$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json) Hash identifier: bCnzfg4SLgyJHo0E1RgbG2tC1xGI5Tcumn0m8qIOQco= Subject key identifier: C6:8B:C0:BA:B9:B4:21:9E:D0:57:C2:24:30:B1:CA:A4:29:14:D1:C5 Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Certificate serial: 3563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft Manifest number: 3563 Signing time: Tue 28 Jul 2026 14:52:50 +0000 Manifest this update: Tue 28 Jul 2026 14:52:50 +0000 Manifest next update: Tue 04 Aug 2026 14:52:50 +0000 Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: LJkoVXteVQxFh8kxlZtCxT8FSnBJ/X4m8Lka05mva3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13667 (0x3563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1 Validity Not Before: Jul 28 14:52:50 2026 GMT Not After : Aug 4 14:52:50 2026 GMT Subject: CN=6a68c242-5773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:82:c8:9a:4b:57:93:8d:e6:ab:91:a5:6e: 7c:d9:0d:d8:22:b6:a8:8d:b8:d9:23:9e:c2:85:e7: c7:b3:76:ff:e0:b2:b8:9b:98:c6:f7:50:14:0c:74: b3:05:60:d3:e3:04:fe:d1:d2:18:94:c9:5f:09:20: cf:5a:e6:45:12:64:d6:da:e3:bf:8d:0a:87:b3:80: a8:87:da:94:b2:61:7a:44:40:b4:2f:91:91:20:03: 9f:a5:37:db:6d:06:8b:c6:c6:e4:2a:10:c0:00:6d: f4:88:46:3c:8d:ca:99:42:83:a9:ca:34:61:8a:b7: a4:2c:f0:1b:0f:f2:e0:68:85:55:55:59:48:9a:f0: 4a:41:c6:26:df:af:4a:9e:7b:ab:42:83:e8:d9:ae: 4b:8c:33:87:71:a8:91:3c:ab:e4:fd:12:3e:e0:ea: e3:9a:a0:2f:a8:98:9b:c4:cb:ca:07:9e:8b:be:3b: a9:41:04:0d:68:dc:bc:7a:eb:71:79:5d:e2:d1:5d: 6a:c6:70:92:58:e8:80:33:96:73:81:4b:5b:c0:7e: e2:5f:7d:43:d4:ed:b7:4b:13:e8:91:61:c9:e3:ed: 36:a4:3b:dc:44:13:09:52:a6:a2:09:a5:17:d9:eb: fe:0b:97:b8:cb:d2:40:ab:0c:b9:71:b2:90:e2:ef: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:C0:BA:B9:B4:21:9E:D0:57:C2:24:30:B1:CA:A4:29:14:D1:C5 X509v3 Authority Key Identifier: keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1d:f7:8a:81:3e:9a:48:7b:1f:fa:2d:89:b6:4a:2c:bf:9e: 68:7d:3b:c1:10:fe:62:21:93:ba:cb:14:ee:f4:9f:83:3a:12: 91:91:55:2b:9a:e2:f3:c8:4a:8e:51:5b:c8:46:a0:da:67:c2: 12:28:48:fb:ec:49:8c:d0:e9:0b:ef:5f:e9:f3:67:2d:a5:48: 37:86:27:19:5d:a1:89:72:a3:9b:dd:34:9f:ca:09:d4:3a:1d: 47:83:6f:63:9e:38:05:97:61:fc:00:16:c5:58:7a:5c:11:3c: 2a:12:12:a1:0c:59:56:cc:9a:7e:af:ac:34:15:4e:8f:2a:12: 52:18:01:d1:20:32:db:61:7a:b6:00:31:23:72:47:a4:69:32: 52:8b:66:76:87:0f:0b:13:97:fc:e5:82:d0:16:5b:03:c5:ee: 22:cd:b3:08:50:2b:7e:5c:68:bc:7f:7c:a5:90:78:72:08:75: 03:38:67:66:6e:35:7b:e5:1e:9e:ad:50:43:9d:dd:51:a1:63: 04:6f:76:b3:6c:ab:33:d6:5b:8c:7d:24:7f:2c:e9:64:10:3b: dd:ca:09:d8:07:d6:36:c6:01:a3:e3:87:ae:29:8f:e3:57:ec: 53:c9:72:72:e5:50:32:bb:3d:bb:24:a3:9a:90:22:6d:ef:a1: 30:12:d7:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5NkMxMTAvBgNVBAUTKEUwOEQ2QzdGRTM1RkUzNjY0MkZFNkY2NkNDREEyODY2 QTY2MjQyRjEwHhcNMjYwNzI4MTQ1MjUwWhcNMjYwODA0MTQ1MjUwWjAYMRYwFAYD VQQDEw02YTY4YzI0Mi01NzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6qCyJpLV5ON5quRpW582Q3YIraojbjZI57ChefHs3b/4LK4m5jG91AUDHSz BWDT4wT+0dIYlMlfCSDPWuZFEmTW2uO/jQqHs4Coh9qUsmF6REC0L5GRIAOfpTfb bQaLxsbkKhDAAG30iEY8jcqZQoOpyjRhirekLPAbD/LgaIVVVVlImvBKQcYm369K nnurQoPo2a5LjDOHcaiRPKvk/RI+4OrjmqAvqJibxMvKB56LvjupQQQNaNy8eutx eV3i0V1qxnCSWOiAM5ZzgUtbwH7iX31D1O23SxPokWHJ4+02pDvcRBMJUqaiCaUX 2ev+C5e4y9JAqwy5cbKQ4u/+uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaLwLq5 tCGe0FfCJDCxyqQpFNHFMB8GA1UdIwQYMBaAFOCNbH/jX+NmQv5vZszaKGamYkLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDk2Qy9BNDJFMzdGRTFE OTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQyWkNfbTltek5vb1pxWmlR dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJMXNmLU5mNDJaQ19tOW16Tm9vWnFaaVF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDk2Qy9BNDJFMzdGRTFEOTYxMUUyOUM1RjRBN0YwOEIwMkNEMi80STFzZi1OZjQy WkNfbTltek5vb1pxWmlRdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoB33ioE+mkh7H/otibZKLL+eaH07wRD+YiGTussU7vSfgzoSkZFVK5ri88hK jlFbyEag2mfCEihI++xJjNDpC+9f6fNnLaVIN4YnGV2hiXKjm900n8oJ1DodR4Nv Y544BZdh/AAWxVh6XBE8KhISoQxZVsyafq+sNBVOjyoSUhgB0SAy22F6tgAxI3JH pGkyUotmdocPCxOX/OWC0BZbA8XuIs2zCFArflxovH98pZB4cgh1AzhnZm41e+Ue nq1QQ53dUaFjBG92s2yrM9ZbjH0kfyzpZBA73coJ2AfWNsYBo+OHrimP41fsU8ly cuVQMrs9uySjmpAibe+hMBLX/g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:49 2026 by rpki-client