$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: EQPryqX2lyF5AKQcBYrvHXmlAPgc7kL09Eow+UfqXQc= Subject key identifier: 57:89:E6:08:9E:2A:D4:49:52:7A:FC:9A:B7:A5:46:22:90:81:FA:47 Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 19C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 19C0 Signing time: Fri 16 May 2025 16:36:31 +0000 Manifest this update: Fri 16 May 2025 16:36:31 +0000 Manifest next update: Fri 23 May 2025 16:36:31 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: 2DggknrIMFHyw1kksl36p24rxk0ZWvfyvoVs7fmhFLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6592 (0x19c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: May 16 16:36:31 2025 GMT Not After : May 23 16:36:31 2025 GMT Subject: CN=6827698f-db6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:51:90:9a:81:03:c7:24:99:2a:2f:a1:86: 98:fd:41:5b:15:36:27:ae:b2:de:08:45:82:53:9b: 5d:48:3f:20:c0:88:78:92:28:f1:ee:ff:ad:96:82: ea:8d:db:07:e1:0b:a4:56:4a:ab:5a:cc:f2:a7:6d: d7:e3:45:84:67:a1:79:0f:7c:ef:74:08:7a:7d:5a: 34:1c:8f:b0:f9:67:da:a0:b6:9d:2e:86:5e:b1:34: 5d:b2:d4:0e:9d:c2:1b:c8:28:c4:af:cd:aa:0b:97: 00:d6:e8:e8:f0:c0:61:18:f2:29:f9:be:ce:92:42: 9c:bc:eb:40:01:0d:0a:fd:c8:2a:dc:5e:1c:1c:58: b0:93:aa:22:55:32:7d:ad:f9:fb:ed:77:25:0a:b7: 02:1b:3a:a9:fc:03:e4:7e:d5:49:97:6c:1a:54:32: bc:cf:36:06:7f:96:9c:d8:e2:2b:16:72:50:47:b4: 32:6c:c5:9d:ad:c8:64:7c:5a:81:f1:6e:e1:74:2e: bd:b2:4e:56:5d:24:a9:15:74:18:a8:10:43:d3:2c: 1f:14:cd:0e:0a:db:d6:97:1b:e5:41:ef:06:41:85: 72:d5:25:a4:4a:71:7f:9f:75:02:18:2c:d5:a5:78: 8d:27:28:e4:78:13:1f:ea:1e:7c:03:df:86:bf:58: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:89:E6:08:9E:2A:D4:49:52:7A:FC:9A:B7:A5:46:22:90:81:FA:47 X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:57:72:5d:b5:16:97:d6:2c:6e:4d:7c:08:04:00:8b:43:5f: cd:c7:11:06:e6:c9:f0:b8:03:c2:af:93:e9:5d:09:97:17:d0: b4:9f:bc:cd:04:b9:31:f0:1b:a4:f1:e3:60:3f:d2:bf:63:a4: bf:fd:b6:95:d9:de:54:e6:6c:a3:f8:91:02:1f:2f:69:c6:d8: 35:04:55:56:fd:7e:b1:90:c1:00:47:58:30:08:7a:eb:52:64: 33:02:99:77:66:40:4f:38:6b:aa:22:e5:29:cd:a8:2d:bf:25: ac:32:f0:66:d1:70:60:d6:71:d2:d8:1a:81:96:4c:c4:00:fa: ec:32:b6:82:8d:c3:a6:b5:7d:19:17:6c:1f:67:57:65:be:f4: 5e:86:a0:bd:4c:8f:cc:72:83:b8:46:9f:a2:dd:c5:5f:ed:e2: 37:83:32:a1:26:ca:57:7d:4b:99:97:85:f5:19:cb:6f:48:ae: eb:dd:00:74:f1:8a:83:e5:79:c6:e4:99:2c:73:40:f5:ee:4c: 11:f8:85:df:85:66:1b:c8:42:6d:9c:3b:21:51:9b:fc:a1:ab: e9:d0:96:35:e1:f6:b2:13:32:58:89:8c:8a:48:78:2f:d6:7a: 54:5c:2a:28:c1:c1:11:b0:a5:70:77:08:1c:6d:e4:0d:9f:46: b2:08:21:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjUwNTE2MTYzNjMxWhcNMjUwNTIzMTYzNjMxWjAYMRYwFAYD VQQDEw02ODI3Njk4Zi1kYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGlRkJqBA8ckmSovoYaY/UFbFTYnrrLeCEWCU5tdSD8gwIh4kijx7v+tloLq jdsH4QukVkqrWszyp23X40WEZ6F5D3zvdAh6fVo0HI+w+WfaoLadLoZesTRdstQO ncIbyCjEr82qC5cA1ujo8MBhGPIp+b7OkkKcvOtAAQ0K/cgq3F4cHFiwk6oiVTJ9 rfn77XclCrcCGzqp/APkftVJl2waVDK8zzYGf5ac2OIrFnJQR7QybMWdrchkfFqB 8W7hdC69sk5WXSSpFXQYqBBD0ywfFM0OCtvWlxvlQe8GQYVy1SWkSnF/n3UCGCzV pXiNJyjkeBMf6h58A9+Gv1jdGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeJ5gie KtRJUnr8mrelRiKQgfpHMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgV3JdtRaX1ixuTXwIBACLQ1/NxxEG5snwuAPCr5PpXQmXF9C0n7zN BLkx8Buk8eNgP9K/Y6S//baV2d5U5myj+JECHy9pxtg1BFVW/X6xkMEAR1gwCHrr UmQzApl3ZkBPOGuqIuUpzagtvyWsMvBm0XBg1nHS2BqBlkzEAPrsMraCjcOmtX0Z F2wfZ1dlvvRehqC9TI/McoO4Rp+i3cVf7eI3gzKhJspXfUuZl4X1GctvSK7r3QB0 8YqD5XnG5Jksc0D17kwR+IXfhWYbyEJtnDshUZv8oavp0JY14fayEzJYiYyKSHgv 1npUXCoowcERsKVwdwgcbeQNn0ayCCEO -----END CERTIFICATE-----Generated at Sat May 17 12:12:22 2025 by rpki-client