$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: 3qpHpIplnVFfQISHVlfAT8KUZZ3yEmMYLdZFD2bNLQM= Subject key identifier: 69:9F:24:7E:AF:48:1E:60:F3:85:EE:18:3A:AC:2F:E4:17:A2:61:80 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2139 Signing time: Wed 02 Jul 2025 16:02:15 +0000 Manifest this update: Wed 02 Jul 2025 16:02:15 +0000 Manifest next update: Wed 09 Jul 2025 16:02:15 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: pNsq2qvn5Yu43WBLHHbk0jCKS2w6cIaF7jjA+JQ8p0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8505 (0x2139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Jul 2 16:02:15 2025 GMT Not After : Jul 9 16:02:15 2025 GMT Subject: CN=68655807-91bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:44:39:8f:0f:35:d1:e5:f2:c7:3b:7f:52: 4d:b5:3d:cc:4a:36:2d:fb:ed:9d:d8:af:f7:80:13: ff:0b:59:93:fd:53:3f:cf:b9:8a:4d:83:f5:3d:ac: b7:31:41:8b:9f:b7:a6:ae:0c:83:6c:ad:f1:c1:f8: 5f:f9:f2:ca:e2:e4:ff:5c:f1:d2:e9:76:08:e1:f2: e2:24:f9:d9:97:04:02:33:83:3b:91:ba:5e:a9:12: 2f:34:23:a0:d3:21:d2:19:bc:87:68:d4:b3:38:fd: dd:d9:6b:c0:b5:66:ff:a4:99:96:67:12:fe:c9:37: d8:ed:47:80:55:1b:41:7e:e2:93:79:0f:9b:13:b4: 90:8a:16:f6:0d:ab:ac:3f:31:db:8d:72:50:6c:2f: 89:77:f3:f9:66:61:73:35:34:f5:90:ef:43:78:59: b0:5a:e9:5d:6f:39:66:7f:be:2c:8c:6d:dd:48:54: 7b:b6:49:7e:82:5f:7c:3c:3c:1c:5e:89:a1:4b:80: 6d:10:a3:c8:a2:29:de:6c:e6:8a:ae:80:a5:e2:a0: c4:22:56:1d:2c:17:c4:48:85:f1:12:cd:75:9b:5d: 17:e1:20:c0:ad:fb:39:13:74:3f:6a:2c:3c:ee:0c: bc:58:b9:35:ff:99:90:7e:d1:d8:bc:d2:7c:11:5d: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:24:7E:AF:48:1E:60:F3:85:EE:18:3A:AC:2F:E4:17:A2:61:80 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c1:4e:4f:18:55:39:5d:67:b4:9b:ff:87:b4:54:06:99:50: 37:68:f9:27:06:01:99:af:85:88:70:24:ed:d8:4f:33:c6:43: 95:f5:dc:84:77:5e:bd:56:4e:7d:57:d3:ac:45:4f:d7:90:2b: f2:d4:d5:2f:4a:db:8b:d5:86:e2:81:4e:8e:2a:16:49:66:ac: a9:ea:31:57:04:f2:59:ed:16:fa:4a:8d:1c:b7:dd:51:25:e4: 62:2c:9e:42:d1:ca:6d:63:f6:af:82:d0:36:23:2d:52:3d:29: 3c:c5:f7:aa:e8:54:d4:c0:6f:1e:89:cb:a4:2c:1d:c4:b8:6e: 71:64:39:fe:95:8a:6f:ba:56:75:15:a0:80:44:11:ae:55:40: a7:1c:63:53:a2:33:dc:e5:65:80:cc:d9:ac:20:f3:34:e5:0f: bb:a1:52:91:5f:4f:6a:0d:9e:2d:8e:6d:c4:a0:45:80:6e:b8: 1f:2b:ca:52:1b:49:0f:3c:c7:11:52:08:bc:90:cb:b8:c9:de: 7d:35:dc:f2:68:37:35:1d:b9:2f:ff:7a:ba:d1:f0:4f:43:c5: 24:4e:a8:4e:8f:b4:5c:6f:6a:02:0d:49:7d:3d:09:7b:74:3e: ef:3e:98:bf:56:82:71:69:fc:80:29:42:fc:cb:29:2a:97:54: 03:59:4f:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwNzAyMTYwMjE1WhcNMjUwNzA5MTYwMjE1WjAYMRYwFAYD VQQDEw02ODY1NTgwNy05MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Z9EOY8PNdHl8sc7f1JNtT3MSjYt++2d2K/3gBP/C1mT/VM/z7mKTYP1Pay3 MUGLn7emrgyDbK3xwfhf+fLK4uT/XPHS6XYI4fLiJPnZlwQCM4M7kbpeqRIvNCOg 0yHSGbyHaNSzOP3d2WvAtWb/pJmWZxL+yTfY7UeAVRtBfuKTeQ+bE7SQihb2Daus PzHbjXJQbC+Jd/P5ZmFzNTT1kO9DeFmwWuldbzlmf74sjG3dSFR7tkl+gl98PDwc XomhS4BtEKPIoinebOaKroCl4qDEIlYdLBfESIXxEs11m10X4SDArfs5E3Q/aiw8 7gy8WLk1/5mQftHYvNJ8EV1AxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmfJH6v SB5g84XuGDqsL+QXomGAMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbwU5PGFU5XWe0m/+HtFQGmVA3aPknBgGZr4WIcCTt2E8zxkOV9dyE d169Vk59V9OsRU/XkCvy1NUvStuL1YbigU6OKhZJZqyp6jFXBPJZ7Rb6So0ct91R JeRiLJ5C0cptY/avgtA2Iy1SPSk8xfeq6FTUwG8eicukLB3EuG5xZDn+lYpvulZ1 FaCARBGuVUCnHGNTojPc5WWAzNmsIPM05Q+7oVKRX09qDZ4tjm3EoEWAbrgfK8pS G0kPPMcRUgi8kMu4yd59NdzyaDc1Hbkv/3q60fBPQ8UkTqhOj7Rcb2oCDUl9PQl7 dD7vPpi/VoJxafyAKUL8yykql1QDWU9E -----END CERTIFICATE-----Generated at Fri Jul 4 02:56:11 2025 by rpki-client