEzzhUVHP3YPp7DidyaDORldbtAHOG9hO99YV5L oez0ziac578G/twatZXYpXQTcwQ0/FXu5bVNnxgZ3OK+b4f1vecoi8wFHqdd7C4D 1EOYXwJikx18Ci6umDUrgh5iyYGTzTXsFGa0JtPfJodLgG+YGJHzWuEZ+PDhIMHu 7/QcCV0rcagF3EoKpDHdI/b7GYKFuV0P -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:48 2025 by rpki-client