$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: k31BUM6f3plV9aFM9WFxpIQfQxWR2t3ilqHX2vJ/TkE= Subject key identifier: 00:0A:C6:5C:2B:0D:C3:6A:C9:A6:B0:BA:6E:60:F8:9D:D5:FF:1A:48 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2130 Signing time: Sat 14 Jun 2025 15:53:41 +0000 Manifest this update: Sat 14 Jun 2025 15:53:41 +0000 Manifest next update: Sat 21 Jun 2025 15:53:41 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: TMAE0UZvp3Njg7YLQOp38GChi1YZFY7vqaVzwRezFy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8496 (0x2130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Jun 14 15:53:41 2025 GMT Not After : Jun 21 15:53:41 2025 GMT Subject: CN=684d9b05-274b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:db:c6:38:6e:ac:ff:0f:aa:9d:4e:2a:c0: 2f:87:6c:7a:6f:6a:ae:c1:8e:9b:d1:a0:b2:12:2e: 12:47:c8:29:51:b4:e1:03:09:5c:53:c5:96:0d:2b: 0e:ab:c5:f9:bd:48:37:1e:22:05:59:27:04:57:d4: 9b:e6:21:d7:f9:51:f3:44:53:d0:d8:be:98:25:76: 58:99:3f:c6:22:56:54:50:8a:cb:f9:9c:ab:26:c0: 0c:52:2d:05:5d:17:17:ab:b2:fd:01:d9:e7:f9:09: b8:7c:9c:67:c1:22:be:be:d5:33:05:39:a9:b0:43: ee:95:25:15:17:16:0a:52:a8:e8:dd:28:e0:0b:12: ba:7a:75:1b:52:90:01:e9:8b:26:b9:ac:6d:3d:a3: f9:82:b0:80:42:11:49:25:7f:6d:7a:de:80:72:e0: f8:8d:21:c0:4f:9e:75:c5:e8:dc:fe:8f:25:eb:57: b8:bd:1d:39:22:2c:87:b2:ac:0a:21:ad:ae:2f:0d: be:d8:80:1a:b4:88:54:3a:d6:32:cb:48:d6:11:05: c0:ec:3a:29:e9:02:d1:ab:28:1d:ac:cf:b7:58:29: f8:9a:67:2b:e9:1c:30:71:4e:ca:00:6b:45:f9:57: 64:5f:5e:2f:25:28:52:e2:9d:3a:72:66:b0:0d:6d: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:C6:5C:2B:0D:C3:6A:C9:A6:B0:BA:6E:60:F8:9D:D5:FF:1A:48 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c6:fd:b1:11:e1:e7:9a:81:b4:e7:e2:52:6e:24:87:a7:23: d2:12:59:a7:a8:14:65:3d:7a:1c:7d:10:9c:8c:5a:79:9d:d8: 2d:69:07:86:48:a2:5e:36:a9:ab:94:77:87:30:d4:91:2e:ad: 28:4b:b6:1f:4b:2a:5c:d9:ae:00:56:9c:2c:cf:50:79:06:a5: fe:da:4d:e7:7c:66:04:49:9e:0b:80:a0:e2:89:28:9f:b8:1e: af:66:6d:48:ec:90:bd:54:37:8c:ec:4d:5b:8f:5c:36:08:e6: a7:42:cb:28:1a:79:7d:a0:30:d8:8e:45:03:48:32:19:37:7b: c8:70:da:ea:c2:89:8d:6d:01:c7:1a:d6:17:0c:e6:80:14:10: 68:43:27:c5:58:51:fc:01:0d:5b:ad:10:84:65:45:f2:66:a0: 2a:9a:a7:14:ef:b2:44:cc:81:18:71:40:c3:03:a7:47:4d:1d: bc:7c:28:f0:3d:7c:d5:09:aa:0c:a2:0a:dd:ae:f2:1f:a0:18: 5d:ae:81:72:17:13:2d:9d:79:52:4f:34:2c:a3:d2:e5:79:68: 75:9b:12:30:9a:b1:20:4f:80:5d:f1:64:40:a8:ec:cf:f7:98: a6:34:27:17:cf:fc:c6:7f:94:40:fe:4e:1b:32:b4:12:ba:68: 92:c0:74:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwNjE0MTU1MzQxWhcNMjUwNjIxMTU1MzQxWjAYMRYwFAYD VQQDEw02ODRkOWIwNS0yNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvHbxjhurP8Pqp1OKsAvh2x6b2quwY6b0aCyEi4SR8gpUbThAwlcU8WWDSsO q8X5vUg3HiIFWScEV9Sb5iHX+VHzRFPQ2L6YJXZYmT/GIlZUUIrL+ZyrJsAMUi0F XRcXq7L9Adnn+Qm4fJxnwSK+vtUzBTmpsEPulSUVFxYKUqjo3SjgCxK6enUbUpAB 6YsmuaxtPaP5grCAQhFJJX9tet6AcuD4jSHAT551xejc/o8l61e4vR05IiyHsqwK Ia2uLw2+2IAatIhUOtYyy0jWEQXA7Dop6QLRqygdrM+3WCn4mmcr6RwwcU7KAGtF +VdkX14vJShS4p06cmawDW0HCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAKxlwr DcNqyaawum5g+J3V/xpIMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKxv2xEeHnmoG05+JSbiSHpyPSElmnqBRlPXocfRCcjFp5ndgtaQeG SKJeNqmrlHeHMNSRLq0oS7YfSypc2a4AVpwsz1B5BqX+2k3nfGYESZ4LgKDiiSif uB6vZm1I7JC9VDeM7E1bj1w2COanQssoGnl9oDDYjkUDSDIZN3vIcNrqwomNbQHH GtYXDOaAFBBoQyfFWFH8AQ1brRCEZUXyZqAqmqcU77JEzIEYcUDDA6dHTR28fCjw PXzVCaoMogrdrvIfoBhdroFyFxMtnXlSTzQso9LleWh1mxIwmrEgT4Bd8WRAqOzP 95imNCcXz/zGf5RA/k4bMrQSumiSwHTm -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:28 2025 by rpki-client