$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: Av5e2zdkypH3XbnR8Lax2wd5IhXS0mwwwtjrMPG3w80= Subject key identifier: E3:DA:DF:C8:0E:17:CF:CF:66:17:C3:BB:56:3E:02:77:C3:2A:EF:9D Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 014A Signing time: Thu 03 Jul 2025 04:19:34 +0000 Manifest this update: Thu 03 Jul 2025 04:19:33 +0000 Manifest next update: Thu 10 Jul 2025 04:19:33 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: So7ZzXrirXFFlh27eGxX8ili6+BkGrRcRv2fY8F7pDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Jul 3 04:19:33 2025 GMT Not After : Jul 10 04:19:33 2025 GMT Subject: CN=686604d5-e01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9c:d1:d9:19:ac:f9:77:9a:2b:64:f4:b6:7f: 28:9a:87:f1:d2:1d:59:91:46:68:ec:b0:35:9f:4a: cb:b8:32:3d:98:23:11:09:c0:cb:ae:f0:71:99:d0: 67:56:7e:93:98:02:f4:23:ba:db:95:fa:90:34:6a: 65:55:60:6b:e8:bf:04:58:84:8c:7e:fc:3f:3e:6c: 61:96:2b:cf:5a:f4:51:fb:55:9a:fe:7c:1c:93:8b: b0:5f:76:7c:6c:c2:18:f9:4f:31:ae:54:76:7b:31: 71:41:7a:da:0b:2e:94:7b:8e:91:9c:b4:4b:2f:94: a3:46:bf:2b:a1:08:f1:31:c0:fb:6c:fa:6c:d6:97: f6:b8:01:d4:3e:4b:e0:85:70:d8:ce:22:e9:a7:11: 35:b9:84:5e:fc:80:24:27:e8:f8:0d:3a:d8:16:41: 32:c4:3c:56:71:ea:71:65:4b:93:ba:2c:9e:01:b5: f7:a0:58:76:95:fd:96:64:11:b9:17:5d:31:bb:73: c1:eb:59:2e:31:29:44:55:e1:c4:03:57:a3:7d:8d: 2f:76:4b:04:18:38:1b:49:cb:07:1c:31:a1:fa:b8: 35:3b:8e:d5:07:61:ad:cd:ae:d1:4f:cc:c8:a8:44: ed:7a:8f:17:bd:e1:a5:2d:aa:0e:14:63:98:5c:7e: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DA:DF:C8:0E:17:CF:CF:66:17:C3:BB:56:3E:02:77:C3:2A:EF:9D X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1a:28:77:88:c5:e6:11:1c:e0:63:6e:de:b7:ce:a9:c9:29: d7:b5:00:fb:10:28:95:9c:1c:ec:c8:c0:74:f7:76:9f:60:ec: 71:2c:cd:34:8f:14:b9:b1:aa:8f:59:bf:c6:5c:1e:8b:55:87: f9:3a:5f:ff:88:66:4e:84:9c:a3:3b:0e:ca:fa:a6:03:3d:85: e2:7a:0f:7e:4f:a0:bf:d4:c4:cb:90:34:fd:a9:1e:d3:5f:0a: 80:d9:7b:ff:ca:e5:df:77:49:9b:b4:3e:57:24:9b:bb:44:ed: 1f:39:fd:96:7f:5a:84:13:24:da:d7:3c:94:94:07:9c:91:70: a3:0e:06:5e:17:b8:d0:19:17:6a:c6:db:0c:76:38:fb:b6:9d: c3:66:3a:af:2c:85:cf:00:05:0a:60:bd:8f:f2:1d:c4:ea:5e: 0d:aa:91:02:9b:23:ef:62:55:88:e3:60:df:97:a0:c5:49:24: be:bc:36:a4:90:61:c1:7b:c7:b3:1d:fa:13:0b:66:cd:3e:ab: fb:49:22:2c:99:3a:9d:b5:da:5f:86:64:f0:97:19:15:f4:d5: 82:45:36:5c:af:a2:15:cc:58:5d:14:51:ab:91:7a:ff:15:c1: a0:2c:0c:18:38:e2:84:d0:78:7c:c8:a6:0a:2b:67:31:4f:3a: 5f:08:da:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUwNzAzMDQxOTMzWhcNMjUwNzEwMDQxOTMzWjAYMRYwFAYD VQQDEw02ODY2MDRkNS1lMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZzR2Rms+XeaK2T0tn8omofx0h1ZkUZo7LA1n0rLuDI9mCMRCcDLrvBxmdBn Vn6TmAL0I7rblfqQNGplVWBr6L8EWISMfvw/PmxhlivPWvRR+1Wa/nwck4uwX3Z8 bMIY+U8xrlR2ezFxQXraCy6Ue46RnLRLL5SjRr8roQjxMcD7bPps1pf2uAHUPkvg hXDYziLppxE1uYRe/IAkJ+j4DTrYFkEyxDxWcepxZUuTuiyeAbX3oFh2lf2WZBG5 F10xu3PB61kuMSlEVeHEA1ejfY0vdksEGDgbScsHHDGh+rg1O47VB2Gtza7RT8zI qETteo8XveGlLaoOFGOYXH79AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPa38gO F8/PZhfDu1Y+AnfDKu+dMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGih3iMXmERzgY27et86pySnXtQD7ECiVnBzsyMB093afYOxxLM00 jxS5saqPWb/GXB6LVYf5Ol//iGZOhJyjOw7K+qYDPYXieg9+T6C/1MTLkDT9qR7T XwqA2Xv/yuXfd0mbtD5XJJu7RO0fOf2Wf1qEEyTa1zyUlAeckXCjDgZeF7jQGRdq xtsMdjj7tp3DZjqvLIXPAAUKYL2P8h3E6l4NqpECmyPvYlWI42Dfl6DFSSS+vDak kGHBe8ezHfoTC2bNPqv7SSIsmTqdtdpfhmTwlxkV9NWCRTZcr6IVzFhdFFGrkXr/ FcGgLAwYOOKE0Hh8yKYKK2cxTzpfCNrd -----END CERTIFICATE-----Generated at Fri Jul 4 07:53:39 2025 by rpki-client