$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: E+05OAtU7n2Zn4R3QQd2lytR7gsLF/5Hf4lB7MX2JzM= Subject key identifier: 49:BE:EF:9F:FA:B0:C4:FA:FF:B7:C6:34:6C:2C:39:24:32:37:1D:E7 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 01B7 Signing time: Fri 22 Aug 2025 23:31:33 +0000 Manifest this update: Fri 22 Aug 2025 23:31:32 +0000 Manifest next update: Fri 29 Aug 2025 23:31:32 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: EHdyUNAT06E4PCJ3OHmzWBDxQubYEujdY1MvUuTIfZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Aug 22 23:31:32 2025 GMT Not After : Aug 29 23:31:32 2025 GMT Subject: CN=68a8fdd4-836a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:2f:70:9e:ae:b2:39:0a:87:e6:d6:f7:47: c9:39:4d:74:d7:73:ec:2e:1c:78:94:9b:87:67:15: b8:31:61:10:0c:61:88:3e:6d:53:c4:64:77:ac:f7: a4:cf:0d:ea:c7:cf:0c:43:d8:08:c6:31:86:6b:f5: 67:94:3f:71:27:f0:0d:6a:39:41:be:e2:d9:26:c9: 39:e9:3f:df:08:a9:de:1a:f4:4e:9b:6d:e1:03:c0: 42:2b:fe:b7:8a:38:04:55:dc:a4:42:2e:c3:7d:79: f0:61:b1:22:75:94:ab:82:2f:e9:ef:90:12:b1:8a: 33:b2:dd:74:3f:39:9f:0b:b9:9f:77:f5:be:a4:09: 7a:18:c2:8d:a0:a0:c6:41:f9:dd:c3:89:de:dc:27: 49:8d:94:df:28:71:0b:d5:c0:a6:0f:d8:6c:4f:f4: 19:30:24:d2:0e:16:25:7b:74:33:7f:03:3a:80:da: 0a:1b:eb:11:1b:d4:3d:9b:78:e5:a1:6c:f4:5b:34: e2:07:5e:0c:82:54:e2:4d:28:81:a2:80:28:a5:ac: 7b:5d:9e:10:54:17:4b:dd:22:d3:9a:0b:f8:8d:ac: ce:1b:6b:26:17:f9:32:9b:97:65:47:4e:d5:14:7a: 20:33:0d:c6:54:60:72:79:a3:e1:a7:a0:4e:9b:75: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:EF:9F:FA:B0:C4:FA:FF:B7:C6:34:6C:2C:39:24:32:37:1D:E7 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:17:d1:98:ac:f2:cd:d7:1f:30:11:2b:50:a4:59:e1:1e:81: a6:0d:00:ce:4c:66:bf:f1:f6:c8:ed:06:5c:5e:9c:36:f1:e4: a2:e2:5e:a5:99:46:d5:f0:4b:36:c6:b9:f3:0e:19:6c:71:e9: dd:75:a6:5f:11:ec:1e:3d:a7:50:c0:ca:37:2e:c3:6b:b5:2d: 28:2e:bd:1f:51:5f:f5:70:f5:6e:14:27:01:1a:cc:d9:24:ce: 55:2d:1f:ac:1e:44:52:7e:e7:e8:cc:64:e2:9e:4a:fc:49:85: ed:b2:7d:06:94:33:d2:11:15:7e:98:9b:fb:51:25:05:fe:f0: 4e:c7:d8:4f:18:c5:2e:b9:eb:b8:3d:16:7a:f3:96:d0:ae:20: 02:0e:08:d1:bc:43:dd:6f:6c:cd:b6:88:69:2d:8a:c5:3f:a2: af:47:d7:45:53:a2:87:e3:78:ef:f7:09:99:e1:ec:c5:49:6d: 40:81:c2:70:9b:66:4d:14:e3:02:4c:d2:44:e5:01:8a:67:7b: 73:32:04:bd:59:7d:58:3e:32:15:49:53:55:ae:20:f6:8d:98: ff:32:7e:1b:1b:55:db:e9:92:20:2b:fe:66:75:51:48:d6:c1: 65:f2:88:ce:53:dc:99:13:bc:8d:f1:36:3b:19:aa:54:62:ec: 55:c2:62:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUwODIyMjMzMTMyWhcNMjUwODI5MjMzMTMyWjAYMRYwFAYD VQQDEw02OGE4ZmRkNC04MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21cvcJ6usjkKh+bW90fJOU1013PsLhx4lJuHZxW4MWEQDGGIPm1TxGR3rPek zw3qx88MQ9gIxjGGa/VnlD9xJ/ANajlBvuLZJsk56T/fCKneGvROm23hA8BCK/63 ijgEVdykQi7DfXnwYbEidZSrgi/p75ASsYozst10PzmfC7mfd/W+pAl6GMKNoKDG Qfndw4ne3CdJjZTfKHEL1cCmD9hsT/QZMCTSDhYle3QzfwM6gNoKG+sRG9Q9m3jl oWz0WzTiB14MglTiTSiBooAopax7XZ4QVBdL3SLTmgv4jazOG2smF/kym5dlR07V FHogMw3GVGByeaPhp6BOm3XFLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm+75/6 sMT6/7fGNGwsOSQyNx3nMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIF9GYrPLN1x8wEStQpFnhHoGmDQDOTGa/8fbI7QZcXpw28eSi4l6l mUbV8Es2xrnzDhlscenddaZfEewePadQwMo3LsNrtS0oLr0fUV/1cPVuFCcBGszZ JM5VLR+sHkRSfufozGTinkr8SYXtsn0GlDPSERV+mJv7USUF/vBOx9hPGMUuueu4 PRZ685bQriACDgjRvEPdb2zNtohpLYrFP6KvR9dFU6KH43jv9wmZ4ezFSW1AgcJw m2ZNFOMCTNJE5QGKZ3tzMgS9WX1YPjIVSVNVriD2jZj/Mn4bG1Xb6ZIgK/5mdVFI 1sFl8ojOU9yZE7yN8TY7GapUYuxVwmLq -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:10 2025 by rpki-client