$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: pdaD+BVOt4xfR6V3MuCyJ4ELwrKgaNs95PDnmLm6gIs= Subject key identifier: F1:D1:F3:EB:E4:9A:5C:00:CC:21:3A:58:BE:79:A8:08:90:CF:B3:85 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: 98 Signing time: Sun 01 Jun 2025 06:03:50 +0000 Manifest this update: Sun 01 Jun 2025 06:03:50 +0000 Manifest next update: Sun 08 Jun 2025 06:03:50 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: /b7eVChpi92nDBtGlzbrZ+YXjNZgJ3s3b99ypie6e9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Jun 1 06:03:50 2025 GMT Not After : Jun 8 06:03:50 2025 GMT Subject: CN=683bed46-9d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:11:4d:1a:c8:fb:d5:c1:ac:57:59:2b:28: 1b:c1:28:73:ad:c8:64:73:b4:bf:8e:8d:13:6b:9e: 3f:b6:ab:45:93:0a:3b:de:25:17:bc:d8:6a:a7:44: fc:6e:6c:20:81:ab:42:89:4b:60:26:5d:9f:a1:ac: 99:7e:77:6f:92:35:4d:3a:a6:fa:c3:69:e6:56:e1: 76:97:0a:3c:f9:2d:ae:3d:26:48:a2:f6:68:b4:64: 3a:2b:4a:88:a3:79:7c:8c:15:2f:a5:3b:89:5f:ea: a9:11:f6:a5:5a:18:7b:0b:10:5e:1f:9a:13:e6:e4: a5:ba:89:4e:ba:0c:b7:82:1c:13:d7:62:ae:0e:61: 3e:eb:c6:8e:d1:5b:4f:1f:39:17:51:fe:a2:c3:21: 2b:b5:92:e2:fa:f7:e6:ac:fb:6a:1a:82:5f:28:cd: 85:fc:c4:83:1c:fe:3f:ee:4a:26:ce:6c:9d:92:79: 17:32:62:99:96:60:df:a1:29:09:18:1a:b5:68:a9: 2f:9a:a4:da:b6:49:0d:e6:92:b5:9f:5c:95:61:b7: fd:19:56:0b:d9:77:c1:23:b5:bf:ae:5a:d9:4b:4d: d3:2d:c9:7e:97:be:c3:e7:99:16:94:5f:2f:08:1a: e0:54:05:fa:73:25:31:f7:d7:93:97:8b:96:ea:d0: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D1:F3:EB:E4:9A:5C:00:CC:21:3A:58:BE:79:A8:08:90:CF:B3:85 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fa:a1:1f:0b:12:e4:90:9d:17:1a:77:8d:4f:1c:15:e2:11: 22:80:35:9e:bb:d1:54:25:70:37:48:ec:5b:db:7e:b5:b9:79: db:35:e5:a4:46:c6:94:e5:18:25:ad:73:43:14:17:24:74:3b: 1c:8c:73:58:b1:fb:c8:93:60:7a:3a:00:d4:b9:cd:16:16:f7: a2:93:f6:90:e5:ee:f9:ef:a5:3f:e4:fb:4f:32:af:d1:29:a2: a2:39:d6:4f:54:d1:51:21:a7:a6:5a:21:0d:b1:e5:7a:1a:85: c5:92:67:0e:79:ba:06:d9:4e:f8:13:cb:99:ef:1d:0f:f6:e6: 8e:4c:97:fe:85:63:89:52:48:70:27:96:90:a5:60:79:ae:83: e5:74:68:d7:3d:7d:b5:6c:26:26:0e:a2:09:42:2e:1c:27:47: c2:0b:92:b6:a9:94:52:d0:06:30:0e:23:85:4b:58:14:14:43: a2:72:b3:04:b8:94:0c:1e:ca:d5:52:d0:be:a0:3e:4a:73:61: b1:31:82:ac:3f:bd:6d:e8:c4:14:01:80:f3:a0:7f:5d:3c:c9: 86:a0:a6:f0:89:00:90:d8:47:e2:dd:e3:19:10:b0:47:f3:47: 3a:02:9a:43:5b:37:d1:d8:9f:6f:8e:57:d2:57:dc:df:12:18: fe:ec:a9:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwNjAxMDYwMzUwWhcNMjUwNjA4MDYwMzUwWjAYMRYwFAYD VQQDEw02ODNiZWQ0Ni05ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLYRTRrI+9XBrFdZKygbwShzrchkc7S/jo0Ta54/tqtFkwo73iUXvNhqp0T8 bmwggatCiUtgJl2foayZfndvkjVNOqb6w2nmVuF2lwo8+S2uPSZIovZotGQ6K0qI o3l8jBUvpTuJX+qpEfalWhh7CxBeH5oT5uSluolOugy3ghwT12KuDmE+68aO0VtP HzkXUf6iwyErtZLi+vfmrPtqGoJfKM2F/MSDHP4/7komzmydknkXMmKZlmDfoSkJ GBq1aKkvmqTatkkN5pK1n1yVYbf9GVYL2XfBI7W/rlrZS03TLcl+l77D55kWlF8v CBrgVAX6cyUx99eTl4uW6tAuUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHR8+vk mlwAzCE6WL55qAiQz7OFMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC+qEfCxLkkJ0XGneNTxwV4hEigDWeu9FUJXA3SOxb2361uXnbNeWk RsaU5RglrXNDFBckdDscjHNYsfvIk2B6OgDUuc0WFveik/aQ5e7576U/5PtPMq/R KaKiOdZPVNFRIaemWiENseV6GoXFkmcOeboG2U74E8uZ7x0P9uaOTJf+hWOJUkhw J5aQpWB5roPldGjXPX21bCYmDqIJQi4cJ0fCC5K2qZRS0AYwDiOFS1gUFEOicrME uJQMHsrVUtC+oD5Kc2GxMYKsP71t6MQUAYDzoH9dPMmGoKbwiQCQ2Efi3eMZELBH 80c6AppDWzfR2J9vjlfSV9zfEhj+7Kk5 -----END CERTIFICATE-----Generated at Mon Jun 2 22:18:05 2025 by rpki-client