$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: yyxijfkVXALijaf7391jiq9gUFa3IXZaIx4vIM2weGQ= Subject key identifier: 88:09:FA:05:05:0D:91:40:68:9E:1F:82:94:64:FD:78:B6:73:1B:52 Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 19F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 19F2 Signing time: Fri 22 Aug 2025 16:27:56 +0000 Manifest this update: Fri 22 Aug 2025 16:27:55 +0000 Manifest next update: Fri 29 Aug 2025 16:27:55 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: yyR3osHoMNrblqToPKhq6LZmSCMM9nc+wr5SRiv5bas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6642 (0x19f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Aug 22 16:27:55 2025 GMT Not After : Aug 29 16:27:55 2025 GMT Subject: CN=68a89a8b-bfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:83:38:9f:7f:a2:b6:a2:44:ce:b9:c6:51: 10:57:3f:e1:65:f1:e7:3c:b3:34:6f:61:e4:44:55: c9:c2:6c:d4:29:2f:2d:c2:53:d7:c2:a8:ba:54:75: a2:9f:39:72:0b:0c:c2:6d:b3:59:45:af:0f:39:11: 68:64:54:d7:25:f7:b0:84:6d:46:a7:8e:46:99:ef: 80:82:e2:fa:e5:01:69:63:be:56:d7:ed:ac:62:69: 91:35:5f:4b:c5:ed:63:6e:d8:75:44:2e:e8:26:0e: 7a:82:e8:96:3e:36:a6:a5:8c:c3:f0:87:a8:64:fb: 3a:a6:4a:5b:f8:20:55:a8:e4:e7:25:97:91:45:70: 43:9f:76:d4:09:b6:69:5e:b6:5e:35:30:b1:cc:45: 48:ff:ac:56:61:a9:71:22:1f:b8:15:30:f7:c0:8b: 8b:7a:48:25:cf:71:51:2d:e0:f1:0a:bb:e7:02:14: 22:4b:eb:17:6e:0e:70:32:c0:ed:d3:ff:e8:6f:f3: 6b:aa:e1:aa:fb:c2:1b:4d:41:e4:1c:91:b6:2c:ba: 57:f5:0f:d1:1c:f2:b8:90:24:b7:b9:f7:13:47:62: 84:16:83:d8:b4:6d:5c:1a:79:a9:11:03:59:04:ef: bc:e9:fb:c7:6f:a0:b6:11:10:81:37:75:7e:44:56: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:FA:05:05:0D:91:40:68:9E:1F:82:94:64:FD:78:B6:73:1B:52 X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8a:48:3b:62:59:68:58:04:a3:58:c0:0f:be:5f:9f:74:ea: e7:6b:45:6a:30:f7:08:5f:0e:5d:5f:e7:3e:12:2b:01:57:b4: 7f:37:b9:a6:3a:ac:b5:3a:80:4c:ac:c2:5a:c4:d7:74:e9:b6: 8f:a8:e8:58:0d:e3:ae:a7:f3:cb:08:ec:ae:fa:fe:b6:bf:7f: 3a:18:05:0d:8c:6e:11:40:fd:ac:ef:ff:8b:88:9e:8c:8d:8a: 88:9f:1f:ad:41:98:63:0a:8f:bf:1e:f9:a2:6a:ad:bf:31:b2: 33:de:4e:9c:64:1a:9d:69:3b:32:2d:3c:1f:d0:ca:9e:b0:85: b1:71:98:97:85:12:6c:88:ba:e2:2f:14:f2:b6:cf:89:ea:0e: 6c:41:a3:3d:a1:94:d9:77:52:ed:76:f4:84:ce:f7:e9:2c:24: 29:5e:db:6e:84:d1:f9:4b:3a:38:02:01:4e:8c:7c:02:1e:7b: cd:83:39:ca:49:79:c6:05:18:c5:52:c9:d0:9b:99:44:87:a5: a3:aa:5a:59:c3:50:8c:08:56:5c:69:7f:fa:4f:b5:e6:6c:23: a3:c8:e2:ae:d4:76:d2:13:19:62:77:5c:54:7a:d1:f7:80:61: 7e:c3:a8:59:9d:cf:65:fb:d7:a3:8a:43:a5:90:42:da:f8:5b: 13:01:5e:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjUwODIyMTYyNzU1WhcNMjUwODI5MTYyNzU1WjAYMRYwFAYD VQQDEw02OGE4OWE4Yi1iZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G6DOJ9/oraiRM65xlEQVz/hZfHnPLM0b2HkRFXJwmzUKS8twlPXwqi6VHWi nzlyCwzCbbNZRa8PORFoZFTXJfewhG1Gp45Gme+AguL65QFpY75W1+2sYmmRNV9L xe1jbth1RC7oJg56guiWPjampYzD8IeoZPs6pkpb+CBVqOTnJZeRRXBDn3bUCbZp XrZeNTCxzEVI/6xWYalxIh+4FTD3wIuLekglz3FRLeDxCrvnAhQiS+sXbg5wMsDt 0//ob/NrquGq+8IbTUHkHJG2LLpX9Q/RHPK4kCS3ufcTR2KEFoPYtG1cGnmpEQNZ BO+86fvHb6C2ERCBN3V+RFbI8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgJ+gUF DZFAaJ4fgpRk/Xi2cxtSMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGikg7YlloWASjWMAPvl+fdOrna0VqMPcIXw5dX+c+EisBV7R/N7mm Oqy1OoBMrMJaxNd06baPqOhYDeOup/PLCOyu+v62v386GAUNjG4RQP2s7/+LiJ6M jYqInx+tQZhjCo+/Hvmiaq2/MbIz3k6cZBqdaTsyLTwf0MqesIWxcZiXhRJsiLri LxTyts+J6g5sQaM9oZTZd1LtdvSEzvfpLCQpXttuhNH5Szo4AgFOjHwCHnvNgznK SXnGBRjFUsnQm5lEh6WjqlpZw1CMCFZcaX/6T7XmbCOjyOKu1HbSExlid1xUetH3 gGF+w6hZnc9l+9ejikOlkELa+FsTAV4x -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:46 2025 by rpki-client