$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json) Hash identifier: emqwXJrsbrgjKKA7wuOqasnkHmHFChBvPsDORM6LVIc= Subject key identifier: FB:3D:F9:B9:01:8A:1D:AC:A4:C1:88:B5:D9:4D:F8:36:46:3E:59:D5 Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Certificate serial: 2616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft Manifest number: 2D23 Signing time: Wed 02 Jul 2025 15:49:01 +0000 Manifest this update: Wed 02 Jul 2025 15:49:01 +0000 Manifest next update: Wed 09 Jul 2025 15:49:01 +0000 Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: RtQeuMzfrWkXs4rC9Srbm8ljeyYNXfsiBIRpprMW5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9750 (0x2616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Validity Not Before: Jul 2 15:49:01 2025 GMT Not After : Jul 9 15:49:01 2025 GMT Subject: CN=686554ed-15b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:e5:52:6e:2d:a8:33:d3:92:9b:dd:06:6f: b6:74:49:61:0a:17:25:63:11:03:59:61:d4:4f:f8: 6e:e2:81:aa:91:65:14:75:1c:43:6c:ff:37:22:5f: 9c:11:ed:22:41:e6:15:27:7c:f2:5a:d7:66:6d:c8: 55:63:51:95:81:d0:59:0e:f8:fd:45:35:e2:f3:ec: 13:50:a6:69:9c:4f:a9:01:e8:16:18:80:52:b4:fb: 3f:63:3c:44:96:d1:bb:09:dd:04:70:c8:8c:1c:85: 30:3f:02:6b:c8:38:33:73:61:26:b2:63:64:22:12: ef:ab:46:89:13:8e:a2:cc:99:ae:00:74:63:0d:86: 74:f9:b9:fe:af:ee:f3:63:c8:59:8f:a1:38:ce:9e: af:fd:6b:67:22:5e:12:b8:cf:d7:ef:3b:f8:89:af: 4c:94:85:1d:a8:eb:85:59:4a:59:aa:1f:8e:14:4a: 24:d9:13:69:ca:c2:71:d4:b6:6b:a7:7b:bd:20:ad: 2a:9c:f7:54:31:b6:e3:49:71:65:2b:9b:1a:c8:5d: 06:67:8c:33:6b:31:fc:ae:45:a0:4b:63:60:45:84: 77:d7:33:c0:f5:0a:04:78:aa:fe:27:38:6a:3b:e3: 24:d6:88:0d:be:eb:12:ad:2c:ec:95:7d:0a:59:24: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:F9:B9:01:8A:1D:AC:A4:C1:88:B5:D9:4D:F8:36:46:3E:59:D5 X509v3 Authority Key Identifier: keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:1a:a9:eb:7d:87:3f:95:eb:17:e3:14:23:ec:a6:ad:22:33: e2:52:1c:7a:aa:79:94:09:f7:83:9c:d1:ef:87:09:b0:ba:98: d5:dd:a5:c2:d8:94:20:12:9c:d0:a7:f4:ef:79:f6:00:8a:1c: 1f:7e:b6:77:60:cd:e6:51:31:46:d9:9b:27:68:3d:75:4a:c3: ca:0b:3b:95:82:c4:f2:90:07:cc:42:d3:f7:b8:31:52:f9:59: 90:fd:dc:84:49:dc:90:2e:73:d7:7c:59:10:12:8f:e9:1d:05: 60:14:9a:74:78:9d:03:f9:fc:d4:4f:f1:5f:12:60:0d:40:fb: 1e:85:da:16:3f:b4:47:71:17:ff:e7:a1:45:a4:41:1b:5f:d4: be:d0:d4:d5:64:73:f2:b4:44:86:df:70:12:e2:04:ca:98:fa: ba:12:c9:5f:46:1e:b2:c1:38:f0:a3:98:bb:bb:bd:fc:ce:b1: ea:f0:5f:0c:88:61:9c:7a:93:a5:bc:3e:11:b6:e9:2b:6a:6b: 8d:0f:62:f5:cd:9f:4b:24:bc:36:3e:d0:3f:aa:55:ce:5c:c9: 34:fd:f8:fe:49:bb:d8:6f:21:52:d1:d8:a0:6e:c3:dd:69:4f: ff:4c:fc:b6:78:23:bc:c2:24:ae:20:66:06:5b:e2:39:8a:c3: 2a:3b:52:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDc4QTk5MjY3RDdFRUYxMjdGNUZCNDUyNEY3OUM1OUFG MEFCQkMxRjQwHhcNMjUwNzAyMTU0OTAxWhcNMjUwNzA5MTU0OTAxWjAYMRYwFAYD VQQDEw02ODY1NTRlZC0xNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EDlUm4tqDPTkpvdBm+2dElhChclYxEDWWHUT/hu4oGqkWUUdRxDbP83Il+c Ee0iQeYVJ3zyWtdmbchVY1GVgdBZDvj9RTXi8+wTUKZpnE+pAegWGIBStPs/YzxE ltG7Cd0EcMiMHIUwPwJryDgzc2EmsmNkIhLvq0aJE46izJmuAHRjDYZ0+bn+r+7z Y8hZj6E4zp6v/WtnIl4SuM/X7zv4ia9MlIUdqOuFWUpZqh+OFEok2RNpysJx1LZr p3u9IK0qnPdUMbbjSXFlK5sayF0GZ4wzazH8rkWgS2NgRYR31zPA9QoEeKr+Jzhq O+Mk1ogNvusSrSzslX0KWSRFMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs9+bkB ih2spMGItdlN+DZGPlnVMB8GA1UdIwQYMBaAFHipkmfX7vEn9ftFJPecWa8Ku8H0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThTZjEtMFVrOTV4WnJ3cTd3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVNaOWZ1OFNmMS0wVWs5NXhacndxN3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThT ZjEtMFVrOTV4WnJ3cTd3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5GqnrfYc/lesX4xQj7KatIjPiUhx6qnmUCfeDnNHvhwmwupjV3aXC 2JQgEpzQp/TvefYAihwffrZ3YM3mUTFG2ZsnaD11SsPKCzuVgsTykAfMQtP3uDFS +VmQ/dyESdyQLnPXfFkQEo/pHQVgFJp0eJ0D+fzUT/FfEmANQPsehdoWP7RHcRf/ 56FFpEEbX9S+0NTVZHPytESG33AS4gTKmPq6EslfRh6ywTjwo5i7u738zrHq8F8M iGGcepOlvD4RtukramuND2L1zZ9LJLw2PtA/qlXOXMk0/fj+SbvYbyFS0digbsPd aU//TPy2eCO8wiSuIGYGW+I5isMqO1Je -----END CERTIFICATE-----Generated at Thu Jul 3 10:05:23 2025 by rpki-client