$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: 3mjWkuLowiXq309aJPVNmBuVy9W68R8FN7nQsvfr3ec= Subject key identifier: 60:1E:32:83:A5:8B:82:C6:D2:D5:05:FE:45:41:02:6B:C9:75:7A:B0 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 019D Signing time: Wed 02 Jul 2025 23:44:09 +0000 Manifest this update: Wed 02 Jul 2025 23:44:08 +0000 Manifest next update: Wed 09 Jul 2025 23:44:08 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: gcs+tGgfcgIYoUm/+E94GLaMFGyF9Q3Zi8uWULn8kfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Jul 2 23:44:08 2025 GMT Not After : Jul 9 23:44:08 2025 GMT Subject: CN=6865c449-98db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:5f:a8:18:53:10:a1:5d:8a:ff:46:45:7c: c4:26:81:94:3c:ef:c1:a4:8e:fc:6f:fb:53:e7:00: ba:3f:61:7c:ce:c4:95:f1:01:fe:47:61:39:1a:6e: c3:48:ab:0c:ff:7f:6a:6c:d0:9f:de:48:c9:75:ae: 03:39:16:3b:12:ce:fa:6a:57:4b:5b:2c:e8:87:a5: 95:94:75:19:2d:3f:92:64:ca:9f:83:d2:41:ee:6e: 49:3a:e6:a8:6b:29:15:4e:97:65:23:30:73:94:43: e9:95:63:e2:86:4b:70:03:6a:35:34:19:05:58:20: 51:81:43:f4:c5:f1:41:6f:3e:7f:f6:31:b2:54:29: 9a:a2:ed:b1:7a:ed:e0:83:c5:f4:24:75:60:1d:6e: 3d:ca:d6:e5:17:84:ea:7a:ca:cc:7b:1b:36:f7:42: 16:2a:3f:95:db:47:aa:66:ad:cd:c2:2f:79:b2:c4: ca:48:3d:60:56:b6:87:1f:e5:a6:87:87:5d:9c:6a: 8c:41:95:e5:c9:99:93:46:1f:f5:ef:c1:d2:81:ba: c9:10:85:fe:8e:44:98:ad:e9:ab:64:fd:a9:09:bd: be:d5:b1:47:79:02:dc:54:1e:0e:ba:1b:17:e7:d8: c6:dc:0e:97:0b:ee:c5:20:83:53:e5:43:d7:0a:18: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1E:32:83:A5:8B:82:C6:D2:D5:05:FE:45:41:02:6B:C9:75:7A:B0 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:78:3d:d1:bc:52:03:1c:80:79:26:32:6b:1f:67:77:a9:8d: 66:02:53:06:10:c0:df:66:26:ba:b2:a6:62:6c:19:da:eb:28: 44:a7:70:f3:9d:bb:2a:20:85:5b:ca:73:aa:51:ba:0c:4e:aa: 2f:28:da:a6:9a:cf:64:16:f5:7a:bf:cd:7b:0e:2d:4e:b3:8a: 6a:ab:1d:2c:ed:f3:58:74:29:59:18:f4:e3:41:2f:f6:97:65: b3:2b:57:a5:b7:36:27:ea:3f:f1:82:ea:81:00:31:66:70:d6: c9:1a:68:8a:04:aa:a4:d6:12:ff:6c:1a:a1:f7:73:45:7d:5c: 90:7c:99:1d:5e:a5:74:03:50:10:f1:cb:b4:00:89:ab:8a:ff: 8e:49:66:46:b0:09:17:05:ec:25:fd:95:2a:ed:66:bc:06:29: 8d:e9:8e:e2:22:2a:dd:ff:92:c1:f5:d0:fd:3f:43:77:ab:e1: a6:9d:92:6a:33:2f:79:40:5d:6b:b9:c6:eb:17:16:4c:f0:27: a4:fc:43:2d:17:e2:82:81:68:06:f4:42:b5:91:07:d5:9b:d1: 5c:da:10:68:4e:81:86:03:53:4b:cf:86:70:5c:4f:ed:e9:59: 22:16:23:2b:15:85:16:ec:15:fc:09:56:9c:c0:60:53:a6:ec: 6b:dd:10:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUwNzAyMjM0NDA4WhcNMjUwNzA5MjM0NDA4WjAYMRYwFAYD VQQDEw02ODY1YzQ0OS05OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JhfqBhTEKFdiv9GRXzEJoGUPO/BpI78b/tT5wC6P2F8zsSV8QH+R2E5Gm7D SKsM/39qbNCf3kjJda4DORY7Es76aldLWyzoh6WVlHUZLT+SZMqfg9JB7m5JOuao aykVTpdlIzBzlEPplWPihktwA2o1NBkFWCBRgUP0xfFBbz5/9jGyVCmaou2xeu3g g8X0JHVgHW49ytblF4TqesrMexs290IWKj+V20eqZq3Nwi95ssTKSD1gVraHH+Wm h4ddnGqMQZXlyZmTRh/178HSgbrJEIX+jkSYremrZP2pCb2+1bFHeQLcVB4OuhsX 59jG3A6XC+7FIINT5UPXChgIlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAeMoOl i4LG0tUF/kVBAmvJdXqwMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTeD3RvFIDHIB5JjJrH2d3qY1mAlMGEMDfZia6sqZibBna6yhEp3Dz nbsqIIVbynOqUboMTqovKNqmms9kFvV6v817Di1Os4pqqx0s7fNYdClZGPTjQS/2 l2WzK1eltzYn6j/xguqBADFmcNbJGmiKBKqk1hL/bBqh93NFfVyQfJkdXqV0A1AQ 8cu0AImriv+OSWZGsAkXBewl/ZUq7Wa8BimN6Y7iIird/5LB9dD9P0N3q+GmnZJq My95QF1rucbrFxZM8Cek/EMtF+KCgWgG9EK1kQfVm9Fc2hBoToGGA1NLz4ZwXE/t 6VkiFiMrFYUW7BX8CVacwGBTpuxr3RCS -----END CERTIFICATE-----Generated at Fri Jul 4 07:39:20 2025 by rpki-client