$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: YrbX0lpRI6mqSXMH4j3Vwj9Z40yyflrV0lu76BKsS+k= Subject key identifier: B7:AE:93:21:32:E5:72:58:1A:E4:74:00:1C:1A:10:2E:02:E9:70:31 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 211F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 211F Signing time: Sun 20 Jul 2025 15:57:26 +0000 Manifest this update: Sun 20 Jul 2025 15:57:25 +0000 Manifest next update: Sun 27 Jul 2025 15:57:25 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: 06zrZNclvQMLViACLA4OeB/FovVPSbhUgn0XOG9cYYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8479 (0x211f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Jul 20 15:57:25 2025 GMT Not After : Jul 27 15:57:25 2025 GMT Subject: CN=687d11e6-56a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:6d:73:2a:eb:63:d5:34:eb:d4:97:b6:d7: b1:ee:13:ba:21:2a:a7:80:6c:67:14:ee:08:44:f8: 16:fb:a3:bd:97:5c:ea:60:3d:64:9e:39:46:1d:0c: e5:08:ac:8f:fa:80:aa:e5:f8:6a:96:99:c7:0f:e5: 4c:22:50:7c:d3:d2:8e:13:c2:2c:94:61:b7:98:bd: a0:58:aa:d5:55:7c:2e:79:55:ec:5d:65:e4:e1:62: 89:19:f0:7f:ce:de:95:16:29:cd:3e:11:b5:48:59: 81:12:72:2e:93:17:78:0b:96:25:dd:8e:60:59:82: 7c:0e:cf:ee:69:bf:4f:a7:1f:79:29:7c:86:5e:83: 40:da:15:33:38:57:44:2a:aa:25:b9:f6:04:29:2b: 58:4e:5e:26:0d:7a:08:9c:44:3c:1c:04:3f:90:8f: 4f:1a:e0:08:97:ed:2c:c9:54:2f:97:29:4c:10:93: e6:bc:a2:f9:01:cd:ab:ce:4d:15:5e:3e:64:64:94: 51:b5:9d:43:57:c5:41:8d:83:0a:e8:0f:66:6f:be: 4f:f3:88:49:12:4a:75:23:02:61:a5:dd:31:fc:56: 5e:0a:fb:29:54:e4:5e:88:14:3b:cb:38:67:06:70: a5:d2:75:7c:3a:64:f9:23:e5:15:69:58:1f:4e:e7: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AE:93:21:32:E5:72:58:1A:E4:74:00:1C:1A:10:2E:02:E9:70:31 X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:85:63:22:6e:46:f0:80:e7:a5:45:ca:b5:5d:a4:66:e1:3b: f2:29:6a:30:c0:59:8c:14:a7:ea:af:a1:9a:64:2b:f4:fa:ad: 14:ed:f9:89:a1:19:41:54:a5:25:29:57:8c:ac:b8:c6:01:d7: e7:d7:77:1b:3c:9f:dc:51:cd:93:ed:cf:1a:7f:e4:5d:c8:b6: 8a:23:2f:19:e0:10:6a:c7:6e:78:6f:3a:cd:38:08:8c:68:36: d2:a6:ff:4b:be:f4:63:66:15:c3:e7:6a:bc:54:b3:4d:31:e1: 5a:de:8a:2d:bb:2e:1f:a4:3f:6c:09:54:d8:4e:3d:25:e7:27: 76:93:2d:97:84:a0:a9:e9:ae:25:52:ea:e6:a1:fd:76:c9:64: ba:b1:d8:c5:17:cf:1b:df:42:7d:2b:5b:a7:19:9e:76:67:e8: 02:ca:5d:ac:19:eb:8a:49:78:dc:3b:c3:66:18:8c:56:e7:8b: c1:54:78:a4:19:27:e5:16:2a:3b:62:5c:39:45:bb:d8:1e:be: 0a:20:b2:44:0b:8f:b5:48:29:36:b4:88:68:7c:e5:50:8f:56: 71:a0:7e:81:7f:d5:4e:b6:cf:42:53:ba:d1:4d:62:ef:ce:cf: 7f:6d:d8:f3:53:fd:91:27:6d:87:27:f9:42:5e:74:5f:43:91: e7:d2:8d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUwNzIwMTU1NzI1WhcNMjUwNzI3MTU1NzI1WjAYMRYwFAYD VQQDEw02ODdkMTFlNi01NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVttcyrrY9U069SXttex7hO6ISqngGxnFO4IRPgW+6O9l1zqYD1knjlGHQzl CKyP+oCq5fhqlpnHD+VMIlB809KOE8IslGG3mL2gWKrVVXwueVXsXWXk4WKJGfB/ zt6VFinNPhG1SFmBEnIukxd4C5Yl3Y5gWYJ8Ds/uab9Ppx95KXyGXoNA2hUzOFdE KqolufYEKStYTl4mDXoInEQ8HAQ/kI9PGuAIl+0syVQvlylMEJPmvKL5Ac2rzk0V Xj5kZJRRtZ1DV8VBjYMK6A9mb75P84hJEkp1IwJhpd0x/FZeCvspVOReiBQ7yzhn BnCl0nV8OmT5I+UVaVgfTudaSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeukyEy 5XJYGuR0ABwaEC4C6XAxMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJhWMibkbwgOelRcq1XaRm4TvyKWowwFmMFKfqr6GaZCv0+q0U7fmJ oRlBVKUlKVeMrLjGAdfn13cbPJ/cUc2T7c8af+RdyLaKIy8Z4BBqx254bzrNOAiM aDbSpv9LvvRjZhXD52q8VLNNMeFa3ootuy4fpD9sCVTYTj0l5yd2ky2XhKCp6a4l Uurmof12yWS6sdjFF88b30J9K1unGZ52Z+gCyl2sGeuKSXjcO8NmGIxW54vBVHik GSflFio7Ylw5RbvYHr4KILJEC4+1SCk2tIhofOVQj1ZxoH6Bf9VOts9CU7rRTWLv zs9/bdjzU/2RJ22HJ/lCXnRfQ5Hn0o1S -----END CERTIFICATE-----Generated at Mon Jul 21 02:44:45 2025 by rpki-client