$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json) Hash identifier: P89GkJVbFLTV2K+SKWRBNjzcOsoCiPS9B582tDXnT2o= Subject key identifier: 35:BF:76:0D:B5:B2:9A:3B:7C:41:66:8A:6D:56:CE:C0:8E:AB:79:5F Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft Manifest number: 349E Signing time: Fri 18 Jul 2025 14:52:24 +0000 Manifest this update: Fri 18 Jul 2025 14:52:23 +0000 Manifest next update: Fri 25 Jul 2025 14:52:23 +0000 Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: SOx7dxTtzw6gJShl7j6s4+bbat++wR6KHpvY81sxdbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Validity Not Before: Jul 18 14:52:23 2025 GMT Not After : Jul 25 14:52:23 2025 GMT Subject: CN=687a5fa7-e177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:0b:74:4b:a7:ce:c4:0e:63:f1:b5:1c:bc: 2e:1f:b9:ba:16:70:58:9f:3e:74:c8:a1:6f:ba:b0: ec:ec:61:71:08:4d:91:09:34:4f:c7:d5:08:1d:41: 3e:5a:24:22:69:bf:16:f0:22:35:d1:45:78:3c:29: 6c:b8:f6:03:b8:8d:05:cb:7d:4d:ac:15:84:a9:5e: e4:6c:60:33:8e:3d:83:7a:f0:e1:34:af:75:80:c5: 2a:50:a8:82:b2:09:68:38:31:83:48:8e:9e:c1:aa: df:bc:bd:26:e1:ad:8a:fd:97:c7:74:5c:c5:58:1f: c8:e0:85:ab:b0:cb:8d:ef:08:25:34:72:25:09:b1: 18:4b:be:ba:c9:e7:a1:04:d9:3b:de:64:12:24:fb: 42:0c:f3:fb:b5:58:51:56:05:98:ec:94:dd:e0:ac: b2:71:66:cd:e8:8c:7b:2c:f8:0e:cc:ae:af:9e:af: 7d:4e:07:0b:02:92:e6:60:0c:76:e3:ab:09:2e:63: 2f:01:9d:d7:e4:32:f6:eb:3d:b7:57:2f:8b:11:d2: 3f:c4:f2:55:01:28:87:a8:5d:53:3b:0f:21:39:be: 66:e8:d9:c5:50:39:5a:b5:a4:f6:ae:b0:84:2a:65: 35:05:1a:67:fe:5b:bc:d5:40:ea:1f:a6:c0:d7:c6: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BF:76:0D:B5:B2:9A:3B:7C:41:66:8A:6D:56:CE:C0:8E:AB:79:5F X509v3 Authority Key Identifier: keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d1:7a:77:eb:d4:cb:88:93:50:ff:bf:84:57:41:c5:45:24: 53:72:31:0b:f5:da:e1:6e:19:13:61:9a:b6:c3:ce:ce:24:63: ca:47:77:d9:de:70:94:67:79:27:fa:22:9d:e4:63:92:ec:55: 28:46:d2:57:f6:45:4d:b0:48:d9:22:02:22:c2:f1:4a:10:9f: 85:83:af:fa:36:96:bf:78:2c:f5:5d:44:4c:f0:c6:7f:30:bb: aa:f0:85:69:2a:31:9b:d4:78:69:6d:99:ff:d9:a2:88:cb:44: 00:89:a3:aa:43:9d:1e:ab:eb:5b:02:4e:3c:1e:7f:0a:e8:5d: 7c:db:e2:04:9a:48:5d:5a:6e:33:a5:fd:fa:89:16:d4:79:8a: c3:dd:00:b6:dd:68:ea:8f:1b:fa:63:4f:5f:9d:27:6d:01:b8: 3b:22:f2:1a:ce:2b:bc:36:49:86:28:9a:68:5e:cc:08:67:eb: e2:eb:34:59:16:80:a7:fa:20:77:1b:6b:a1:d6:5f:ba:f5:24: 71:14:d8:bc:fd:91:23:97:53:65:9a:ea:88:ed:40:5a:41:b6: f0:e5:9e:4a:af:de:51:59:85:60:d8:d7:ee:ce:8d:81:dd:00: 06:aa:76:44:67:9e:8a:65:27:c7:b7:d8:f3:a8:0a:1c:c6:44: 6e:21:92:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2 QTY2MjQyRjEwHhcNMjUwNzE4MTQ1MjIzWhcNMjUwNzI1MTQ1MjIzWjAYMRYwFAYD VQQDEw02ODdhNWZhNy1lMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttsLdEunzsQOY/G1HLwuH7m6FnBYnz50yKFvurDs7GFxCE2RCTRPx9UIHUE+ WiQiab8W8CI10UV4PClsuPYDuI0Fy31NrBWEqV7kbGAzjj2DevDhNK91gMUqUKiC sgloODGDSI6ewarfvL0m4a2K/ZfHdFzFWB/I4IWrsMuN7wglNHIlCbEYS766yeeh BNk73mQSJPtCDPP7tVhRVgWY7JTd4KyycWbN6Ix7LPgOzK6vnq99TgcLApLmYAx2 46sJLmMvAZ3X5DL26z23Vy+LEdI/xPJVASiHqF1TOw8hOb5m6NnFUDlataT2rrCE KmU1BRpn/lu81UDqH6bA18ZF8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDW/dg21 spo7fEFmim1WzsCOq3lfMB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy WkNfbTltek5vb1pxWmlRdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm0Xp369TLiJNQ/7+EV0HFRSRTcjEL9drhbhkTYZq2w87OJGPKR3fZ 3nCUZ3kn+iKd5GOS7FUoRtJX9kVNsEjZIgIiwvFKEJ+Fg6/6Npa/eCz1XURM8MZ/ MLuq8IVpKjGb1HhpbZn/2aKIy0QAiaOqQ50eq+tbAk48Hn8K6F182+IEmkhdWm4z pf36iRbUeYrD3QC23Wjqjxv6Y09fnSdtAbg7IvIaziu8NkmGKJpoXswIZ+vi6zRZ FoCn+iB3G2uh1l+69SRxFNi8/ZEjl1NlmuqI7UBaQbbw5Z5Kr95RWYVg2Nfuzo2B 3QAGqnZEZ56KZSfHt9jzqAocxkRuIZLM -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:11 2025 by rpki-client