$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: e1DfS+dE7d3zHAVvoKyXMFdQrDDSSC5vI3DRAJXMTTg= Subject key identifier: 8F:0F:8C:1D:AD:EF:04:CB:0B:2A:F7:2B:C8:23:BF:7B:AA:F3:D3:9D Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 019D Signing time: Wed 02 Jul 2025 23:35:17 +0000 Manifest this update: Wed 02 Jul 2025 23:35:16 +0000 Manifest next update: Wed 09 Jul 2025 23:35:16 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: S15bbvjBi74jrxoYvOIeAkaiwuAXz9OdtnV2iulitvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Jul 2 23:35:16 2025 GMT Not After : Jul 9 23:35:16 2025 GMT Subject: CN=6865c235-e7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:47:71:16:42:e9:ef:b7:3b:57:dc:95:de: 1e:f6:81:a3:63:79:15:2f:c2:e0:a8:62:41:2b:81: 92:17:72:7c:cb:71:e4:2c:22:6e:60:64:17:10:86: a8:8e:b5:0f:7a:10:b3:85:00:1b:07:e3:d7:17:01: 84:ff:d7:f7:71:48:8b:62:22:99:c9:78:a8:99:f5: 65:52:96:57:65:53:2f:4d:80:72:2b:0f:7a:29:ff: 57:ca:66:80:00:aa:96:93:a3:3a:a4:c0:e0:97:cf: 80:f6:0b:14:18:44:02:59:d6:06:80:d0:78:f1:18: d2:d4:fc:4f:2e:cf:8e:0e:3c:ae:a1:76:6a:be:ec: 66:c2:eb:97:12:87:10:9b:73:0a:65:66:b3:cc:d8: a2:62:cf:7b:e1:36:65:b4:5f:ed:6e:de:96:bc:5f: d6:01:df:6c:33:21:2e:65:dd:3d:75:e0:51:81:a4: a3:f5:fb:b8:63:8c:fc:5b:77:1e:8d:3e:f2:42:3b: 1b:59:a6:29:12:0f:2d:66:49:56:6c:20:0f:6d:29: fd:ed:01:f3:38:e0:01:8b:7f:15:96:ef:a5:00:99: 82:59:fa:e1:b1:09:f8:20:df:2b:d1:b0:d7:11:ac: dc:71:24:f7:b3:f8:49:f2:93:b5:22:f4:87:7b:fe: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0F:8C:1D:AD:EF:04:CB:0B:2A:F7:2B:C8:23:BF:7B:AA:F3:D3:9D X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:7a:1b:46:52:ef:67:d6:31:84:1e:9c:4c:f6:69:5c:29:49: 0f:f5:83:50:3b:cd:c4:8a:e7:09:58:fc:4f:dc:f2:0f:8c:b0: 93:bb:6c:7c:a5:9f:77:bc:99:b5:eb:36:3c:00:3f:50:0b:41: ed:b3:1a:23:e8:b1:e9:64:2d:40:db:2e:03:85:aa:dd:dc:37: 0f:38:e2:25:a0:37:d0:c2:c7:90:c4:63:f0:37:62:3f:38:8d: 87:d4:27:de:11:92:a9:2a:6f:02:f2:e4:f4:b3:53:5d:6b:07: 4b:fd:d8:51:22:92:5a:97:22:e4:97:b1:af:d8:c9:81:6f:bc: 7c:b4:a9:eb:9d:71:95:d6:dd:8d:d0:eb:23:d7:20:a9:8e:65: bc:7b:f3:0c:8f:e9:6e:fb:77:47:c8:47:b6:13:db:7b:c6:4d: 8c:0f:7b:f7:f0:e5:81:d9:ad:76:08:c7:ff:3c:f5:e4:db:d0: b1:d3:2e:cf:cb:91:f7:d5:fb:b4:6d:d0:97:2f:5a:b4:3e:ec: 22:1f:9e:fd:02:95:8c:f6:ee:77:e5:8f:6e:a4:e6:59:36:59: bf:a3:86:7f:0a:ba:5e:4f:41:8a:92:ac:98:fe:a8:68:67:2f: 2d:73:ac:7b:15:b8:42:62:e8:86:f7:42:37:cd:fc:38:89:59: 00:b3:3d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjUwNzAyMjMzNTE2WhcNMjUwNzA5MjMzNTE2WjAYMRYwFAYD VQQDEw02ODY1YzIzNS1lN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlIVHcRZC6e+3O1fcld4e9oGjY3kVL8LgqGJBK4GSF3J8y3HkLCJuYGQXEIao jrUPehCzhQAbB+PXFwGE/9f3cUiLYiKZyXiomfVlUpZXZVMvTYByKw96Kf9XymaA AKqWk6M6pMDgl8+A9gsUGEQCWdYGgNB48RjS1PxPLs+ODjyuoXZqvuxmwuuXEocQ m3MKZWazzNiiYs974TZltF/tbt6WvF/WAd9sMyEuZd09deBRgaSj9fu4Y4z8W3ce jT7yQjsbWaYpEg8tZklWbCAPbSn97QHzOOABi38Vlu+lAJmCWfrhsQn4IN8r0bDX EazccST3s/hJ8pO1IvSHe/6oKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8PjB2t 7wTLCyr3K8gjv3uq89OdMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmehtGUu9n1jGEHpxM9mlcKUkP9YNQO83EiucJWPxP3PIPjLCTu2x8 pZ93vJm16zY8AD9QC0Htsxoj6LHpZC1A2y4Dhard3DcPOOIloDfQwseQxGPwN2I/ OI2H1CfeEZKpKm8C8uT0s1NdawdL/dhRIpJalyLkl7Gv2MmBb7x8tKnrnXGV1t2N 0Osj1yCpjmW8e/MMj+lu+3dHyEe2E9t7xk2MD3v38OWB2a12CMf/PPXk29Cx0y7P y5H31fu0bdCXL1q0PuwiH579ApWM9u535Y9upOZZNlm/o4Z/CrpeT0GKkqyY/qho Zy8tc6x7FbhCYuiG90I3zfw4iVkAsz2j -----END CERTIFICATE-----Generated at Fri Jul 4 15:47:27 2025 by rpki-client