$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft File: 40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json) Hash identifier: /e0ohVNnAppVWGpSgSBn9q7eBKO1jFlmBxL8fazV+pc= Subject key identifier: CF:3B:47:1B:39:30:6C:B0:42:02:82:E0:81:33:94:9C:B6:75:33:48 Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C Certificate issuer: /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft Manifest number: 349B Signing time: Fri 18 Jul 2025 14:41:55 +0000 Manifest this update: Fri 18 Jul 2025 14:41:54 +0000 Manifest next update: Fri 25 Jul 2025 14:41:54 +0000 Files and hashes: 1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: S7RNVMuO8g502TH0IUB/vDX4Sbgb+2BBscbkfxrwrPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Validity Not Before: Jul 18 14:41:54 2025 GMT Not After : Jul 25 14:41:54 2025 GMT Subject: CN=687a5d33-8df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:96:ec:e1:54:43:bb:4c:d3:9e:ee:66:25: 3d:27:b8:70:d4:9b:b0:10:18:21:e2:7f:4b:10:0a: 83:0a:80:f8:10:09:84:ec:c2:f4:de:fc:49:3e:27: b0:37:82:7d:8f:75:bc:a1:a9:8e:65:42:25:dc:15: f3:37:7e:e7:41:12:15:be:6c:5e:63:03:8d:5c:68: 9d:c6:4c:60:31:c3:e7:ad:42:e0:90:9d:58:64:a7: b6:52:14:84:72:c0:b1:59:5b:17:24:04:e9:69:e4: 01:90:d1:73:a9:48:b9:cb:c5:20:36:0a:f6:8b:99: 2a:c3:74:31:7b:23:11:04:92:a0:a1:e6:19:87:98: 0c:5b:61:cc:95:60:41:55:81:c0:0e:96:14:25:52: 8b:e2:0a:88:8f:ce:eb:cc:2e:a3:a9:cc:75:6b:6c: a6:62:df:88:da:4e:34:1f:c4:25:56:df:a0:05:62: 85:eb:d1:60:83:06:a9:ae:7d:6c:14:80:78:f8:39: d9:54:0d:c6:c3:da:4b:05:15:50:4a:89:df:e8:a9: 59:b3:95:0e:9b:a6:00:53:8b:81:5c:49:e1:da:bf: ed:6f:e1:9d:bd:39:9c:db:e9:fb:08:96:2e:dd:a9: 43:48:de:c0:29:dd:c8:78:9c:21:81:f3:83:24:84: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3B:47:1B:39:30:6C:B0:42:02:82:E0:81:33:94:9C:B6:75:33:48 X509v3 Authority Key Identifier: keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:56:af:df:7d:70:e2:cf:c8:cc:02:17:ed:ad:c4:d7:4d: 86:cb:dd:32:4e:ae:0b:21:61:d2:12:75:ad:96:25:83:e5:de: 63:20:c5:4b:6d:59:c9:3e:fc:2a:f3:37:f7:d8:26:c8:63:4d: df:75:03:47:d9:b0:90:cc:29:f4:17:a7:54:67:37:e2:b2:d7: 0b:14:a3:87:4d:f0:37:75:45:6d:93:91:ff:6a:17:6e:94:38: 89:44:e9:d7:7a:1a:46:2d:7e:63:13:e4:6b:00:0c:37:55:c3: 5c:4a:82:e5:95:be:0c:44:45:32:51:1e:2b:d1:ca:d5:93:54: 55:84:57:ef:72:ee:f6:74:b5:1f:eb:e5:78:95:35:cf:59:fc: 7c:cb:f7:52:f9:80:e1:b7:b1:14:2e:8f:a0:99:21:3e:d3:c9: 0b:bd:6b:a7:bd:2e:4d:21:65:30:0a:b7:7c:21:3c:91:29:c5: e5:14:5f:ba:9e:dc:2e:9d:1b:eb:e6:1f:d1:f8:b6:87:2e:9a: 47:92:30:41:a8:cf:51:31:8b:d9:bc:42:ec:ce:93:04:01:ee: ce:7a:5d:e9:92:67:59:6c:83:25:38:2a:c8:83:04:c3:dd:4d: 5d:93:65:20:2a:e2:8f:02:d4:60:46:0a:84:44:cd:5c:67:6a: 76:71:73:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTQxMTAvBgNVBAUTKEUzNDIyRjRFREU1RTY4Q0VDOUFBQTdFM0M2RTMyNzhD NzMwRTFFN0MwHhcNMjUwNzE4MTQ0MTU0WhcNMjUwNzI1MTQ0MTU0WjAYMRYwFAYD VQQDEw02ODdhNWQzMy04ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbWW7OFUQ7tM057uZiU9J7hw1JuwEBgh4n9LEAqDCoD4EAmE7ML03vxJPiew N4J9j3W8oamOZUIl3BXzN37nQRIVvmxeYwONXGidxkxgMcPnrULgkJ1YZKe2UhSE csCxWVsXJATpaeQBkNFzqUi5y8UgNgr2i5kqw3QxeyMRBJKgoeYZh5gMW2HMlWBB VYHADpYUJVKL4gqIj87rzC6jqcx1a2ymYt+I2k40H8QlVt+gBWKF69Fggwaprn1s FIB4+DnZVA3Gw9pLBRVQSonf6KlZs5UOm6YAU4uBXEnh2r/tb+GdvTmc2+n7CJYu 3alDSN7AKd3IeJwhgfODJIQzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM87Rxs5 MGywQgKC4IEzlJy2dTNIMB8GA1UdIwQYMBaAFONCL07eXmjOyaqn48bjJ4xzDh58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNC80NzNDNjQ1MDFE OEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFNN0pxcWZqeHVNbmpITU9I bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwSXZUdDVlYU03SnFxZmp4dU1uakhNT0hudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNC80NzNDNjQ1MDFEOEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFN N0pxcWZqeHVNbmpITU9IbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNZ1av331w4s/IzAIX7a3E102Gy90yTq4LIWHSEnWtliWD5d5jIMVL bVnJPvwq8zf32CbIY03fdQNH2bCQzCn0F6dUZzfistcLFKOHTfA3dUVtk5H/ahdu lDiJROnXehpGLX5jE+RrAAw3VcNcSoLllb4MREUyUR4r0crVk1RVhFfvcu72dLUf 6+V4lTXPWfx8y/dS+YDht7EULo+gmSE+08kLvWunvS5NIWUwCrd8ITyRKcXlFF+6 ntwunRvr5h/R+LaHLppHkjBBqM9RMYvZvELszpMEAe7Oel3pkmdZbIMlOCrIgwTD 3U1dk2UgKuKPAtRgRgqERM1cZ2p2cXPq -----END CERTIFICATE-----Generated at Sun Jul 20 06:13:41 2025 by rpki-client