$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json) Hash identifier: /243JOOQ3i5Oeok1BmbPc8h6vBIfz2C7PWIv/DJ4MU4= Subject key identifier: 2A:30:2E:33:AC:C0:DA:2A:98:E0:95:21:5E:AB:5A:2D:88:D3:8B:68 Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft Manifest number: 07AE Signing time: Mon 30 Jun 2025 21:24:31 +0000 Manifest this update: Mon 30 Jun 2025 21:24:31 +0000 Manifest next update: Mon 07 Jul 2025 21:24:31 +0000 Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: WUYrL+V+eIKZIahnikmDo4MiYX3VHTptAI1lhsRGo98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DAE, serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Validity Not Before: Jun 30 21:24:31 2025 GMT Not After : Jul 7 21:24:31 2025 GMT Subject: CN=6863008f-6ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:1e:41:7d:1a:73:ef:60:33:b9:a4:77:ed: e2:1d:2d:06:ba:5f:e0:bd:cb:e4:57:1e:8f:17:4d: 8d:fc:d0:91:bc:88:30:52:74:b4:9b:5e:eb:c2:42: 7b:be:54:ec:44:88:1d:5b:f7:ad:90:fa:40:7f:e4: 84:40:59:b4:49:68:20:71:10:03:e6:bb:85:43:19: c2:4c:99:28:6e:13:0d:29:bb:46:dc:cf:16:09:5b: c6:11:26:f3:41:88:a3:96:ae:b9:22:cc:b6:00:a6: 5d:51:dd:4f:5a:83:14:80:5e:c2:19:b3:1d:67:26: 8c:e7:db:bb:a1:ca:cd:78:f9:ed:b6:32:81:f5:c4: 4c:c8:57:00:90:d1:97:c3:0c:46:f0:41:20:57:e1: 9f:82:5f:98:51:f2:c5:46:88:e7:f3:2e:8a:fa:2a: 4c:d0:49:0f:81:47:f7:d6:ea:28:97:c8:c4:6c:fb: e2:cb:41:82:21:66:8c:8b:2c:5d:ae:16:1c:19:5c: c2:a2:09:dc:6b:72:48:f0:5d:18:09:8c:84:11:c0: a5:28:51:41:dc:66:bf:99:a8:fc:f1:7b:2d:23:18: 1f:d8:20:9f:2a:1e:c8:fa:46:c0:c2:ba:40:b4:28: d5:5b:b9:06:63:05:c3:72:df:95:95:d9:8a:68:3a: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:2E:33:AC:C0:DA:2A:98:E0:95:21:5E:AB:5A:2D:88:D3:8B:68 X509v3 Authority Key Identifier: keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1c:09:28:79:fb:78:1b:3a:71:f0:8a:6b:42:32:8f:89:72: 48:a5:44:80:12:8d:2d:3b:e4:fd:dc:44:10:6b:81:13:d8:6c: ec:cd:3f:a8:65:52:3d:df:f1:58:c9:6e:94:69:0d:c9:d3:4d: 0b:51:1c:5b:83:9d:bc:96:93:23:95:b7:66:1d:51:39:a4:d5: 50:e9:8d:00:86:95:dc:45:09:c9:ee:42:f2:cf:5f:a4:a0:73: 8e:5a:cb:29:a1:80:77:3d:32:80:a2:7f:94:77:fe:dc:ef:39: 5b:88:2a:b6:72:fd:8f:b5:b6:a2:5a:e4:69:90:69:74:82:69: 03:8c:be:19:e2:d0:ce:31:12:f6:c9:f7:d5:41:ad:95:09:3d: 07:71:97:f2:4c:25:5d:85:5d:71:b3:8f:14:8f:5c:58:14:d5: 1a:17:ee:c1:be:32:e5:b7:5e:4f:a9:06:b3:ad:9c:93:3e:e5: 00:59:fd:9f:70:d7:64:a4:7a:30:e3:0d:5c:e7:b7:76:63:4e: 21:8f:56:d4:e0:a9:06:01:e2:8a:32:8c:42:15:b9:ce:f4:07: fb:65:6e:05:e8:83:b2:56:5c:a0:7a:af:53:a1:ff:eb:44:2a: 64:9c:83:9a:54:91:2a:39:8f:ed:7c:c2:53:07:98:e8:71:ae: 03:90:e9:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREQUUxMTAvBgNVBAUTKEFEQzJEMDEwNzREREVEQjU4NzQxMjJGMkUxQjhBQzNC NEVEQ0RCN0IwHhcNMjUwNjMwMjEyNDMxWhcNMjUwNzA3MjEyNDMxWjAYMRYwFAYD VQQDEw02ODYzMDA4Zi02Y2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroEeQX0ac+9gM7mkd+3iHS0Gul/gvcvkVx6PF02N/NCRvIgwUnS0m17rwkJ7 vlTsRIgdW/etkPpAf+SEQFm0SWggcRAD5ruFQxnCTJkobhMNKbtG3M8WCVvGESbz QYijlq65Isy2AKZdUd1PWoMUgF7CGbMdZyaM59u7ocrNePnttjKB9cRMyFcAkNGX wwxG8EEgV+Gfgl+YUfLFRojn8y6K+ipM0EkPgUf31uool8jEbPviy0GCIWaMiyxd rhYcGVzCognca3JI8F0YCYyEEcClKFFB3Ga/maj88XstIxgf2CCfKh7I+kbAwrpA tCjVW7kGYwXDct+VldmKaDohRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCowLjOs wNoqmOCVIV6rWi2I04toMB8GA1UdIwQYMBaAFK3C0BB03e21h0Ei8uG4rDtO3Nt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERBRS8yN0U5MzQxODAz MzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdiV0hRU0x5NGJpc08wN2My M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjTFFFSFRkN2JXSFFTTHk0YmlzTzA3YzIzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERBRS8yN0U5MzQxODAzMzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdi V0hRU0x5NGJpc08wN2MyM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuHAkoeft4Gzpx8IprQjKPiXJIpUSAEo0tO+T93EQQa4ET2GzszT+o ZVI93/FYyW6UaQ3J000LURxbg528lpMjlbdmHVE5pNVQ6Y0AhpXcRQnJ7kLyz1+k oHOOWsspoYB3PTKAon+Ud/7c7zlbiCq2cv2PtbaiWuRpkGl0gmkDjL4Z4tDOMRL2 yffVQa2VCT0HcZfyTCVdhV1xs48Uj1xYFNUaF+7BvjLlt15PqQazrZyTPuUAWf2f cNdkpHow4w1c57d2Y04hj1bU4KkGAeKKMoxCFbnO9Af7ZW4F6IOyVlygeq9Tof/r RCpknIOaVJEqOY/tfMJTB5joca4DkOmn -----END CERTIFICATE-----Generated at Tue Jul 1 21:03:08 2025 by rpki-client