$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: cTgfI8tXshE9SNp7MnvMJ0Q0v2nKS6wLc7cZRoRiXYg= Subject key identifier: ED:56:A0:20:2C:40:9A:9D:77:BF:7E:45:C0:1C:AB:05:E2:AB:46:A8 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: A8 Signing time: Thu 03 Jul 2025 06:19:59 +0000 Manifest this update: Thu 03 Jul 2025 06:19:58 +0000 Manifest next update: Thu 10 Jul 2025 06:19:58 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: NnJxuHg8hHEwvm8Wo4419qUGAiKpvECxbZ8VK1KU7R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Jul 3 06:19:58 2025 GMT Not After : Jul 10 06:19:58 2025 GMT Subject: CN=6866210e-da95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:6d:6d:98:00:32:a1:d3:04:71:7e:69:c3: e5:4d:32:29:89:91:c1:c7:48:7d:d3:24:a4:07:3d: f0:c5:43:6b:b2:48:e8:1f:94:6f:f5:19:13:c1:73: 09:b9:ce:7a:cb:c4:43:c8:ae:f0:cd:57:0b:f2:7c: 81:af:f4:48:4d:e3:a7:67:5b:74:92:8f:15:e8:7e: ec:e3:90:fb:f4:4e:3c:f5:3e:9d:06:1e:e6:55:d9: 2d:eb:52:99:30:93:ae:08:d8:74:4d:38:54:01:db: 73:c7:0e:e9:47:55:aa:09:32:2e:c9:2f:36:4d:0c: 56:0c:be:03:a3:6a:7b:da:34:85:72:12:9d:57:c2: bd:2a:42:94:63:2d:06:49:b2:06:8d:8e:9f:98:e7: da:ed:91:6a:a2:bc:2b:f9:01:45:f9:03:b8:64:5c: 42:d2:ca:f0:d8:e4:83:0c:14:8c:93:ef:28:75:bf: c1:aa:22:71:32:6f:40:43:75:e8:46:fd:ee:35:24: 05:cc:29:2c:2c:1f:f6:6a:89:9f:b0:b4:82:dc:b8: a7:6a:43:5b:8f:00:f5:e9:67:f2:fa:24:d5:5a:04: a9:8e:ec:66:05:54:97:70:33:98:90:39:7f:3c:be: 71:f4:31:9a:d9:38:89:16:0f:80:df:2f:a5:8c:66: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:56:A0:20:2C:40:9A:9D:77:BF:7E:45:C0:1C:AB:05:E2:AB:46:A8 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:79:27:ac:8d:16:9c:3f:8b:7b:e6:e9:c0:96:c1:c3:a9:d9: 3c:59:3f:13:6c:4c:fe:99:d8:39:bd:c0:71:0b:0c:d1:fa:eb: 35:df:94:4f:b4:c9:5c:f4:26:98:3e:b9:72:70:e0:a7:60:41: ad:04:99:f5:e3:90:94:d2:ef:ea:86:47:58:2b:26:e0:87:8f: dc:1a:e4:b6:4d:30:2d:bc:e0:b7:44:4a:a1:7b:45:db:16:37: 0a:b4:d8:81:08:77:cb:0f:11:86:c9:d8:f0:47:cb:2c:83:36: cd:fe:59:7d:79:65:bf:b2:94:8c:db:75:a5:a0:c1:a9:9e:7c: 9a:49:2a:00:ea:63:6c:7c:35:93:09:54:32:c0:8e:14:ab:5b: 37:e4:98:f5:f4:cd:6d:ec:62:11:d9:8f:da:ac:41:0b:77:29: 10:24:2b:73:cd:0a:6d:f7:67:2d:16:7c:4c:25:49:3d:59:7c: d9:5f:d5:44:bc:6d:56:7b:2c:ea:31:21:72:78:e6:18:b8:53: ff:9e:72:8b:33:b8:81:c2:79:5e:5f:cc:58:7a:ba:dd:a4:c3: ea:f1:1e:dd:40:e5:b8:37:10:5c:4b:a1:0b:62:aa:20:2b:1e: cc:be:0f:a6:38:35:eb:fd:3a:1f:de:d0:4f:17:e5:81:f5:f8: dd:d8:8b:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwNzAzMDYxOTU4WhcNMjUwNzEwMDYxOTU4WjAYMRYwFAYD VQQDEw02ODY2MjEwZS1kYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjltbZgAMqHTBHF+acPlTTIpiZHBx0h90ySkBz3wxUNrskjoH5Rv9RkTwXMJ uc56y8RDyK7wzVcL8nyBr/RITeOnZ1t0ko8V6H7s45D79E489T6dBh7mVdkt61KZ MJOuCNh0TThUAdtzxw7pR1WqCTIuyS82TQxWDL4Do2p72jSFchKdV8K9KkKUYy0G SbIGjY6fmOfa7ZFqorwr+QFF+QO4ZFxC0srw2OSDDBSMk+8odb/BqiJxMm9AQ3Xo Rv3uNSQFzCksLB/2aomfsLSC3LinakNbjwD16Wfy+iTVWgSpjuxmBVSXcDOYkDl/ PL5x9DGa2TiJFg+A3y+ljGYx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1WoCAs QJqdd79+RcAcqwXiq0aoMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfeSesjRacP4t75unAlsHDqdk8WT8TbEz+mdg5vcBxCwzR+us135RP tMlc9CaYPrlycOCnYEGtBJn145CU0u/qhkdYKybgh4/cGuS2TTAtvOC3REqhe0Xb FjcKtNiBCHfLDxGGydjwR8ssgzbN/ll9eWW/spSM23WloMGpnnyaSSoA6mNsfDWT CVQywI4Uq1s35Jj19M1t7GIR2Y/arEELdykQJCtzzQpt92ctFnxMJUk9WXzZX9VE vG1WeyzqMSFyeOYYuFP/nnKLM7iBwnleX8xYerrdpMPq8R7dQOW4NxBcS6ELYqog Kx7Mvg+mODXr/Tof3tBPF+WB9fjd2IuT -----END CERTIFICATE-----Generated at Thu Jul 3 21:43:22 2025 by rpki-client