$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: QGxWSaPrdHmuv9mlmHw+G81bw03DFTMdNf87eKbq6s4= Subject key identifier: C4:1A:EA:9E:DA:04:AB:E9:7C:76:EB:C2:23:0F:51:26:51:ED:2F:89 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: C2 Signing time: Sat 23 Aug 2025 05:59:42 +0000 Manifest this update: Sat 23 Aug 2025 05:59:41 +0000 Manifest next update: Sat 30 Aug 2025 05:59:41 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: 6CyKQF8JxQjqsxjr7qg9/wh3uwF7GvuM3oS5QyskkQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Aug 23 05:59:41 2025 GMT Not After : Aug 30 05:59:41 2025 GMT Subject: CN=68a958ce-8dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:6c:5e:63:10:01:6c:c2:6a:8a:df:c4:94: 3b:37:97:e3:97:cc:be:c6:48:d3:92:61:bd:64:14: 2c:99:56:3d:1c:2e:43:18:54:fd:d0:05:01:be:1c: 8c:6e:77:fd:97:aa:7f:46:af:fb:30:82:10:d6:3e: 8e:76:25:0a:c3:7a:35:56:ee:7c:7c:6f:95:84:f8: 63:23:a8:01:54:a1:4e:37:70:c0:09:6e:52:40:4c: f2:66:aa:9f:80:38:23:63:16:15:cc:38:b9:4b:fe: 4e:d7:c6:c9:05:7b:79:c5:19:7e:fa:6a:d8:c8:6a: bd:c5:a3:46:9e:91:70:57:c9:d6:81:08:11:c8:c3: 15:ca:99:5a:a5:36:98:b1:cf:30:c9:22:86:f9:19: ce:52:60:7b:9c:74:09:65:27:4f:80:9a:2b:4b:b4: 18:57:45:ef:da:77:07:83:e8:3f:49:ea:77:8d:e8: f0:12:8b:48:8a:e1:27:06:b1:ba:e1:12:3e:5e:e0: 75:56:a9:33:e0:36:a7:0f:9b:26:5a:d9:09:59:fb: 54:38:70:7e:81:bc:eb:a3:31:e1:12:9d:fc:d7:f8: 78:96:4f:32:9b:3f:24:9f:73:de:73:99:26:24:8c: 29:88:44:83:df:27:70:3c:16:27:d3:6e:fd:f0:b8: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:EA:9E:DA:04:AB:E9:7C:76:EB:C2:23:0F:51:26:51:ED:2F:89 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ca:2e:a7:5a:06:55:91:f7:10:fd:43:e0:55:71:cb:f6:9c: 06:5b:6a:b7:af:df:6f:0a:c8:e9:a5:a7:3b:07:80:c6:d8:a1: b2:e9:62:92:68:32:b4:bf:17:8f:33:1a:6f:b4:a4:4b:cc:30: 0a:b5:69:1f:75:26:86:b7:29:9f:66:7c:92:b3:92:fd:dc:a8: d4:34:38:8a:a6:5e:10:45:81:d4:dd:60:2e:89:b0:68:54:d3: 15:19:86:fe:0c:82:f8:b9:bd:fc:8c:b9:fe:c6:03:4d:fc:11: da:e4:15:9b:3d:4d:16:92:60:af:91:d6:62:da:f9:1e:c4:4a: 83:0e:35:37:dc:aa:41:70:f6:ec:26:d0:9a:15:f7:c3:01:f2: 7a:7c:4d:05:9d:11:c2:bc:1f:f9:dc:54:66:59:fd:98:5d:60: 33:37:24:bb:d0:0f:1f:65:07:86:c6:c5:39:87:5c:32:73:df: 73:d7:42:b4:76:4c:ca:8f:30:8c:9c:9c:b5:7c:f4:4f:d3:c1: 27:dc:5c:a3:ad:9d:06:e3:1b:98:77:75:9b:c9:92:be:60:4e: b6:21:41:38:19:3a:04:af:a3:ab:ef:fd:4b:c3:1c:1a:d4:02: 52:eb:c1:0e:41:cf:0f:0e:30:09:ac:07:4b:ca:0d:ea:b0:b1: a0:e3:6d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwODIzMDU1OTQxWhcNMjUwODMwMDU1OTQxWjAYMRYwFAYD VQQDEw02OGE5NThjZS04ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsVsXmMQAWzCaorfxJQ7N5fjl8y+xkjTkmG9ZBQsmVY9HC5DGFT90AUBvhyM bnf9l6p/Rq/7MIIQ1j6OdiUKw3o1Vu58fG+VhPhjI6gBVKFON3DACW5SQEzyZqqf gDgjYxYVzDi5S/5O18bJBXt5xRl++mrYyGq9xaNGnpFwV8nWgQgRyMMVyplapTaY sc8wySKG+RnOUmB7nHQJZSdPgJorS7QYV0Xv2ncHg+g/Sep3jejwEotIiuEnBrG6 4RI+XuB1Vqkz4DanD5smWtkJWftUOHB+gbzrozHhEp381/h4lk8ymz8kn3Pec5km JIwpiESD3ydwPBYn02798Lg3MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQa6p7a BKvpfHbrwiMPUSZR7S+JMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtyi6nWgZVkfcQ/UPgVXHL9pwGW2q3r99vCsjppac7B4DG2KGy6WKS aDK0vxePMxpvtKRLzDAKtWkfdSaGtymfZnySs5L93KjUNDiKpl4QRYHU3WAuibBo VNMVGYb+DIL4ub38jLn+xgNN/BHa5BWbPU0WkmCvkdZi2vkexEqDDjU33KpBcPbs JtCaFffDAfJ6fE0FnRHCvB/53FRmWf2YXWAzNyS70A8fZQeGxsU5h1wyc99z10K0 dkzKjzCMnJy1fPRP08En3FyjrZ0G4xuYd3WbyZK+YE62IUE4GToEr6Or7/1Lwxwa 1AJS68EOQc8PDjAJrAdLyg3qsLGg423M -----END CERTIFICATE-----Generated at Sat Aug 23 10:57:42 2025 by rpki-client