$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: pT/2j5P1XiPznFRx31mACXsTTN/cmoSMwycjI/CGCHY= Subject key identifier: 38:DB:49:67:46:39:A2:69:9E:7F:59:2D:5B:3B:FF:B7:69:73:68:D3 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 211F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 211F Signing time: Mon 12 May 2025 15:53:35 +0000 Manifest this update: Mon 12 May 2025 15:53:35 +0000 Manifest next update: Mon 19 May 2025 15:53:35 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: 8KtS8Aoy/eJtweP/9/fVFfqZBIxqSmL7fpetGkUZj6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8479 (0x211f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: May 12 15:53:35 2025 GMT Not After : May 19 15:53:35 2025 GMT Subject: CN=6822197f-c80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:84:1d:93:6e:fd:cb:43:c4:ad:a3:b3:98: 13:23:33:65:c3:bb:81:5b:ec:a8:b0:51:9d:cf:82: d9:7f:41:4d:9f:82:41:e8:55:4b:58:c1:28:43:20: aa:ad:d1:62:6c:4b:1c:2c:fc:7c:48:12:ec:bc:cc: 4c:1f:3d:72:0a:99:04:b9:69:bd:eb:eb:46:c2:9a: 6c:ec:03:51:a3:68:56:7f:a1:c3:06:73:00:f9:1f: 4d:1b:e1:42:7b:7e:20:b6:1c:0b:28:0a:a0:c0:48: 03:ea:b0:6f:df:c0:c9:3f:a7:e5:41:66:b4:e4:5a: 0a:d8:52:2d:ef:e3:3c:93:69:1b:25:8e:2f:e2:05: 10:6f:37:fb:e7:0c:10:ef:38:89:8b:56:fd:85:0a: 95:25:e7:01:a4:75:51:5f:e3:9d:08:70:70:d3:37: 10:d9:38:c1:63:2c:86:17:59:d9:5b:2e:a0:b6:7a: 14:cf:8a:11:aa:c3:8c:43:df:cb:f6:8b:00:cd:70: 9a:71:0c:81:45:f0:6b:9c:d0:f1:7f:fe:f0:de:1a: 15:3a:32:6b:49:e2:e2:04:61:b3:ed:34:2a:8a:ca: e4:2c:ee:0e:ab:c1:ba:84:6b:55:85:94:2b:d9:57: 0b:2b:de:07:4c:3b:8a:0c:d0:24:2d:32:09:6a:78: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:49:67:46:39:A2:69:9E:7F:59:2D:5B:3B:FF:B7:69:73:68:D3 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b7:72:d6:a1:44:52:ab:ec:1c:76:0b:6e:d6:72:60:bf:af: 9c:78:9f:ec:6b:f6:3e:df:02:14:95:b2:83:7e:1e:3e:2e:43: 77:db:3a:87:fe:2d:7e:9b:81:74:1b:29:a4:79:f0:7b:2b:6a: a1:18:f3:97:2f:0e:eb:53:4f:a8:09:4b:ed:3a:a0:fc:14:28: 3e:29:97:2d:ae:68:76:98:97:04:e3:b4:17:32:67:32:39:d8: c1:45:44:8f:ae:8c:c4:b6:b4:89:52:8c:24:97:a1:0a:d8:0b: 30:6b:39:bf:be:c7:43:41:26:37:42:7c:09:2f:27:7e:b3:4b: c7:bc:c4:ea:de:18:51:55:a7:08:18:ee:93:72:fc:3b:9b:c7: 04:83:8c:a7:7d:88:be:68:a2:e1:17:8a:60:6f:fd:c0:23:cf: 9b:d3:9c:97:ad:ad:0c:ed:74:5f:80:e2:3d:8c:72:96:52:c8: c2:9f:4b:c2:81:d6:3b:dc:38:3f:55:11:c9:2f:34:51:26:41: c9:b3:b7:01:12:ae:4a:30:3e:d3:0a:f6:64:78:3c:82:5f:de: c9:9a:3b:46:6f:91:44:26:bb:a9:ba:91:b2:3c:65:5f:d9:79: a1:13:6c:c1:c5:40:49:bf:9a:ea:5c:36:18:fa:28:6d:13:eb: 9c:bf:8e:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwNTEyMTU1MzM1WhcNMjUwNTE5MTU1MzM1WjAYMRYwFAYD VQQDEw02ODIyMTk3Zi1jODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BWEHZNu/ctDxK2js5gTIzNlw7uBW+yosFGdz4LZf0FNn4JB6FVLWMEoQyCq rdFibEscLPx8SBLsvMxMHz1yCpkEuWm96+tGwpps7ANRo2hWf6HDBnMA+R9NG+FC e34gthwLKAqgwEgD6rBv38DJP6flQWa05FoK2FIt7+M8k2kbJY4v4gUQbzf75wwQ 7ziJi1b9hQqVJecBpHVRX+OdCHBw0zcQ2TjBYyyGF1nZWy6gtnoUz4oRqsOMQ9/L 9osAzXCacQyBRfBrnNDxf/7w3hoVOjJrSeLiBGGz7TQqisrkLO4Oq8G6hGtVhZQr 2VcLK94HTDuKDNAkLTIJanit6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjbSWdG OaJpnn9ZLVs7/7dpc2jTMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvt3LWoURSq+wcdgtu1nJgv6+ceJ/sa/Y+3wIUlbKDfh4+LkN32zqH /i1+m4F0GymkefB7K2qhGPOXLw7rU0+oCUvtOqD8FCg+KZctrmh2mJcE47QXMmcy OdjBRUSProzEtrSJUowkl6EK2Aswazm/vsdDQSY3QnwJLyd+s0vHvMTq3hhRVacI GO6Tcvw7m8cEg4ynfYi+aKLhF4pgb/3AI8+b05yXra0M7XRfgOI9jHKWUsjCn0vC gdY73Dg/VRHJLzRRJkHJs7cBEq5KMD7TCvZkeDyCX97JmjtGb5FEJrupupGyPGVf 2XmhE2zBxUBJv5rqXDYY+ihtE+ucv47+ -----END CERTIFICATE-----Generated at Tue May 13 11:38:36 2025 by rpki-client