$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: 8NC2BWM7RBmghbB21Ni/CA10MmKJ05NoXJRRvbP+M+o= Subject key identifier: E7:BD:4E:56:B8:F1:36:EB:F5:35:CD:43:CB:23:83:EC:65:E3:1A:2C Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 01B1 Signing time: Sun 10 Aug 2025 23:27:52 +0000 Manifest this update: Sun 10 Aug 2025 23:27:51 +0000 Manifest next update: Sun 17 Aug 2025 23:27:51 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: 4laoGXhZG1XreI3v/qZPlJgxN8znOuM1WcbGopOL+DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Aug 10 23:27:51 2025 GMT Not After : Aug 17 23:27:51 2025 GMT Subject: CN=68992af8-05a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:ba:28:9c:ca:5f:5f:33:0e:83:a8:1b:b8: ec:a8:ad:88:fa:94:2a:15:51:7c:1b:14:eb:fc:e7: b7:ce:79:19:0e:19:33:20:f9:71:00:3e:85:b5:ac: b8:b4:0c:6d:56:16:2f:08:19:31:73:6b:c5:5b:d4: 2b:01:8c:16:ef:44:07:41:a7:2f:1b:ba:8c:01:94: 24:75:4d:dc:f9:4d:0f:05:60:1f:03:10:0d:a2:4d: 3e:02:7a:47:c7:7a:1e:d2:07:65:e7:d1:06:f6:ef: 4e:29:c4:6e:88:89:9a:ab:60:7a:e8:57:25:1d:e9: d8:d1:a2:44:7f:69:f7:a4:3d:d1:bd:7c:c6:e7:76: e5:d4:22:58:48:69:98:8a:f2:b6:8b:5b:94:c4:31: 71:08:9a:b1:b7:40:e6:0d:76:a0:5e:4c:cd:be:2d: fa:3b:8e:7c:63:62:ee:30:5c:41:dc:0c:7f:49:05: 54:b4:69:c1:42:e9:88:b1:b6:22:cc:8f:cf:1b:f8: 07:06:3b:c5:e8:cd:79:6f:19:ff:1f:e6:d7:42:23: b6:7b:84:c8:4d:46:9e:6d:07:cc:9e:16:5a:6d:41: 0b:5c:a7:a2:58:26:e6:ec:01:11:99:d8:7c:39:2e: 34:19:bd:cd:9d:87:28:ed:ca:6d:c5:c0:9d:8a:f0: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:4E:56:B8:F1:36:EB:F5:35:CD:43:CB:23:83:EC:65:E3:1A:2C X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:b4:08:50:3b:c5:12:d9:67:ed:05:90:7a:88:84:11:9b: c1:92:01:a6:e3:2d:91:5a:f5:fa:c8:70:f1:10:97:6b:e6:a9: 16:03:bf:6a:8d:03:55:75:65:bf:81:03:c9:9d:b2:b2:c4:e2: 81:c0:44:f1:86:3c:cd:e2:c0:51:d0:c5:fd:74:0a:c1:b0:de: 0f:75:fb:0b:26:c3:df:25:73:7b:1c:d1:75:64:93:16:05:7a: 68:87:c4:fc:b3:7c:38:9f:c2:b0:0e:40:67:e9:48:e4:a4:a1: d3:e1:8d:4c:b2:22:a8:d3:9d:40:39:26:b8:97:a5:ad:8c:b7: 27:ee:93:fb:60:bc:48:15:5c:c6:58:ea:5e:3a:93:c4:f6:c0: 77:51:6d:e0:24:08:64:65:c6:9d:c8:d7:ca:84:4d:c7:5b:0a: c7:82:2e:03:6a:02:39:a5:59:65:fd:0d:74:ba:51:19:14:97: aa:43:f5:08:7f:bf:13:48:3c:12:67:21:e1:cf:9a:f1:d5:24: 58:f7:1c:7c:3e:d8:35:f4:c1:ae:3a:b5:33:e8:25:5c:be:76: d1:dc:bc:ca:c7:b8:97:0e:14:e4:59:27:f8:55:6a:9d:76:2a: 65:25:a6:6d:a8:6e:1a:63:66:ff:97:ad:25:29:ad:cb:1e:af: 04:49:14:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUwODEwMjMyNzUxWhcNMjUwODE3MjMyNzUxWjAYMRYwFAYD VQQDEw02ODk5MmFmOC0wNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1u6KJzKX18zDoOoG7jsqK2I+pQqFVF8GxTr/Oe3znkZDhkzIPlxAD6Ftay4 tAxtVhYvCBkxc2vFW9QrAYwW70QHQacvG7qMAZQkdU3c+U0PBWAfAxANok0+AnpH x3oe0gdl59EG9u9OKcRuiImaq2B66FclHenY0aJEf2n3pD3RvXzG53bl1CJYSGmY ivK2i1uUxDFxCJqxt0DmDXagXkzNvi36O458Y2LuMFxB3Ax/SQVUtGnBQumIsbYi zI/PG/gHBjvF6M15bxn/H+bXQiO2e4TITUaebQfMnhZabUELXKeiWCbm7AERmdh8 OS40Gb3NnYco7cptxcCdivCEXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe9Tla4 8Tbr9TXNQ8sjg+xl4xosMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvdLQIUDvFEtln7QWQeoiEEZvBkgGm4y2RWvX6yHDxEJdr5qkWA79q jQNVdWW/gQPJnbKyxOKBwETxhjzN4sBR0MX9dArBsN4PdfsLJsPfJXN7HNF1ZJMW BXpoh8T8s3w4n8KwDkBn6UjkpKHT4Y1MsiKo051AOSa4l6WtjLcn7pP7YLxIFVzG WOpeOpPE9sB3UW3gJAhkZcadyNfKhE3HWwrHgi4DagI5pVll/Q10ulEZFJeqQ/UI f78TSDwSZyHhz5rx1SRY9xx8Ptg19MGuOrUz6CVcvnbR3LzKx7iXDhTkWSf4VWqd diplJaZtqG4aY2b/l60lKa3LHq8ESRQk -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:18 2025 by rpki-client