$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: dsHqJoz+Bv3Z8bsG5aycuoEXHL5Mg+UWzsu+tqQRVzk= Subject key identifier: D5:F8:A8:CD:AD:DB:80:7D:8C:15:D2:E2:02:2B:42:1B:85:01:DB:BC Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: BC Signing time: Mon 11 Aug 2025 06:05:55 +0000 Manifest this update: Mon 11 Aug 2025 06:05:55 +0000 Manifest next update: Mon 18 Aug 2025 06:05:55 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: +mSM6hJJDFxzvlTsmIWxDrN0O7KFlU7T03DNOv9VuE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Aug 11 06:05:55 2025 GMT Not After : Aug 18 06:05:55 2025 GMT Subject: CN=68998843-e141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7a:6e:fc:9b:92:d5:72:94:86:a3:22:53:e9: 74:da:47:ab:15:0c:ce:06:87:5a:37:c3:64:6b:92: 1a:6e:33:41:1a:fd:46:51:5f:8d:54:69:7d:51:f3: 0d:d3:04:56:64:17:34:96:91:8b:d5:93:6b:48:60: dd:68:ec:a7:41:6f:d4:42:99:9d:c4:38:32:89:44: 26:db:85:15:cb:b8:8f:ef:85:52:73:16:c8:96:2f: 6f:2c:e6:36:76:6f:13:db:12:9e:55:3d:b0:95:cb: 46:c0:45:3f:1a:09:16:55:79:de:76:29:e1:8a:69: b4:3e:6b:12:5d:4c:ee:48:0c:c8:cd:f1:dd:b6:3e: 46:9f:f4:59:cf:78:01:15:9b:3c:e2:41:06:d6:d0: 63:77:74:e6:6d:ca:93:5b:d2:a4:02:10:62:da:62: 16:d2:12:c6:29:d1:74:64:9d:c6:b1:5b:39:88:91: eb:5e:6b:1c:86:90:1c:32:58:d5:32:62:60:b3:0c: 61:6f:53:09:39:48:7f:77:f1:0d:ef:b2:2a:0c:2e: 46:60:b4:7b:93:94:9d:a9:06:af:4f:99:e3:14:2d: 03:0e:8e:a2:b4:f5:b0:cf:b8:83:a7:be:aa:91:cf: 82:1d:1d:11:7e:ee:9a:4f:2b:52:11:da:32:0b:94: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F8:A8:CD:AD:DB:80:7D:8C:15:D2:E2:02:2B:42:1B:85:01:DB:BC X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7d:51:fa:c2:d8:38:7f:f3:eb:f3:18:97:78:cd:a2:02:c2: 5c:8a:7d:38:ca:ab:ee:f1:d4:3e:a9:1c:1e:8e:e3:61:0d:c7: b6:b6:43:cb:17:8c:cd:59:3c:e8:c9:56:f8:ce:71:6c:37:24: d1:ac:a7:09:05:cd:1e:a0:02:ff:4d:1e:e2:a5:24:5b:7a:b6: 34:86:78:95:bd:3f:d1:8b:da:f0:40:7b:16:c0:2f:44:4a:9a: 84:ee:9a:73:37:7d:f0:8c:6c:a0:97:06:3b:d8:0b:50:49:60: 8d:1d:5c:d9:62:aa:bf:9f:12:bc:53:e9:fe:9a:b0:4b:30:0e: a1:02:e7:76:a1:fd:51:c5:ab:37:ab:0d:75:e1:ab:ca:2d:8a: 7b:fb:76:e5:db:ab:f7:94:81:44:72:15:51:ac:52:26:a1:ff: f6:ae:94:9e:07:90:94:3b:6e:ce:d1:c9:a8:fb:e5:db:a5:fe: 06:4e:00:0e:19:2b:ac:dd:09:9d:d3:3f:80:2c:91:4a:aa:e9: a0:b9:42:dc:5d:de:ea:db:24:f0:79:08:6f:f4:36:c0:6c:71: 53:b1:39:fb:81:72:87:ae:76:d4:9d:d4:6e:31:86:8d:02:d5: d9:25:c6:47:71:4c:2c:67:e7:2b:57:47:f8:d0:e1:0e:b5:a6: 28:73:73:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwODExMDYwNTU1WhcNMjUwODE4MDYwNTU1WjAYMRYwFAYD VQQDEw02ODk5ODg0My1lMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13pu/JuS1XKUhqMiU+l02kerFQzOBodaN8Nka5IabjNBGv1GUV+NVGl9UfMN 0wRWZBc0lpGL1ZNrSGDdaOynQW/UQpmdxDgyiUQm24UVy7iP74VScxbIli9vLOY2 dm8T2xKeVT2wlctGwEU/GgkWVXnedinhimm0PmsSXUzuSAzIzfHdtj5Gn/RZz3gB FZs84kEG1tBjd3TmbcqTW9KkAhBi2mIW0hLGKdF0ZJ3GsVs5iJHrXmschpAcMljV MmJgswxhb1MJOUh/d/EN77IqDC5GYLR7k5SdqQavT5njFC0DDo6itPWwz7iDp76q kc+CHR0Rfu6aTytSEdoyC5SC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX4qM2t 24B9jBXS4gIrQhuFAdu8MB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpfVH6wtg4f/Pr8xiXeM2iAsJcin04yqvu8dQ+qRwejuNhDce2tkPL F4zNWTzoyVb4znFsNyTRrKcJBc0eoAL/TR7ipSRberY0hniVvT/Ri9rwQHsWwC9E SpqE7ppzN33wjGyglwY72AtQSWCNHVzZYqq/nxK8U+n+mrBLMA6hAud2of1Rxas3 qw114avKLYp7+3bl26v3lIFEchVRrFImof/2rpSeB5CUO27O0cmo++Xbpf4GTgAO GSus3Qmd0z+ALJFKqumguULcXd7q2yTweQhv9DbAbHFTsTn7gXKHrnbUndRuMYaN AtXZJcZHcUwsZ+crV0f40OEOtaYoc3Ow -----END CERTIFICATE-----Generated at Mon Aug 11 07:32:00 2025 by rpki-client