$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json) Hash identifier: 5wi0OWKFjk7pnGKD3cNWhLHRDGJyUqFxrdldMJAg8M4= Subject key identifier: 07:CB:7C:83:00:2F:7B:70:18:2F:40:FB:3E:95:93:0D:A1:6B:F0:F2 Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft Manifest number: 34B0 Signing time: Fri 22 Aug 2025 14:51:51 +0000 Manifest this update: Fri 22 Aug 2025 14:51:51 +0000 Manifest next update: Fri 29 Aug 2025 14:51:51 +0000 Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: AULmZHM0GJj9hAy6WlmMV/uvFHG4wyRnfDA9YA5mftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Validity Not Before: Aug 22 14:51:51 2025 GMT Not After : Aug 29 14:51:51 2025 GMT Subject: CN=68a88407-a7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:7a:2a:33:99:e9:e9:d7:9d:01:bd:6d:82: cc:3c:3d:c6:db:fb:01:3c:c6:0e:b0:72:9b:1f:17: 2d:a6:83:ab:66:cc:89:af:2b:ab:3b:2a:6b:59:20: ce:d1:19:f0:99:c4:4b:49:ca:52:1c:dd:90:94:e0: 46:18:4e:86:0d:e3:c9:1c:55:0b:3c:f0:7a:7c:fb: f2:61:54:b1:2e:40:b7:35:8c:65:5a:03:80:09:90: 8b:11:4b:d7:61:0e:13:90:8e:f9:fe:06:49:b3:0c: ee:93:ed:10:85:81:9e:91:0b:7e:c9:e2:6a:85:7e: ca:d9:38:dd:00:df:d0:ca:f0:70:96:d3:57:4b:79: 0e:35:6f:bc:f0:d3:0c:6e:c8:c1:fc:a8:e1:8b:f5: 1b:70:7f:ac:e3:80:a0:e1:50:22:82:24:30:f1:86: 59:6c:dd:9b:e0:6b:aa:be:36:b7:30:17:a8:8f:28: 57:3b:4e:01:1a:fa:49:5d:76:8c:52:36:ba:4e:73: 32:e9:a6:fa:a8:04:7e:db:97:95:fa:a0:8b:d4:96: 03:07:40:69:7a:39:7a:a1:96:d5:a8:bf:da:25:7d: 6b:b8:93:9e:53:dd:61:ab:dd:d9:53:89:be:f0:b3: 16:f3:34:41:83:e3:e3:c5:3c:56:25:2a:33:16:74: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CB:7C:83:00:2F:7B:70:18:2F:40:FB:3E:95:93:0D:A1:6B:F0:F2 X509v3 Authority Key Identifier: keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:3e:56:e5:4e:45:96:ad:81:26:6f:fc:75:8f:4e:46:a2:a6: 4d:1f:ed:ef:f2:38:3c:c1:e1:d5:bb:f8:61:02:af:11:d6:83: 80:1e:0b:f4:1a:60:95:dc:9b:a3:a6:15:34:53:74:cc:3b:4c: 75:b1:40:52:e3:c2:16:fe:8e:f5:2e:15:d0:dd:41:c8:fc:05: 73:f0:44:65:fa:94:90:f8:a0:56:28:c5:07:3b:bf:2e:28:f6: 76:d6:00:25:b1:25:42:17:01:e8:02:ec:d1:17:e4:08:41:3a: c4:a3:da:cb:9d:9c:ec:62:7f:91:ee:e5:2d:39:88:c1:79:a8: 75:b5:c5:a0:a0:09:40:fb:d1:81:62:92:32:83:cf:d7:59:53: 48:2a:6f:79:f4:e6:96:6c:39:1e:56:2f:9b:9d:60:22:9f:61: 6c:14:c4:a4:74:fd:3e:27:5f:b6:ed:a6:e6:3e:6f:39:ab:cd: 8d:41:e9:21:c9:a9:41:10:e8:09:5d:de:f1:f1:1c:af:1f:0f: aa:a0:6a:e6:69:23:27:44:f1:92:30:83:76:16:b0:d6:a0:a7: f0:8e:cc:4d:5e:81:cc:03:df:d1:61:f0:30:d9:42:1a:1d:3c: 09:2d:82:c5:55:b7:9c:e8:fb:4f:da:64:7d:66:8d:68:51:5f: 4e:27:14:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2 QTY2MjQyRjEwHhcNMjUwODIyMTQ1MTUxWhcNMjUwODI5MTQ1MTUxWjAYMRYwFAYD VQQDEw02OGE4ODQwNy1hN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN56KjOZ6enXnQG9bYLMPD3G2/sBPMYOsHKbHxctpoOrZsyJryurOyprWSDO 0RnwmcRLScpSHN2QlOBGGE6GDePJHFULPPB6fPvyYVSxLkC3NYxlWgOACZCLEUvX YQ4TkI75/gZJswzuk+0QhYGekQt+yeJqhX7K2TjdAN/QyvBwltNXS3kONW+88NMM bsjB/Kjhi/UbcH+s44Cg4VAigiQw8YZZbN2b4Guqvja3MBeojyhXO04BGvpJXXaM Uja6TnMy6ab6qAR+25eV+qCL1JYDB0Bpejl6oZbVqL/aJX1ruJOeU91hq93ZU4m+ 8LMW8zRBg+PjxTxWJSozFnSyuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfLfIMA L3twGC9A+z6Vkw2ha/DyMB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy WkNfbTltek5vb1pxWmlRdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJPlblTkWWrYEmb/x1j05GoqZNH+3v8jg8weHVu/hhAq8R1oOAHgv0 GmCV3JujphU0U3TMO0x1sUBS48IW/o71LhXQ3UHI/AVz8ERl+pSQ+KBWKMUHO78u KPZ21gAlsSVCFwHoAuzRF+QIQTrEo9rLnZzsYn+R7uUtOYjBeah1tcWgoAlA+9GB YpIyg8/XWVNIKm959OaWbDkeVi+bnWAin2FsFMSkdP0+J1+27abmPm85q82NQekh yalBEOgJXd7x8RyvHw+qoGrmaSMnRPGSMIN2FrDWoKfwjsxNXoHMA9/RYfAw2UIa HTwJLYLFVbec6PtP2mR9Zo1oUV9OJxTB -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:11 2025 by rpki-client