$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: v8CftrxdKbPTho4Gx1waryRqYCyhruRleCZM2JJlCnE= Subject key identifier: 3A:3E:37:63:30:F8:7C:70:13:7F:EC:69:BB:0B:DB:5A:99:AF:A6:F0 Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:09:48 +0000 Manifest this update: Thu 03 Jul 2025 06:09:48 +0000 Manifest next update: Thu 10 Jul 2025 06:09:47 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: 56XUBx2dV/DogsQHDmF5lq5zIFBei4SW+8XFRS307PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Jul 3 06:09:48 2025 GMT Not After : Jul 10 06:09:47 2025 GMT Subject: CN=68661eac-3aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:26:cf:1b:05:fb:4f:8e:50:96:61:ea:0c: bb:e6:62:f4:54:23:1e:21:43:42:d4:bd:ed:4f:ab: 7b:51:3d:b5:62:77:96:34:73:8f:9a:93:e1:e8:20: 63:a1:2b:36:71:f2:a3:38:02:a2:b1:63:e5:15:57: 84:a1:0e:c1:5e:e7:0c:ab:8c:6f:49:16:b9:ba:53: a4:3b:03:09:fa:10:f0:87:51:27:11:f4:20:0c:69: 98:ca:5f:be:1c:b9:f5:58:b3:e7:37:84:ad:29:2f: f4:90:da:99:38:39:27:a0:f3:87:1a:c6:fa:37:7f: 38:31:72:bb:a3:2e:11:ef:1a:fc:94:a8:b0:f6:2e: 6e:60:29:f5:cd:80:bb:fd:02:df:c0:3b:14:41:52: 19:28:1c:86:50:0b:bc:92:97:ac:8c:9c:00:4e:14: 1b:f9:1b:91:d6:5b:70:f3:05:ed:8b:a2:2f:73:ea: 24:90:4a:53:57:11:1f:29:5e:16:50:93:8b:fb:2e: e5:34:2f:03:96:41:97:23:c9:80:bb:7f:43:06:75: df:55:4f:c3:db:fa:f6:50:8b:cc:29:77:c7:4a:c7: 19:61:35:06:8c:61:1b:61:a5:84:3b:05:21:c7:68: fc:3c:08:ab:51:8f:55:2a:27:bf:22:61:21:22:54: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:37:63:30:F8:7C:70:13:7F:EC:69:BB:0B:DB:5A:99:AF:A6:F0 X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:58:d7:5b:91:d8:a5:f6:71:50:a7:92:39:a3:32:42:71:49: 43:ed:c5:90:e7:9b:2d:cf:86:1b:4e:f7:49:76:9f:ca:72:61: 18:cb:8e:15:00:97:cb:33:28:32:ff:30:c0:55:d7:3c:db:8b: 91:40:25:53:ee:5a:b2:44:3a:48:c5:db:ee:94:2a:2a:04:f2: 1a:e4:05:c0:07:de:79:5a:8d:3e:15:81:27:81:3d:9b:90:9e: 12:73:9a:08:97:9b:f2:8b:7e:d9:f0:6a:0b:b2:9e:9b:d3:0b: 6c:c3:af:d0:f7:e7:f4:94:e5:ec:87:7d:61:5b:81:dc:6b:af: 16:57:c8:57:b3:73:b7:aa:b4:45:09:22:6e:14:75:ac:0c:8d: fe:8b:3c:67:a4:05:ee:d6:be:1b:27:58:e8:03:59:46:11:5e: ed:a3:98:76:d8:a8:44:b8:34:23:d8:c7:ed:28:00:bb:24:16: ad:b8:ef:97:9b:5b:2d:64:7b:a1:50:3d:73:d7:ac:1e:fa:6d: 90:26:ac:37:83:d9:d4:58:44:52:ef:f2:60:d5:ec:1e:49:4d: 10:52:7c:f0:55:ad:23:f9:ff:c5:80:c5:a0:4e:be:69:15:f6: 5a:67:99:17:e4:18:01:d1:97:ce:7e:dd:c6:6f:d5:17:99:d4: ab:e4:d5:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUwNzAzMDYwOTQ4WhcNMjUwNzEwMDYwOTQ3WjAYMRYwFAYD VQQDEw02ODY2MWVhYy0zYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrkmzxsF+0+OUJZh6gy75mL0VCMeIUNC1L3tT6t7UT21YneWNHOPmpPh6CBj oSs2cfKjOAKisWPlFVeEoQ7BXucMq4xvSRa5ulOkOwMJ+hDwh1EnEfQgDGmYyl++ HLn1WLPnN4StKS/0kNqZODknoPOHGsb6N384MXK7oy4R7xr8lKiw9i5uYCn1zYC7 /QLfwDsUQVIZKByGUAu8kpesjJwAThQb+RuR1ltw8wXti6Ivc+okkEpTVxEfKV4W UJOL+y7lNC8DlkGXI8mAu39DBnXfVU/D2/r2UIvMKXfHSscZYTUGjGEbYaWEOwUh x2j8PAirUY9VKie/ImEhIlRihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo+N2Mw +HxwE3/sabsL21qZr6bwMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFWNdbkdil9nFQp5I5ozJCcUlD7cWQ55stz4YbTvdJdp/KcmEYy44V AJfLMygy/zDAVdc824uRQCVT7lqyRDpIxdvulCoqBPIa5AXAB955Wo0+FYEngT2b kJ4Sc5oIl5vyi37Z8GoLsp6b0wtsw6/Q9+f0lOXsh31hW4Hca68WV8hXs3O3qrRF CSJuFHWsDI3+izxnpAXu1r4bJ1joA1lGEV7to5h22KhEuDQj2MftKAC7JBatuO+X m1stZHuhUD1z16we+m2QJqw3g9nUWERS7/Jg1eweSU0QUnzwVa0j+f/FgMWgTr5p FfZaZ5kX5BgB0ZfOft3Gb9UXmdSr5NWG -----END CERTIFICATE-----Generated at Fri Jul 4 22:24:08 2025 by rpki-client