$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: FT4At6GWVN6O+FxiYVQmXW4O5XnSXoGpJFjY5AdqvpU= Subject key identifier: A1:BE:85:32:57:FB:FB:B0:1C:B9:B9:95:F4:73:5E:3D:48:62:BD:74 Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 7D Signing time: Sat 23 Aug 2025 07:04:11 +0000 Manifest this update: Sat 23 Aug 2025 07:04:11 +0000 Manifest next update: Sat 30 Aug 2025 07:04:11 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: 1ffea3KhP3/1okvF8LeXAJ5KTeMOCmvSoCfv8BqRovY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Aug 23 07:04:11 2025 GMT Not After : Aug 30 07:04:11 2025 GMT Subject: CN=68a967eb-5c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:f9:af:02:6f:75:c7:d5:91:1c:96:77:10: 11:9c:2f:5c:ec:6b:47:a0:4e:44:eb:d6:85:fa:1c: 06:f9:ec:28:f8:81:84:35:a1:40:26:2a:4a:3b:d9: 24:bd:f9:59:d8:42:cb:41:fa:8d:98:85:d6:19:42: 17:5d:32:de:7b:ef:64:92:d1:e0:82:28:15:8c:1b: 7f:77:54:ec:cb:d3:03:77:ea:83:4b:c5:55:59:e5: b3:6e:67:63:49:11:3d:60:9f:c1:5c:ca:4c:95:78: 97:e5:99:76:c5:0c:d7:01:c7:82:9a:d8:4f:8d:dd: 0f:d5:d9:39:3c:0d:ef:d9:b7:c0:b6:69:50:56:01: 6b:7d:12:51:5e:b4:8c:5f:d7:74:fc:f0:7a:40:8c: df:9c:73:23:d4:e7:ba:e3:74:4c:37:c8:47:fb:2a: c7:22:ac:9a:a6:56:e1:bb:9b:cc:ff:42:c5:69:5f: 13:e1:1d:a1:47:ee:8e:42:f0:90:ec:fd:34:d1:4d: 3d:9f:65:8c:a1:12:2b:a3:81:d1:df:8f:da:65:af: 3d:c5:b4:6b:a5:74:e0:fa:7c:b6:f7:34:08:26:58: 88:b5:eb:db:84:ad:89:21:02:70:0c:ba:28:47:ea: 00:07:20:e1:6b:33:14:f8:3a:1d:5d:fc:d6:47:36: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:85:32:57:FB:FB:B0:1C:B9:B9:95:F4:73:5E:3D:48:62:BD:74 X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:88:70:00:20:da:f5:63:18:d4:63:24:9e:9a:50:8c:3e:fe: 15:53:e3:c2:00:51:1e:4c:d2:64:96:7f:7f:01:c2:43:b0:c6: 21:24:10:40:ad:8a:60:4d:42:76:f6:2a:53:7f:2f:77:34:f1: e5:95:df:89:0d:15:63:a5:e0:bf:e3:69:8c:25:67:59:15:fa: 4a:39:a0:fc:f3:20:f6:55:6e:26:05:0d:cb:3d:5b:76:a2:40: a3:ba:b5:c5:71:73:de:e7:30:27:d9:ed:3f:4d:60:9f:d4:30: 28:54:aa:cb:0c:42:d6:7a:68:48:2d:06:4b:3e:50:52:1f:62: 2b:aa:ed:2a:22:f9:e4:e3:fd:fc:bd:82:18:a7:e0:66:d2:c6: 09:cc:b2:3e:df:0d:11:bd:59:19:59:e8:b8:6d:8b:51:52:4d: b4:2a:f9:1e:d1:40:98:33:cd:a0:8b:b6:39:db:2a:02:8f:90: 77:16:45:7b:eb:54:ce:55:be:c9:87:57:be:c8:f8:29:0b:8e: 31:30:58:da:ea:65:bb:c6:2f:b9:cc:76:d3:f8:8d:c1:83:a3: 62:20:e7:91:72:27:6c:20:2f:c5:8d:99:37:0f:11:54:14:58: b6:81:ea:b4:ac:99:86:00:d7:f9:48:6f:4d:60:c7:74:b5:e6: 4d:6e:80:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKDdCNjI2MjBCRkVCMzhDRUI2NEQyMTBDOTgwNURDMjQ4 MDQxNTcwN0QwHhcNMjUwODIzMDcwNDExWhcNMjUwODMwMDcwNDExWjAYMRYwFAYD VQQDEw02OGE5NjdlYi01YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmP5rwJvdcfVkRyWdxARnC9c7GtHoE5E69aF+hwG+ewo+IGENaFAJipKO9kk vflZ2ELLQfqNmIXWGUIXXTLee+9kktHggigVjBt/d1Tsy9MDd+qDS8VVWeWzbmdj SRE9YJ/BXMpMlXiX5Zl2xQzXAceCmthPjd0P1dk5PA3v2bfAtmlQVgFrfRJRXrSM X9d0/PB6QIzfnHMj1Oe643RMN8hH+yrHIqyaplbhu5vM/0LFaV8T4R2hR+6OQvCQ 7P000U09n2WMoRIro4HR34/aZa89xbRrpXTg+ny29zQIJliItevbhK2JIQJwDLoo R+oAByDhazMU+DodXfzWRzbwywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG+hTJX +/uwHLm5lfRzXj1IYr10MB8GA1UdIwQYMBaAFHtiYgv+s4zrZNIQyYBdwkgEFXB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9CRTMxOEZCMEQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9lMkppQ182empPdGswaERKZ0YzQ1NBUVZj SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9CRTMxOEZCMEQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9lMkppQ182empP dGswaERKZ0YzQ1NBUVZjSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwiHAAINr1YxjUYySemlCMPv4VU+PCAFEeTNJkln9/AcJDsMYhJBBA rYpgTUJ29ipTfy93NPHlld+JDRVjpeC/42mMJWdZFfpKOaD88yD2VW4mBQ3LPVt2 okCjurXFcXPe5zAn2e0/TWCf1DAoVKrLDELWemhILQZLPlBSH2Irqu0qIvnk4/38 vYIYp+Bm0sYJzLI+3w0RvVkZWei4bYtRUk20Kvke0UCYM82gi7Y52yoCj5B3FkV7 61TOVb7Jh1e+yPgpC44xMFja6mW7xi+5zHbT+I3Bg6NiIOeRcidsIC/FjZk3DxFU FFi2geq0rJmGANf5SG9NYMd0teZNboCL -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:02 2025 by rpki-client