$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: OIZJ3iYAvcmwC0z5GDc59kZFkS/EPVQocyNWDHWe62w= Subject key identifier: 28:FE:90:4D:7E:DA:1D:A6:71:0C:CE:44:B9:00:9C:B1:08:02:01:D5 Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 63 Signing time: Thu 03 Jul 2025 07:23:10 +0000 Manifest this update: Thu 03 Jul 2025 07:23:10 +0000 Manifest next update: Thu 10 Jul 2025 07:23:10 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: QlCvlUkfl0zrreOn7D0Jr/Hxb8fvsv6kQtoJM+NaV8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Jul 3 07:23:10 2025 GMT Not After : Jul 10 07:23:10 2025 GMT Subject: CN=68662fde-dd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:7c:72:f5:83:96:ac:7e:83:5e:99:d8:9e: dc:98:db:32:12:cf:bd:da:41:a6:0f:bf:0f:6f:19: 2c:8c:b7:89:9c:56:02:35:86:9e:1d:7b:f0:d2:c4: 39:40:c9:e3:38:ca:dc:22:bd:e8:ab:b6:07:f8:0e: 02:61:4b:3f:83:62:67:54:1c:3d:b0:0e:23:e7:4e: de:a5:1c:6d:4d:56:99:3e:f6:81:24:1d:12:9f:ee: 32:50:7c:c8:9c:cf:4e:d2:8a:07:7d:39:73:46:a4: 70:ab:99:bb:18:86:b9:e4:f9:ca:93:c2:7b:2d:48: 9d:1c:e1:2b:c4:28:3d:2e:75:33:47:a3:fd:e0:09: 4b:c2:03:73:e4:a4:13:76:48:f2:f8:e4:17:09:73: 23:90:a9:ec:18:a0:73:5c:6b:03:30:49:96:bf:bc: e8:a2:76:3c:18:f9:75:82:7f:30:d3:8b:33:7f:0f: 0c:4c:bb:09:33:5c:31:24:22:e5:86:27:ad:13:68: 16:b5:6d:3c:89:1a:ca:41:3a:69:de:31:05:83:64: 4c:6f:50:53:42:a6:8a:fb:c8:0d:69:59:0a:af:48: 14:b9:b9:81:0f:d6:6a:25:38:f1:2d:06:b9:89:f4: 6a:00:7c:9b:f7:77:4e:2d:b3:4e:b4:6f:05:be:7a: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:90:4D:7E:DA:1D:A6:71:0C:CE:44:B9:00:9C:B1:08:02:01:D5 X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c4:e1:05:c8:c7:19:33:2c:30:39:6b:e6:de:a2:96:f7:66: 2e:8f:f7:14:2d:7a:0a:7f:4d:d7:38:53:ca:9e:f0:e1:97:e1: 39:7d:6f:cb:4f:82:5f:47:e9:87:1c:61:8c:6d:5a:d5:9e:20: 0a:11:25:d7:13:29:4f:65:70:04:71:5a:d4:88:59:f7:ca:26: 9d:f9:5f:db:e4:25:28:84:9e:71:69:28:42:55:77:f7:03:c6: 9b:9c:d2:66:9d:51:1a:e8:c9:55:49:60:a8:a8:ea:78:9e:d9: 57:51:fd:bf:00:64:f5:3c:48:ab:23:00:59:c3:9b:7e:fe:d3: 13:de:c0:80:a8:f1:2b:17:f1:19:e5:51:d5:1e:a7:85:0a:b3: c2:d8:03:81:90:40:3c:36:11:21:62:79:24:0d:bc:b4:ba:76: 6d:2f:fa:21:c0:f9:f8:5c:59:cb:aa:25:52:f3:1e:56:cb:15: f9:92:2e:67:f1:26:fd:e5:ac:7a:58:55:18:fc:a6:7c:d6:b9: 02:2a:ed:ec:20:b1:ce:f9:73:23:34:14:cc:70:45:83:44:26: 55:9c:e9:4f:ad:9e:d3:11:0e:6d:5a:06:1d:e1:d0:7b:a4:87: e0:e8:d8:5f:88:80:6f:59:ad:8a:f5:e9:9c:52:3f:32:b2:f6: c8:79:93:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5ODA1REMyNDgw NDE1NzA3RDAeFw0yNTA3MDMwNzIzMTBaFw0yNTA3MTAwNzIzMTBaMBgxFjAUBgNV BAMTDTY4NjYyZmRlLWRkMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPAnxy9YOWrH6DXpnYntyY2zISz73aQaYPvw9vGSyMt4mcVgI1hp4de/DSxDlA yeM4ytwiveirtgf4DgJhSz+DYmdUHD2wDiPnTt6lHG1NVpk+9oEkHRKf7jJQfMic z07Sigd9OXNGpHCrmbsYhrnk+cqTwnstSJ0c4SvEKD0udTNHo/3gCUvCA3PkpBN2 SPL45BcJcyOQqewYoHNcawMwSZa/vOiidjwY+XWCfzDTizN/DwxMuwkzXDEkIuWG J60TaBa1bTyJGspBOmneMQWDZExvUFNCpor7yA1pWQqvSBS5uYEP1molOPEtBrmJ 9GoAfJv3d04ts060bwW+elbHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKP6QTX7a HaZxDM5EuQCcsQgCAdUwHwYDVR0jBBgwFoAUe2JiC/6zjOtk0hDJgF3CSAQVcH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0JFMzE4RkIwRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTJKaUNfNnpqT3RrMGhESmdGM0NTQVFWY0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90 azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnE4QXIxxkzLDA5a+beopb3Zi6P9xQtegp/Tdc4U8qe8OGX4Tl9b8tP gl9H6YccYYxtWtWeIAoRJdcTKU9lcARxWtSIWffKJp35X9vkJSiEnnFpKEJVd/cD xpuc0madURroyVVJYKio6nie2VdR/b8AZPU8SKsjAFnDm37+0xPewICo8SsX8Rnl UdUep4UKs8LYA4GQQDw2ESFieSQNvLS6dm0v+iHA+fhcWcuqJVLzHlbLFfmSLmfx Jv3lrHpYVRj8pnzWuQIq7ewgsc75cyM0FMxwRYNEJlWc6U+tntMRDm1aBh3h0Huk h+Do2F+IgG9ZrYr16ZxSPzKy9sh5k/w= -----END CERTIFICATE-----Generated at Thu Jul 3 23:26:56 2025 by rpki-client