$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json) Hash identifier: xkPjXuH+G/BJ/n5FAJH74hnAZPQBHj56mumpNLA8N60= Subject key identifier: DE:FA:98:9C:C2:CA:52:00:CB:38:56:31:60:91:1F:93:26:39:1E:9B Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft Manifest number: 4A Signing time: Thu 03 Jul 2025 07:34:07 +0000 Manifest this update: Thu 03 Jul 2025 07:34:07 +0000 Manifest next update: Thu 10 Jul 2025 07:34:07 +0000 Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: PjV/KNST/ghPLcQsJxDLlzGYqpjTQtoLS5ID3KwePHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Validity Not Before: Jul 3 07:34:07 2025 GMT Not After : Jul 10 07:34:07 2025 GMT Subject: CN=6866326f-1523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:e6:2a:11:b5:99:85:f4:59:73:92:30:ae: db:53:cc:12:17:a9:e4:cf:cc:e4:c2:32:cc:69:9f: bf:50:f8:81:25:ce:bc:83:34:0d:c9:35:8c:82:32: 20:23:4c:52:bc:44:7e:7e:ff:43:cb:53:e5:9d:9d: d1:2f:dd:83:1c:c9:51:e4:41:b5:1f:42:ef:8e:84: 36:fe:6a:5f:31:0c:88:0a:65:bb:0c:b4:20:73:ab: 55:5e:6d:ec:b1:48:1c:ef:23:0e:34:42:ea:30:3d: 57:b5:56:98:85:b3:24:40:19:b1:1f:a2:f1:06:80: 38:30:79:fe:b9:bf:25:a7:a3:90:23:e3:aa:55:fb: 4a:94:b0:29:c9:a1:44:ce:b6:88:0d:1c:dd:bc:5c: 07:1d:d3:ff:a8:75:b3:be:83:99:b8:aa:cb:98:7e: 46:c1:aa:27:11:5d:db:e7:53:2c:e1:af:40:95:94: 34:ad:58:bf:07:47:f7:c7:35:59:e4:56:59:47:9a: 2f:9d:23:b6:9d:ab:a7:07:7e:02:29:2d:0a:94:8b: 69:d3:9b:99:b9:fe:68:15:cb:59:ca:e3:8c:70:4b: 9e:3c:97:59:bd:e6:5d:71:d6:8b:2b:52:bf:67:3c: ed:a5:ea:47:b4:d5:e7:98:53:8e:4b:b2:de:d0:bb: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FA:98:9C:C2:CA:52:00:CB:38:56:31:60:91:1F:93:26:39:1E:9B X509v3 Authority Key Identifier: keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e6:bd:7d:01:a4:8d:0b:91:c0:ed:b4:31:8b:98:26:17:e9: ad:f5:e1:6b:b8:57:ff:dc:18:fe:65:e5:35:20:63:eb:15:fa: bf:e3:da:9c:6a:f6:6d:81:4f:a9:c0:59:5d:10:d1:20:60:fe: 1e:c5:f8:4f:1d:d0:5b:45:bc:1c:8e:a2:c3:89:b7:58:51:10: 20:e4:c8:50:3b:bf:b3:46:a3:bd:72:3a:00:c8:39:dd:18:54: e5:e1:e1:bb:1a:ac:b8:ea:58:b2:32:1a:67:8b:d4:c2:46:c9: 5b:3d:c1:5f:2b:e2:d4:ea:54:fc:d7:d8:e8:44:93:25:f9:81: 04:05:18:04:17:36:ff:91:f1:c6:4f:e9:8d:1e:45:2a:52:3f: 25:ce:87:64:37:06:ee:1f:b2:2d:39:d5:f6:0c:09:ef:c6:fd: 2a:06:ec:eb:55:03:26:16:1a:d1:01:3a:f2:79:01:f2:53:db: c2:10:00:89:cd:2a:49:67:3e:09:5f:4e:ac:d2:00:7f:02:ad: 96:1b:ec:50:c0:ec:de:d5:e4:96:0a:d1:62:b3:ed:51:0a:75: d7:19:a2:1a:bb:ad:35:b2:a9:37:e4:51:af:08:49:cd:da:7e: 19:83:6a:a0:ba:80:06:53:f3:52:db:35:e8:4c:ba:6e:d3:55: 4a:5e:cb:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoRjY3NzE2QTdEMzdEREIwM0RDNTZEMDNBQjkwMkE3MjAz N0VBMTlEOTAeFw0yNTA3MDMwNzM0MDdaFw0yNTA3MTAwNzM0MDdaMBgxFjAUBgNV BAMTDTY4NjYzMjZmLTE1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx6uYqEbWZhfRZc5IwrttTzBIXqeTPzOTCMsxpn79Q+IElzryDNA3JNYyCMiAj TFK8RH5+/0PLU+WdndEv3YMcyVHkQbUfQu+OhDb+al8xDIgKZbsMtCBzq1Vebeyx SBzvIw40QuowPVe1VpiFsyRAGbEfovEGgDgwef65vyWno5Aj46pV+0qUsCnJoUTO togNHN28XAcd0/+odbO+g5m4qsuYfkbBqicRXdvnUyzhr0CVlDStWL8HR/fHNVnk VllHmi+dI7adq6cHfgIpLQqUi2nTm5m5/mgVy1nK44xwS548l1m95l1x1osrUr9n PO2l6ke01eeYU45Lst7Qu4lFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3vqYnMLK UgDLOFYxYJEfkyY5HpswHwYDVR0jBBgwFoAU9ncWp9N92wPcVtA6uQKnIDfqGdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0YzMkNGNEU4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOW5jV3A5Tjkyd1BjVnRBNnVRS25JRGZxR2RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0YzMkNGNEU4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQ Y1Z0QTZ1UUtuSURmcUdkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACbmvX0BpI0LkcDttDGLmCYX6a314Wu4V//cGP5l5TUgY+sV+r/j2pxq 9m2BT6nAWV0Q0SBg/h7F+E8d0FtFvByOosOJt1hRECDkyFA7v7NGo71yOgDIOd0Y VOXh4bsarLjqWLIyGmeL1MJGyVs9wV8r4tTqVPzX2OhEkyX5gQQFGAQXNv+R8cZP 6Y0eRSpSPyXOh2Q3Bu4fsi051fYMCe/G/SoG7OtVAyYWGtEBOvJ5AfJT28IQAInN KklnPglfTqzSAH8CrZYb7FDA7N7V5JYK0WKz7VEKddcZohq7rTWyqTfkUa8ISc3a fhmDaqC6gAZT81LbNehMum7TVUpey2U= -----END CERTIFICATE-----Generated at Thu Jul 3 09:18:28 2025 by rpki-client