$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json) Hash identifier: 38G2TqsZVyIYXUW1dxLZSvSS2Kri8K88tje/5omotQo= Subject key identifier: 19:68:14:3B:A4:A7:F2:EC:B2:94:50:7D:A8:10:6F:AB:46:DC:D7:45 Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft Manifest number: 4F Signing time: Thu 03 Jul 2025 07:31:13 +0000 Manifest this update: Thu 03 Jul 2025 07:31:13 +0000 Manifest next update: Thu 10 Jul 2025 07:31:13 +0000 Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: mST7V9TnxdmqXUNArkBJcX+iqXd09bOkg/iSPZLPS7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Validity Not Before: Jul 3 07:31:13 2025 GMT Not After : Jul 10 07:31:13 2025 GMT Subject: CN=686631c1-010f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:58:59:4f:34:15:f3:02:2f:c0:dd:0c:84: 1f:08:d3:79:25:c6:b0:86:70:7a:4b:72:55:a5:33: ff:8a:dd:79:fc:1d:04:c7:2e:13:da:7d:11:d1:16: b4:ac:bd:4a:3b:42:42:67:37:a3:01:54:ff:a9:8b: 5f:90:0d:1a:25:a1:58:0a:8d:4d:9e:9f:42:20:51: 51:1a:0c:6f:ae:10:89:08:16:f1:36:80:21:d3:05: d4:cc:e3:47:07:8c:cb:75:f7:2a:6f:4d:a4:56:89: 96:bf:4c:a8:b4:30:0f:2f:07:dd:e1:95:e9:ce:42: 25:73:60:14:18:d9:d6:ea:ab:75:ce:a4:0f:c9:14: 5b:8c:2b:8b:e2:dc:f3:1a:33:3c:0c:1f:2e:c4:a2: e1:39:f7:0b:69:e8:1f:96:87:d6:e8:bc:78:03:9a: d7:80:8d:a6:50:4f:6b:0a:a1:e1:66:12:96:8b:98: 1a:18:40:d8:19:4c:40:95:99:46:c0:6d:7a:e9:ef: 9c:4e:cc:dc:8a:d1:31:3b:45:9c:0c:21:1c:2b:34: 6d:57:07:64:65:df:a2:52:55:04:f7:f8:5f:d8:82: 98:f1:3e:6b:f8:9a:e9:41:80:1d:4c:76:15:42:40: 6d:6f:b3:b7:28:83:ae:e4:97:fc:b0:45:6b:96:1a: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:14:3B:A4:A7:F2:EC:B2:94:50:7D:A8:10:6F:AB:46:DC:D7:45 X509v3 Authority Key Identifier: keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:2c:f7:c3:00:26:d1:c2:40:5c:9a:6a:26:cd:3e:36:40:07: 7a:50:fd:62:25:1b:16:a6:ae:55:5d:66:49:2c:d2:9d:8e:9b: 04:5e:4a:7d:fa:eb:fe:bf:c0:b8:5f:7c:66:c0:14:f3:50:8e: 5d:bf:38:d3:c2:78:5a:fd:7f:e7:a8:c0:31:d1:a1:be:72:aa: 9e:0a:47:18:18:dc:5e:1c:11:06:ff:db:8f:0b:c2:91:c1:79: d6:ea:d5:f5:33:b4:42:80:4a:5e:9e:f1:7f:15:2e:c4:a1:eb: 8f:6e:f9:73:4d:67:83:2b:a8:e2:43:c4:7b:3e:3b:a1:cc:48: 59:4f:6d:da:65:46:20:d4:89:4f:38:c8:b3:57:6c:1a:eb:52: 0f:cf:ad:66:80:43:9c:af:b7:e3:ed:bd:53:a5:b9:f9:be:39: f9:42:2b:7f:89:f3:3a:95:9a:07:53:23:cc:a8:8e:23:70:b9: 04:f0:6d:28:69:1e:a9:7f:4c:be:08:5d:4e:97:7b:41:cc:eb: 61:a0:70:e6:59:11:40:aa:2e:6e:a2:45:f8:5c:51:e8:64:de: 2d:0c:83:00:bc:1e:cc:6a:bd:1c:8b:0e:2d:1d:a8:e7:ea:c0: 37:72:26:d7:dd:da:27:59:c8:20:01:2d:4f:12:ed:b0:2c:48: ee:31:be:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDlGNTExMC8GA1UEBRMoMTc4QzZCQjQ3NkIzN0M1RjE1RTZFOTUzQUJFNENCQ0Yw ODYxMDgyQjAeFw0yNTA3MDMwNzMxMTNaFw0yNTA3MTAwNzMxMTNaMBgxFjAUBgNV BAMTDTY4NjYzMWMxLTAxMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9F1hZTzQV8wIvwN0MhB8I03klxrCGcHpLclWlM/+K3Xn8HQTHLhPafRHRFrSs vUo7QkJnN6MBVP+pi1+QDRoloVgKjU2en0IgUVEaDG+uEIkIFvE2gCHTBdTM40cH jMt19ypvTaRWiZa/TKi0MA8vB93hlenOQiVzYBQY2dbqq3XOpA/JFFuMK4vi3PMa MzwMHy7EouE59wtp6B+Wh9bovHgDmteAjaZQT2sKoeFmEpaLmBoYQNgZTECVmUbA bXrp75xOzNyK0TE7RZwMIRwrNG1XB2Rl36JSVQT3+F/YgpjxPmv4mulBgB1MdhVC QG1vs7cog67kl/ywRWuWGstbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGWgUO6Sn 8uyylFB9qBBvq0bc10UwHwYDVR0jBBgwFoAUF4xrtHazfF8V5ulTq+TLzwhhCCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOUY1LzNBODI5MEU4REZE QTExRUY4QjQ3ODYyNEM0RjlBRTAyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaEND cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRjR4cnRIYXpmRjhWNXVsVHEtVEx6d2hoQ0NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OUY1LzNBODI5MEU4REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyL0Y0eHJ0SGF6ZkY4 VjV1bFRxLVRMendoaENDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMs98MAJtHCQFyaaibNPjZAB3pQ/WIlGxamrlVdZkks0p2OmwReSn36 6/6/wLhffGbAFPNQjl2/ONPCeFr9f+eowDHRob5yqp4KRxgY3F4cEQb/248LwpHB edbq1fUztEKASl6e8X8VLsSh649u+XNNZ4MrqOJDxHs+O6HMSFlPbdplRiDUiU84 yLNXbBrrUg/PrWaAQ5yvt+PtvVOlufm+OflCK3+J8zqVmgdTI8yojiNwuQTwbShp Hql/TL4IXU6Xe0HM62GgcOZZEUCqLm6iRfhcUehk3i0MgwC8HsxqvRyLDi0dqOfq wDdyJtfd2idZyCABLU8S7bAsSO4xvu4= -----END CERTIFICATE-----Generated at Thu Jul 3 10:40:26 2025 by rpki-client