$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: P06SUZofrl25K/GqNgcEspRH2GnqbwhoXzb8SyxqfQk= Subject key identifier: 85:D9:8B:23:50:F7:78:BE:5D:A7:4F:F6:42:BA:0F:08:BF:39:02:86 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0196 Signing time: Wed 18 Jun 2025 23:16:48 +0000 Manifest this update: Wed 18 Jun 2025 23:16:48 +0000 Manifest next update: Wed 25 Jun 2025 23:16:48 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: XygaeHvj/enHiPK2+edXEbGP0KzCo6kaw1T8ZnsNanI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Jun 18 23:16:48 2025 GMT Not After : Jun 25 23:16:48 2025 GMT Subject: CN=685348e0-7160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:3b:5a:b4:9f:ea:34:8c:cd:ad:ef:9d:c7: 77:de:cc:86:2d:20:10:1f:6a:0a:ea:06:05:cd:ec: 51:a1:d2:6a:dd:4e:ba:be:52:82:98:d6:69:32:11: de:41:7d:64:bd:3a:b9:75:7b:d6:5d:8f:95:73:6c: 51:e9:1e:fb:4a:9a:ab:bb:e9:f8:6f:5f:72:b4:b7: 46:3d:2d:f9:08:59:9d:4a:0e:15:50:28:d4:14:74: bd:1e:d2:7b:dc:a3:a3:61:91:95:70:7d:76:7d:99: 55:7a:2a:b9:c8:33:bc:a7:e2:5e:03:aa:7f:f8:1f: 25:d0:73:08:43:16:cd:0c:3a:26:0d:05:f2:68:bf: 74:9b:3d:0e:8e:73:c6:d4:f8:7b:81:c0:9b:40:4a: 43:50:ed:44:75:4c:86:73:d8:65:46:ac:3e:15:a6: d5:b8:64:10:5c:a2:bd:d0:49:3f:e8:75:82:0b:42: 9e:20:f7:5c:61:ee:00:7d:4d:ec:34:c8:31:f6:fe: c6:71:fd:33:f4:8b:e3:5c:4b:8d:b6:8e:b4:0b:f6: 26:4e:05:a9:c3:75:16:cf:3a:16:48:a7:dd:bd:70: cf:b3:ae:d0:c6:04:9c:62:9b:5f:5d:6d:74:14:e8: dd:e1:5d:73:88:1e:7d:d2:c0:54:f8:3e:0d:39:5d: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:8B:23:50:F7:78:BE:5D:A7:4F:F6:42:BA:0F:08:BF:39:02:86 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:eb:fe:94:a5:35:89:01:33:96:e0:83:ee:7c:e6:44:62: 6f:d1:50:1d:ba:f6:7d:8e:4d:46:34:81:3a:5c:6b:4b:d5:bf: ec:e0:73:9f:c2:28:ff:85:c2:1a:cb:cf:a4:96:35:b6:9e:26: b0:e7:d5:53:9e:7a:8f:d9:33:8c:71:4c:98:76:58:81:ed:a8: 24:42:e6:2b:11:d2:47:bb:6a:bf:54:bf:48:7d:f6:bc:34:d9: 33:83:11:05:f6:0e:72:bf:09:77:51:06:4c:f9:ec:48:8f:35: 61:e3:a7:8b:46:b0:d5:78:bc:aa:48:9b:51:c1:96:29:71:88: 01:d6:be:31:f0:f8:36:88:a3:70:c5:87:a4:9f:3d:60:f9:91: c4:77:96:87:a9:d5:9f:59:41:9c:2f:e8:17:8a:aa:9b:fb:c0: 80:b2:1e:ea:13:1c:c1:6c:ee:2f:65:d6:84:2b:44:00:c4:b2: be:ed:31:fa:49:35:5f:9a:99:f1:53:6c:46:f5:b9:05:eb:db: 10:13:3d:ba:f1:24:d2:88:07:f1:0d:9b:cc:5d:1c:5c:bf:4d: 2e:fe:56:f1:ad:5e:87:e5:29:8f:d6:80:62:7c:3f:50:ac:38: 9f:d6:e5:5f:e7:f8:75:ab:4c:4a:30:dd:5b:27:e9:48:8c:16: 15:4e:24:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUwNjE4MjMxNjQ4WhcNMjUwNjI1MjMxNjQ4WjAYMRYwFAYD VQQDEw02ODUzNDhlMC03MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Do7WrSf6jSMza3vncd33syGLSAQH2oK6gYFzexRodJq3U66vlKCmNZpMhHe QX1kvTq5dXvWXY+Vc2xR6R77Spqru+n4b19ytLdGPS35CFmdSg4VUCjUFHS9HtJ7 3KOjYZGVcH12fZlVeiq5yDO8p+JeA6p/+B8l0HMIQxbNDDomDQXyaL90mz0OjnPG 1Ph7gcCbQEpDUO1EdUyGc9hlRqw+FabVuGQQXKK90Ek/6HWCC0KeIPdcYe4AfU3s NMgx9v7Gcf0z9IvjXEuNto60C/YmTgWpw3UWzzoWSKfdvXDPs67QxgScYptfXW10 FOjd4V1ziB590sBU+D4NOV111QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXZiyNQ 93i+XadP9kK6Dwi/OQKGMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALBOv+lKU1iQEzluCD7nzmRGJv0VAduvZ9jk1GNIE6XGtL1b/s4HOf wij/hcIay8+kljW2niaw59VTnnqP2TOMcUyYdliB7agkQuYrEdJHu2q/VL9Iffa8 NNkzgxEF9g5yvwl3UQZM+exIjzVh46eLRrDVeLyqSJtRwZYpcYgB1r4x8Pg2iKNw xYeknz1g+ZHEd5aHqdWfWUGcL+gXiqqb+8CAsh7qExzBbO4vZdaEK0QAxLK+7TH6 STVfmpnxU2xG9bkF69sQEz268STSiAfxDZvMXRxcv00u/lbxrV6H5SmP1oBifD9Q rDif1uVf5/h1q0xKMN1bJ+lIjBYVTiSm -----END CERTIFICATE-----Generated at Fri Jun 20 09:25:40 2025 by rpki-client