$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: 4HGVKP17SMUGLSBj3JnH8VRFK08CcMmWXR9IXGXpP2o= Subject key identifier: 11:6A:73:D3:67:C5:78:F3:4E:DC:C6:E6:22:46:47:8D:E7:91:D3:50 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E56 Signing time: Fri 08 Aug 2025 18:18:21 +0000 Manifest this update: Fri 08 Aug 2025 18:18:20 +0000 Manifest next update: Fri 15 Aug 2025 18:18:20 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: FFYywmRrCln411txZOTztVqJwMz9YEy8lou1vpEVamw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Aug 8 18:18:20 2025 GMT Not After : Aug 15 18:18:20 2025 GMT Subject: CN=68963f6d-0b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:c2:8f:b9:1e:19:2f:42:03:de:cc:40:20: 62:1d:9d:ca:86:b2:e9:b1:01:f6:d0:70:d8:a3:47: d2:21:ac:ff:97:c4:0c:4b:f6:64:e6:e8:9d:f2:12: aa:18:87:c7:87:38:fd:60:be:e6:1b:1c:99:0f:78: 21:1f:06:65:31:d0:fe:93:24:a8:ad:a1:c9:fe:3b: 6b:be:db:43:20:a3:11:21:fb:ba:96:97:eb:ba:5b: 00:9d:18:e3:9b:45:b7:fa:8e:dc:93:aa:a4:63:b9: b7:9d:06:fb:3e:f7:a4:88:41:82:04:33:76:c8:22: 57:8b:53:b9:46:1d:f0:82:10:9d:4a:41:f0:87:4a: 6b:7b:12:b7:02:54:3a:b1:d7:ac:84:46:35:16:63: db:bc:9b:6c:bb:a3:d9:8d:31:24:9a:da:65:e5:fe: ac:01:46:5d:b9:d3:fd:b3:59:ce:ee:30:2d:64:7c: 89:c2:43:44:1d:ad:9e:56:b8:3b:f8:9d:94:ed:1e: dc:53:69:b5:9a:7f:5f:5f:fc:81:91:79:5f:ee:73: 7d:9a:92:6a:c1:20:e3:77:2c:33:61:2a:ad:6a:67: 02:13:0a:2c:31:4c:49:16:ac:21:77:d5:eb:18:b5: ac:b5:e6:71:4d:53:9d:f8:cb:46:2d:f0:41:af:f6: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:73:D3:67:C5:78:F3:4E:DC:C6:E6:22:46:47:8D:E7:91:D3:50 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:77:2e:30:19:1d:a3:40:16:85:a2:33:98:a1:51:6e:8d:9c: d3:49:25:f4:e5:31:0b:7a:9d:17:59:d6:05:b7:8f:8e:44:83: 64:74:d7:0c:d2:77:cd:42:e7:ea:f1:a4:d7:4c:7a:8b:cf:37: 0f:4d:bb:68:c0:25:90:f8:b2:e3:6b:f9:d3:f2:20:40:8a:e7: a8:1f:0f:59:44:26:da:e6:12:0d:85:80:a1:43:c4:0a:8b:00: 95:60:1b:2b:f3:da:9c:e9:0f:1e:82:1a:1d:d5:c6:30:a9:b9: 6c:d1:bf:5c:c7:7c:a5:dc:fa:c3:e6:f8:3d:63:3a:27:ed:60: b6:17:4b:c2:bb:63:19:67:1f:78:75:64:57:8b:2d:e9:1d:33: b3:0e:73:55:f8:ae:02:54:a2:4a:3f:a4:06:f3:53:f2:ba:de: 14:cb:19:da:c7:8d:74:56:56:37:d0:79:46:c5:84:bd:99:d4: 33:77:3b:dd:6a:f7:67:c9:dd:85:5e:83:7f:c4:f2:f0:56:0d: a8:c3:d9:3a:1f:b3:c3:58:cb:59:ec:b9:8c:40:cc:ed:8e:4c: 15:30:2e:53:83:2d:4d:c3:bf:59:32:81:d7:70:0b:03:9a:5a: 21:58:55:d6:02:cb:01:e3:03:ea:96:92:e7:ab:db:e2:c7:fe: 8f:0e:22:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwODA4MTgxODIwWhcNMjUwODE1MTgxODIwWjAYMRYwFAYD VQQDEw02ODk2M2Y2ZC0wYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx7Cj7keGS9CA97MQCBiHZ3KhrLpsQH20HDYo0fSIaz/l8QMS/Zk5uid8hKq GIfHhzj9YL7mGxyZD3ghHwZlMdD+kySoraHJ/jtrvttDIKMRIfu6lpfrulsAnRjj m0W3+o7ck6qkY7m3nQb7PvekiEGCBDN2yCJXi1O5Rh3wghCdSkHwh0prexK3AlQ6 sdeshEY1FmPbvJtsu6PZjTEkmtpl5f6sAUZdudP9s1nO7jAtZHyJwkNEHa2eVrg7 +J2U7R7cU2m1mn9fX/yBkXlf7nN9mpJqwSDjdywzYSqtamcCEwosMUxJFqwhd9Xr GLWsteZxTVOd+MtGLfBBr/YADQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFqc9Nn xXjzTtzG5iJGR43nkdNQMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBody4wGR2jQBaFojOYoVFujZzTSSX05TELep0XWdYFt4+ORINkdNcM 0nfNQufq8aTXTHqLzzcPTbtowCWQ+LLja/nT8iBAiueoHw9ZRCba5hINhYChQ8QK iwCVYBsr89qc6Q8eghod1cYwqbls0b9cx3yl3PrD5vg9Yzon7WC2F0vCu2MZZx94 dWRXiy3pHTOzDnNV+K4CVKJKP6QG81Pyut4Uyxnax410VlY30HlGxYS9mdQzdzvd avdnyd2FXoN/xPLwVg2ow9k6H7PDWMtZ7LmMQMztjkwVMC5Tgy1Nw79ZMoHXcAsD mlohWFXWAssB4wPqlpLnq9vix/6PDiKY -----END CERTIFICATE-----Generated at Sun Aug 10 04:51:37 2025 by rpki-client