$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: kFFYoOvsH91Bzevvd+4vi/DaaLpeR9jhqykzHVm3CPs= Subject key identifier: 8A:1D:D2:04:32:0C:63:07:5F:CF:A8:28:C9:55:06:82:6F:4E:A5:14 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: B0 Signing time: Sat 19 Jul 2025 06:15:29 +0000 Manifest this update: Sat 19 Jul 2025 06:15:28 +0000 Manifest next update: Sat 26 Jul 2025 06:15:28 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: XtHb84T/0WLL6K6Q1PRgLBI9zZJNPIR4KQ6KL3HMA0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Jul 19 06:15:28 2025 GMT Not After : Jul 26 06:15:28 2025 GMT Subject: CN=687b3800-331f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:11:09:44:c6:fe:3b:a5:d7:07:40:ad:2f: db:d3:0b:b0:f5:9a:f1:36:85:2b:5e:ab:92:9d:a6: ac:bf:f2:9a:6c:b1:dc:71:aa:46:04:c5:59:ee:23: 5f:b1:8a:2f:fe:a2:7c:54:3f:a8:e4:70:8f:1f:ab: 13:cb:55:02:00:ca:98:27:cf:70:3e:d1:8c:bb:33: 4a:3a:30:8e:70:59:7b:1e:20:90:50:25:4d:cb:ef: 0d:56:56:c5:e1:5f:28:c2:09:b9:f8:f2:31:85:e4: 83:63:b0:46:09:a5:ff:6c:eb:ff:29:62:b8:50:0a: f8:2a:9a:32:d1:49:95:61:74:4f:63:34:92:ae:d5: 50:66:c1:73:b4:c4:a9:9c:d4:e1:65:f9:38:85:1a: 82:40:95:42:1b:69:c4:ad:58:f4:8a:16:0e:cf:2d: 84:68:03:1d:de:14:6c:8b:8e:3b:b4:b1:a9:a5:2c: cc:56:f6:d0:63:33:a8:94:48:df:c1:69:7f:9b:46: 1b:e2:a0:0f:2a:9b:46:74:df:4d:23:6f:46:06:fd: 2b:7f:94:72:e9:c8:13:c9:64:9d:2b:41:9e:f6:61: fc:f0:cf:13:2f:47:94:31:d2:1e:e7:c2:a0:2c:ea: 8e:45:0e:e8:a5:26:bb:e2:73:cd:d3:8f:53:86:d1: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:D2:04:32:0C:63:07:5F:CF:A8:28:C9:55:06:82:6F:4E:A5:14 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:9b:58:17:13:b5:c3:e5:ea:39:0c:ed:56:6f:9b:42:6c:0d: fb:88:43:da:f8:1c:cb:cf:9f:1f:49:ed:d8:80:28:9c:b2:17: 21:de:f4:9a:0b:71:d2:1b:96:c0:91:79:18:c5:94:e3:a7:3e: 23:09:4f:5b:01:98:4c:47:e5:cf:13:76:95:4b:8e:d2:73:a8: 3e:5a:bb:8c:72:62:05:44:2b:f5:fe:bc:56:37:55:4a:ce:b8: a4:c4:a0:b5:b6:13:aa:cd:d2:1d:63:6c:89:c2:78:90:2f:7c: e0:2a:d3:43:03:a7:10:cb:f0:e0:86:2c:a5:e6:3f:2c:ab:bb: 2d:51:2c:12:80:d5:fd:3d:72:9a:a6:a4:bf:2b:ca:8e:34:60: 3b:ad:2b:fc:c8:84:9d:67:80:e1:7e:27:ca:ba:15:25:d5:53: 70:29:5c:42:fa:52:16:93:c9:d0:8e:94:43:66:b4:2a:7a:c4: c8:2f:37:89:59:15:7c:55:a5:b7:90:68:cb:04:29:5c:77:75: 18:b7:04:e5:3a:88:70:f4:04:2f:ce:b5:dd:87:03:46:43:c3: 63:e7:d2:b8:7f:0a:a3:60:b4:34:01:e4:74:e2:36:20:12:55: 69:8c:ac:41:f0:06:df:ea:08:9e:67:34:d6:ee:45:4e:9b:97: 1b:a8:1c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwNzE5MDYxNTI4WhcNMjUwNzI2MDYxNTI4WjAYMRYwFAYD VQQDEw02ODdiMzgwMC0zMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm8RCUTG/jul1wdArS/b0wuw9ZrxNoUrXquSnaasv/KabLHccapGBMVZ7iNf sYov/qJ8VD+o5HCPH6sTy1UCAMqYJ89wPtGMuzNKOjCOcFl7HiCQUCVNy+8NVlbF 4V8owgm5+PIxheSDY7BGCaX/bOv/KWK4UAr4Kpoy0UmVYXRPYzSSrtVQZsFztMSp nNThZfk4hRqCQJVCG2nErVj0ihYOzy2EaAMd3hRsi447tLGppSzMVvbQYzOolEjf wWl/m0Yb4qAPKptGdN9NI29GBv0rf5Ry6cgTyWSdK0Ge9mH88M8TL0eUMdIe58Kg LOqORQ7opSa74nPN049ThtGrmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIod0gQy DGMHX8+oKMlVBoJvTqUUMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5m1gXE7XD5eo5DO1Wb5tCbA37iEPa+BzLz58fSe3YgCicshch3vSa C3HSG5bAkXkYxZTjpz4jCU9bAZhMR+XPE3aVS47Sc6g+WruMcmIFRCv1/rxWN1VK zrikxKC1thOqzdIdY2yJwniQL3zgKtNDA6cQy/Dghiyl5j8sq7stUSwSgNX9PXKa pqS/K8qONGA7rSv8yISdZ4DhfifKuhUl1VNwKVxC+lIWk8nQjpRDZrQqesTILzeJ WRV8VaW3kGjLBClcd3UYtwTlOohw9AQvzrXdhwNGQ8Nj59K4fwqjYLQ0AeR04jYg ElVpjKxB8Abf6gieZzTW7kVOm5cbqByz -----END CERTIFICATE-----Generated at Sun Jul 20 08:03:11 2025 by rpki-client