$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: /C2eAmAzyGeoMCCr0fVXafuZq9c+xkWM6MHdIP7Bo2g= Subject key identifier: 8B:7A:7A:75:ED:B1:87:42:B5:5A:01:56:4F:8D:23:40:38:0A:07:29 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11C0 Signing time: Sun 10 Aug 2025 17:11:52 +0000 Manifest this update: Sun 10 Aug 2025 17:11:51 +0000 Manifest next update: Sun 17 Aug 2025 17:11:51 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: LAff2qYFiw0/mQb7OCRZhloVEtWeOwn6wtJwi1/IBdo=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4570 (0x11da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Aug 10 17:11:51 2025 GMT Not After : Aug 17 17:11:51 2025 GMT Subject: CN=6898d2d7-2208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:58:35:25:92:9d:0f:4b:ae:a4:8d:d0:d7:4c: b4:04:76:2f:a8:b5:7b:b3:dc:68:2f:a3:20:be:4d: da:db:3c:72:ed:6d:b6:15:72:31:f2:6d:81:b6:b8: 52:8a:69:66:43:0c:ed:db:22:02:7b:68:57:6f:57: e0:79:1b:69:ec:98:22:94:72:a9:95:35:be:60:19: 16:67:1b:7a:3a:90:15:84:e8:38:03:e8:ab:5c:49: a4:20:e1:cd:6d:91:c1:0a:fe:5c:db:9a:f1:4f:f7: ab:0e:7e:10:19:55:10:f2:4f:97:93:1d:e4:35:5b: 1e:d4:6d:54:8a:67:54:16:f3:6f:6e:ae:e5:93:f4: 07:45:9a:bf:b9:d8:74:d5:36:64:46:45:1c:c6:0c: 8c:f1:84:1f:fb:04:ce:28:38:8e:f8:65:29:89:fe: 47:a8:df:61:5d:99:ed:7e:a2:94:57:59:67:99:19: da:5d:54:90:3f:4f:f4:37:94:16:59:0c:1c:17:99: 32:1a:19:ab:c7:06:21:0f:a0:b7:92:37:56:f7:2b: 5e:60:26:04:e5:e6:50:a4:eb:be:ac:83:73:10:29: f4:1c:ab:6b:05:48:13:cb:42:d1:5d:58:c7:89:63: 9d:93:15:94:a0:7b:cc:9a:5b:af:7d:34:e9:5f:04: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:7A:75:ED:B1:87:42:B5:5A:01:56:4F:8D:23:40:38:0A:07:29 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:0d:4f:63:15:f3:87:51:14:57:d6:d6:8f:0c:b2:d5:53: de:6f:af:5f:a4:8e:62:96:fc:b4:37:e7:68:4c:cf:a9:6b:11: 9b:8c:38:80:e9:fe:1a:58:16:49:a6:a3:66:f3:01:91:90:6a: 89:a0:1b:e9:db:a3:ba:be:e4:4c:13:83:7d:87:1e:3e:76:7c: e2:83:26:37:c2:c0:44:fd:0e:5e:4e:ff:b6:48:8c:c4:d6:a8: 35:40:6b:f8:84:20:3b:72:e5:9d:49:27:b8:34:ff:98:24:c6: 63:5f:4e:c3:62:02:4c:ec:c1:00:83:ad:a3:99:c9:d3:a5:82: fc:56:11:f6:1a:32:70:64:8b:13:27:fb:f3:60:dc:1e:75:59: 13:a4:b4:84:e8:47:18:61:32:aa:60:9a:92:c1:0f:9c:f0:1f: 20:40:f8:d2:66:36:7b:83:05:1b:82:76:57:8b:fd:22:0a:b3: 7e:2e:6a:5d:95:61:78:02:fc:c3:63:e6:58:c8:4c:c6:1c:45: 22:26:51:35:ec:90:97:64:f5:4e:69:6a:8e:69:02:ff:ba:d8: 7d:8a:35:b9:3d:91:07:6f:62:53:00:fc:98:eb:07:f8:66:8f: 76:25:da:cd:cd:f6:c9:e0:d1:8a:39:00:8b:2e:ac:d2:c3:1f: ff:7c:49:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwODEwMTcxMTUxWhcNMjUwODE3MTcxMTUxWjAYMRYwFAYD VQQDEw02ODk4ZDJkNy0yMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Fg1JZKdD0uupI3Q10y0BHYvqLV7s9xoL6Mgvk3a2zxy7W22FXIx8m2BtrhS imlmQwzt2yICe2hXb1fgeRtp7JgilHKplTW+YBkWZxt6OpAVhOg4A+irXEmkIOHN bZHBCv5c25rxT/erDn4QGVUQ8k+Xkx3kNVse1G1UimdUFvNvbq7lk/QHRZq/udh0 1TZkRkUcxgyM8YQf+wTOKDiO+GUpif5HqN9hXZntfqKUV1lnmRnaXVSQP0/0N5QW WQwcF5kyGhmrxwYhD6C3kjdW9yteYCYE5eZQpOu+rINzECn0HKtrBUgTy0LRXVjH iWOdkxWUoHvMmluvfTTpXwQM4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt6enXt sYdCtVoBVk+NI0A4CgcpMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAexg1PYxXzh1EUV9bWjwyy1VPeb69fpI5ilvy0N+doTM+paxGbjDiA 6f4aWBZJpqNm8wGRkGqJoBvp26O6vuRME4N9hx4+dnzigyY3wsBE/Q5eTv+2SIzE 1qg1QGv4hCA7cuWdSSe4NP+YJMZjX07DYgJM7MEAg62jmcnTpYL8VhH2GjJwZIsT J/vzYNwedVkTpLSE6EcYYTKqYJqSwQ+c8B8gQPjSZjZ7gwUbgnZXi/0iCrN+Lmpd lWF4AvzDY+ZYyEzGHEUiJlE17JCXZPVOaWqOaQL/uth9ijW5PZEHb2JTAPyY6wf4 Zo92JdrNzfbJ4NGKOQCLLqzSwx//fEnL -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:28 2025 by rpki-client