$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: 6ikwjUJPHESn+/aDSHwex00U+RaB7Z82cZOCB6LAsiY= Subject key identifier: 2C:CB:98:0D:26:10:83:1D:8C:68:AE:FF:54:04:75:63:DF:0D:53:19 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 214C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 214C Signing time: Fri 08 Aug 2025 16:00:23 +0000 Manifest this update: Fri 08 Aug 2025 16:00:22 +0000 Manifest next update: Fri 15 Aug 2025 16:00:22 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: EQYvGTdyjU2Mbn2ITZdElRdomDOwaiWgq4XWYjhz7X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8524 (0x214c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Aug 8 16:00:22 2025 GMT Not After : Aug 15 16:00:22 2025 GMT Subject: CN=68961f16-75a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:b4:a1:39:b4:eb:26:80:d9:6b:58:33:3e: 33:7e:61:86:6f:9f:02:42:35:aa:2e:36:f0:9d:46: c6:b7:bd:e2:48:e4:ea:e2:c4:71:41:d7:07:7d:96: 34:c9:a2:66:1e:dc:15:58:46:65:73:5f:b4:62:d2: 79:75:a1:a0:c0:ab:44:1a:2e:59:de:cc:62:4f:49: 1a:ff:eb:8f:68:81:37:a5:37:08:77:35:f1:e2:c7: 8a:2a:d6:29:97:26:62:d3:f5:41:a8:d5:f9:9d:75: 2a:eb:a8:e6:27:d1:1a:a4:5f:d2:49:7a:c0:f2:35: 02:ef:19:02:45:e9:b2:3c:d3:c0:68:89:c6:b6:b1: eb:9f:90:e9:be:c3:fe:d8:89:a6:0e:09:a8:4e:c9: 3a:f0:76:1b:96:b4:21:f2:8e:89:5a:1e:af:c1:0d: 6a:6c:21:cc:47:6d:ec:f3:cf:03:17:da:22:98:00: 45:3c:24:88:d8:60:45:fe:fc:d8:37:6b:81:15:45: 07:38:12:b7:82:70:9d:89:99:82:a0:4a:36:a6:a3: 00:e0:c3:35:a8:33:66:4e:15:98:26:be:27:9e:01: d3:44:0f:d9:a6:54:34:ed:11:39:49:2a:a1:d8:59: a8:9c:77:60:5a:b6:c4:65:7b:b9:5a:6f:1e:46:b3: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:98:0D:26:10:83:1D:8C:68:AE:FF:54:04:75:63:DF:0D:53:19 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b2:30:be:25:4b:3d:cd:d5:c0:2d:dd:b4:50:8a:a7:25:6d: 32:a3:c0:03:a3:cf:03:c3:0c:36:8d:ce:71:49:22:e0:33:81: f6:74:d6:92:5c:f2:21:3d:09:89:61:16:70:ff:03:31:41:52: f0:c4:26:3b:09:0d:d9:2f:5f:6f:b6:f0:68:26:ae:ca:fa:9e: fa:43:dd:13:54:09:2f:50:58:84:87:0c:0a:3d:f6:f2:ef:50: 35:5e:ea:cb:90:24:da:0a:73:44:a2:a9:36:35:d9:27:49:e4: fb:3f:30:68:6b:f2:5a:57:55:38:98:da:a6:4c:1b:e2:c1:48: 82:0e:e9:2e:27:d3:a4:3e:bf:2d:b5:22:42:e2:62:fc:52:ff: 70:0e:19:5d:84:8c:2a:70:13:fa:b7:99:ea:18:34:89:e3:aa: 16:4c:a6:be:e5:0d:2f:3d:bd:78:1b:df:ac:9b:ea:b0:7d:46: f7:09:ae:19:17:c7:f7:d9:2d:e9:1a:42:13:b4:8d:26:6e:99: 03:3b:ad:bf:bf:39:56:65:7a:d2:dc:40:53:c7:09:1d:9d:d7: b1:25:dd:e3:ae:87:a5:9f:94:7d:b5:62:f2:1d:5a:05:a0:b5: 85:c6:31:0d:48:86:de:32:aa:a2:2a:61:ab:c4:a8:30:55:5e: 27:fd:b4:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwODA4MTYwMDIyWhcNMjUwODE1MTYwMDIyWjAYMRYwFAYD VQQDEw02ODk2MWYxNi03NWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweO0oTm06yaA2WtYMz4zfmGGb58CQjWqLjbwnUbGt73iSOTq4sRxQdcHfZY0 yaJmHtwVWEZlc1+0YtJ5daGgwKtEGi5Z3sxiT0ka/+uPaIE3pTcIdzXx4seKKtYp lyZi0/VBqNX5nXUq66jmJ9EapF/SSXrA8jUC7xkCRemyPNPAaInGtrHrn5DpvsP+ 2ImmDgmoTsk68HYblrQh8o6JWh6vwQ1qbCHMR23s888DF9oimABFPCSI2GBF/vzY N2uBFUUHOBK3gnCdiZmCoEo2pqMA4MM1qDNmThWYJr4nngHTRA/ZplQ07RE5SSqh 2FmonHdgWrbEZXu5Wm8eRrPPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzLmA0m EIMdjGiu/1QEdWPfDVMZMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4sjC+JUs9zdXALd20UIqnJW0yo8ADo88Dwww2jc5xSSLgM4H2dNaS XPIhPQmJYRZw/wMxQVLwxCY7CQ3ZL19vtvBoJq7K+p76Q90TVAkvUFiEhwwKPfby 71A1XurLkCTaCnNEoqk2NdknSeT7PzBoa/JaV1U4mNqmTBviwUiCDukuJ9OkPr8t tSJC4mL8Uv9wDhldhIwqcBP6t5nqGDSJ46oWTKa+5Q0vPb14G9+sm+qwfUb3Ca4Z F8f32S3pGkITtI0mbpkDO62/vzlWZXrS3EBTxwkdndexJd3jroeln5R9tWLyHVoF oLWFxjENSIbeMqqiKmGrxKgwVV4n/bQv -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:47 2025 by rpki-client