$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: qH5ZKPrxV/6rLu+99Mhn8qn0TLRdFnmEanfUrAA4rIs= Subject key identifier: 87:DD:AB:EB:ED:28:0C:1F:6D:04:F1:3A:15:51:F6:CF:76:B7:2A:40 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2153 Signing time: Fri 22 Aug 2025 15:58:08 +0000 Manifest this update: Fri 22 Aug 2025 15:58:07 +0000 Manifest next update: Fri 29 Aug 2025 15:58:07 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: yCu/RqNl7uqFfTzqbAQlNxEHUZG8OGx7ep4txvPUWME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8531 (0x2153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Aug 22 15:58:07 2025 GMT Not After : Aug 29 15:58:07 2025 GMT Subject: CN=68a89390-4e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:33:fe:e2:32:ea:3f:4f:83:89:d3:97:80: 2a:9f:c9:2d:b0:09:b5:57:d9:a5:22:54:36:31:55: f5:ae:52:5a:12:02:6c:6d:38:3f:cb:f1:06:19:57: 19:63:70:00:3a:3e:ea:94:63:ea:28:7e:6d:16:da: 5f:dd:a8:22:fd:f3:f6:3a:8d:b4:7c:f9:2a:4a:62: 6e:4e:b7:57:01:06:f7:ca:a2:5b:b2:d8:f3:e1:c1: 2f:7c:5e:76:4b:0d:20:12:0a:bc:c7:0a:1b:c3:65: a6:98:0b:64:20:be:36:59:ea:da:1e:d4:7a:e3:08: e3:e6:62:4c:cb:41:8b:d4:85:04:35:e7:35:e6:1f: c6:8b:f0:81:14:3a:a8:11:34:d5:49:01:57:aa:df: d1:e2:a2:c0:c6:b7:f3:20:44:00:8d:93:a2:69:4c: 98:6f:67:7e:66:d9:a7:a1:26:7d:77:e9:65:65:03: 93:55:81:41:f6:94:a9:e2:f0:50:c1:1a:f6:ea:2f: 35:ae:f5:0c:44:2c:1c:32:67:61:68:fa:64:97:63: d2:49:b4:39:d9:42:ac:6b:85:04:8a:c6:9f:e8:db: 81:8d:13:91:e6:6c:65:af:59:4c:ea:ef:c6:50:6d: 0a:b9:b4:11:44:71:20:94:1b:a9:0f:6f:33:47:7c: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:AB:EB:ED:28:0C:1F:6D:04:F1:3A:15:51:F6:CF:76:B7:2A:40 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:df:4a:b8:7c:80:72:37:96:78:b5:a6:1f:bc:57:4e:fb: 2f:ed:ea:02:9b:bc:64:4f:cb:e8:66:42:dd:5b:7a:f3:46:95: 99:e4:6b:3c:27:a0:32:6f:f5:f6:ee:90:16:ee:71:6b:5c:9c: 8d:8e:b2:3f:b1:d0:e3:26:f2:d4:fb:c1:16:70:ae:6e:cb:52: f8:e4:e7:18:1b:82:4a:4b:eb:00:e8:7a:bc:5b:5c:0c:aa:9b: 7b:4b:e0:b7:60:a1:82:8f:6c:1e:41:af:35:62:c1:8d:9d:d9: 20:85:2c:ef:13:72:25:59:a2:e2:10:bf:f6:d7:03:89:c4:3c: db:e8:25:16:45:c1:5f:91:df:6f:dc:79:99:5c:a9:44:d0:9f: 1c:cb:93:6a:cb:97:21:8d:cc:7c:17:5d:dc:72:01:00:af:bc: 70:80:4b:c2:21:73:6d:f5:e2:cd:da:bc:c8:6a:05:9d:73:5b: 52:06:c0:8e:61:e6:89:90:57:5a:0e:bd:69:05:8a:c3:5c:08: 16:ca:2f:7b:96:ba:08:06:f2:ac:b9:de:95:c1:f5:0a:b8:2a: d4:b0:a3:d0:3f:21:4a:b2:0b:39:56:4f:be:cc:5e:9c:27:e1: 04:df:ed:b7:f5:68:6f:45:a3:5f:32:65:56:53:a9:20:0a:a2: 94:23:91:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwODIyMTU1ODA3WhcNMjUwODI5MTU1ODA3WjAYMRYwFAYD VQQDEw02OGE4OTM5MC00ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMwz/uIy6j9Pg4nTl4Aqn8ktsAm1V9mlIlQ2MVX1rlJaEgJsbTg/y/EGGVcZ Y3AAOj7qlGPqKH5tFtpf3agi/fP2Oo20fPkqSmJuTrdXAQb3yqJbstjz4cEvfF52 Sw0gEgq8xwobw2WmmAtkIL42WeraHtR64wjj5mJMy0GL1IUENec15h/Gi/CBFDqo ETTVSQFXqt/R4qLAxrfzIEQAjZOiaUyYb2d+ZtmnoSZ9d+llZQOTVYFB9pSp4vBQ wRr26i81rvUMRCwcMmdhaPpkl2PSSbQ52UKsa4UEisaf6NuBjROR5mxlr1lM6u/G UG0KubQRRHEglBupD28zR3yg8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfdq+vt KAwfbQTxOhVR9s92typAMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKN9KuHyAcjeWeLWmH7xXTvsv7eoCm7xkT8voZkLdW3rzRpWZ5Gs8 J6Ayb/X27pAW7nFrXJyNjrI/sdDjJvLU+8EWcK5uy1L45OcYG4JKS+sA6Hq8W1wM qpt7S+C3YKGCj2weQa81YsGNndkghSzvE3IlWaLiEL/21wOJxDzb6CUWRcFfkd9v 3HmZXKlE0J8cy5Nqy5chjcx8F13ccgEAr7xwgEvCIXNt9eLN2rzIagWdc1tSBsCO YeaJkFdaDr1pBYrDXAgWyi97lroIBvKsud6VwfUKuCrUsKPQPyFKsgs5Vk++zF6c J+EE3+239WhvRaNfMmVWU6kgCqKUI5FH -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:39 2025 by rpki-client