$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: xYSCpy0Ih8xQT09gIt/qFPmVU7m9yYGDUvF3kqvoGHg= Subject key identifier: D2:5F:2D:E1:F1:92:56:95:03:97:19:93:B0:30:95:64:37:8D:3E:ED Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: 6F Signing time: Tue 01 Jul 2025 07:45:43 +0000 Manifest this update: Tue 01 Jul 2025 07:45:42 +0000 Manifest next update: Tue 08 Jul 2025 07:45:42 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: 3NJtKgEErjy5vVACWjxZ1AeWRdAN4J1rTlpSCNuGnwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Jul 1 07:45:42 2025 GMT Not After : Jul 8 07:45:42 2025 GMT Subject: CN=68639227-7379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:65:e6:30:10:8d:1c:3b:cc:cd:f6:38:52: 01:ad:7d:6f:51:14:9b:5a:26:93:cf:c1:a6:01:1e: 14:fd:b2:83:28:2d:aa:fa:e3:c3:c2:1a:c0:e5:1b: 59:b6:19:f5:03:b9:7b:7f:e0:ae:b1:c9:ed:8f:02: 40:98:f0:6c:c2:9a:dd:60:1d:11:45:ed:90:46:18: 4f:60:2a:a1:a2:18:7f:92:d8:42:bb:77:d6:f9:ea: 7f:e3:b5:44:f9:ef:be:10:26:e6:e2:cd:80:cc:02: 88:ed:92:0b:71:5d:d4:6d:c3:91:30:c2:2c:86:7e: b9:54:39:6c:3a:b2:e3:60:f7:3f:65:69:11:f5:9d: f7:67:bc:27:6f:58:a7:42:46:ba:eb:76:ee:ec:ea: b2:7b:d9:a4:d4:24:fe:8a:51:e6:bc:8b:e3:31:27: 8e:00:be:0d:c1:85:4a:06:03:f8:b9:44:50:0b:bf: 08:ce:8c:5b:8c:b7:18:0d:ac:f0:4f:2b:6d:a7:3c: c2:71:34:b7:95:09:85:a9:a0:1b:b7:39:c3:2f:59: 7b:08:ff:7b:1f:96:29:e5:32:db:c7:19:3a:05:f8: 15:11:ab:3b:1d:a3:eb:e3:0d:1c:26:84:4b:09:d3: 0b:ca:83:9e:d8:ed:be:cb:35:53:7b:5d:e6:dc:21: 82:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:2D:E1:F1:92:56:95:03:97:19:93:B0:30:95:64:37:8D:3E:ED X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a0:fb:31:3d:b1:7d:bf:7d:6d:c9:35:ae:ea:40:c6:f8:2f: a5:1d:ee:dd:20:7d:2c:dd:98:fe:c3:1d:8b:8a:bb:fc:f8:eb: 5d:d7:17:4d:31:a0:e9:78:62:86:57:53:41:aa:ad:53:64:07: e2:c3:74:eb:7f:47:9e:fc:86:58:e4:99:00:ad:50:42:19:6a: c3:25:ff:a7:40:01:fb:03:47:22:32:35:ec:10:84:9d:31:cd: 65:dc:7c:2b:8c:f0:b4:bd:1c:9d:83:f2:d0:1e:c2:73:4b:1f: 24:42:59:be:68:0b:65:71:8a:15:e6:b0:10:4a:c7:44:dc:e4: 8b:db:f4:46:84:72:16:2d:85:71:85:a7:e0:85:75:a3:e7:75: 41:22:e7:bf:63:59:0a:04:22:e4:f3:81:73:19:b4:b7:10:73: 64:49:c9:e6:4b:45:7f:d9:31:cd:f5:37:67:74:3c:e0:91:67: b0:ec:d6:ea:37:db:76:d9:39:a2:c9:17:c5:45:24:de:4a:93: 36:14:0c:fe:fd:b0:0f:bd:5b:ec:ae:35:ce:33:72:8d:12:6f: d8:b7:64:56:ed:5c:6b:36:f7:98:d0:1e:7c:65:66:18:61:da: cb:40:9a:99:88:a0:6f:c5:69:10:73:0d:bf:73:56:89:7b:7d: aa:f8:04:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTkzRTExMC8GA1UEBRMoRTBBQjZEOTc3MjY1REIwRDVDNThENDMzQTI4QjNDQzIw NTFBMEMyOTAeFw0yNTA3MDEwNzQ1NDJaFw0yNTA3MDgwNzQ1NDJaMBgxFjAUBgNV BAMTDTY4NjM5MjI3LTczNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSWGXmMBCNHDvMzfY4UgGtfW9RFJtaJpPPwaYBHhT9soMoLar648PCGsDlG1m2 GfUDuXt/4K6xye2PAkCY8GzCmt1gHRFF7ZBGGE9gKqGiGH+S2EK7d9b56n/jtUT5 774QJubizYDMAojtkgtxXdRtw5EwwiyGfrlUOWw6suNg9z9laRH1nfdnvCdvWKdC Rrrrdu7s6rJ72aTUJP6KUea8i+MxJ44Avg3BhUoGA/i5RFALvwjOjFuMtxgNrPBP K22nPMJxNLeVCYWpoBu3OcMvWXsI/3sflinlMtvHGToF+BURqzsdo+vjDRwmhEsJ 0wvKg57Y7b7LNVN7XebcIYLdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0l8t4fGS VpUDlxmTsDCVZDeNPu0wHwYDVR0jBBgwFoAU4Kttl3Jl2w1cWNQzoos8wgUaDCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTNFLzQ3MUIzNzI4Qjc5 QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURD ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEt0dGwzSmwydzFjV05Rem9vczh3Z1VhRENrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTNFLzQ3MUIzNzI4Qjc5QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncx Y1dOUXpvb3M4d2dVYURDay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIig+zE9sX2/fW3JNa7qQMb4L6Ud7t0gfSzdmP7DHYuKu/z4613XF00x oOl4YoZXU0GqrVNkB+LDdOt/R578hljkmQCtUEIZasMl/6dAAfsDRyIyNewQhJ0x zWXcfCuM8LS9HJ2D8tAewnNLHyRCWb5oC2VxihXmsBBKx0Tc5Ivb9EaEchYthXGF p+CFdaPndUEi579jWQoEIuTzgXMZtLcQc2RJyeZLRX/ZMc31N2d0POCRZ7Ds1uo3 23bZOaLJF8VFJN5KkzYUDP79sA+9W+yuNc4zco0Sb9i3ZFbtXGs295jQHnxlZhhh 2stAmpmIoG/FaRBzDb9zVol7far4BE8= -----END CERTIFICATE-----Generated at Wed Jul 2 22:46:31 2025 by rpki-client