$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: r+smpCGWG54Qd3z8YBMnLctmeVEhZ3LXi5lKJPUsJD4= Subject key identifier: FC:87:9F:99:96:35:7A:89:D6:A7:FB:60:07:3C:AB:6D:87:32:75:96 Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 0385 Signing time: Mon 11 Aug 2025 02:05:40 +0000 Manifest this update: Mon 11 Aug 2025 02:05:39 +0000 Manifest next update: Mon 18 Aug 2025 02:05:39 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: H0uHveWqiPLd7LxH7iSv3my7YA2JQToOwsjf7RZ8SPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Aug 11 02:05:39 2025 GMT Not After : Aug 18 02:05:39 2025 GMT Subject: CN=68994ff4-33d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:ba:0a:01:4f:93:17:f9:6f:98:cc:03:8d: ab:9f:fd:bc:b9:95:fe:e0:1e:34:55:16:c1:32:c5: 37:f2:7b:8c:7f:18:2b:cc:d5:dc:75:61:fc:cf:4d: d7:21:e3:28:88:62:a8:55:7b:d9:f6:c5:de:b1:6b: 8b:95:f7:dc:5a:46:a6:2b:f8:28:58:c9:17:2b:b5: 7d:ad:28:a0:96:77:11:28:95:a1:38:b2:9d:11:a0: ed:45:7f:34:4f:7a:15:b0:00:e6:e3:7f:c4:88:bd: 2a:81:62:c1:72:b4:2d:e4:4a:a9:ee:6f:fb:aa:ba: 60:56:65:27:e0:69:3c:1c:5a:81:07:30:4f:64:62: 49:44:07:bc:c6:e2:15:b1:b5:35:30:2f:06:64:f9: 04:8b:59:50:3a:bf:ef:1b:dc:3f:d7:5f:a8:c4:69: f4:da:75:42:65:4b:96:74:f8:c9:b0:9a:41:d5:15: a0:d6:a8:03:8c:69:35:81:fd:73:90:5f:94:b3:8c: 80:e8:e1:3e:a3:94:bf:e6:73:b9:55:85:a2:45:e1: b1:da:7a:28:f1:19:b7:0f:19:90:12:77:80:08:d7: 6a:52:22:2a:f4:1e:54:fd:74:84:3e:43:1f:50:f2: a9:8e:b8:2c:69:98:02:3e:40:26:a9:1b:9d:f0:5d: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:9F:99:96:35:7A:89:D6:A7:FB:60:07:3C:AB:6D:87:32:75:96 X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cd:82:1e:bf:ef:76:49:ff:bf:8e:eb:0d:09:35:79:c5:79: 61:9a:2c:a5:93:2b:6e:fc:41:9c:28:82:17:9a:70:1d:c3:64: a4:0a:47:ad:82:40:74:ad:7e:f3:95:59:63:b3:9d:ed:d3:0a: 44:5d:77:1a:2d:ab:cf:00:bc:ab:9c:7d:e5:19:f5:8a:10:9c: 60:9e:f2:22:9c:62:8d:3f:ab:b8:fe:23:41:14:35:58:c8:9c: 00:a4:7c:5c:0b:32:8e:4a:eb:4c:c1:d9:28:54:6e:a5:3e:df: 38:dc:56:e1:9b:30:86:d0:50:71:44:a5:e2:6b:f4:a6:5b:c7: bb:d4:53:79:c3:bd:33:43:55:45:80:8c:60:22:32:a6:c1:b2: ca:18:02:a8:78:64:05:cc:e1:f5:12:4a:ae:bb:fa:a1:ef:ad: 19:71:e4:40:6a:e6:c2:8d:52:c8:15:95:3c:36:e6:25:df:3c: 8f:09:31:ef:e9:f0:f7:b2:97:84:7f:d9:7e:3b:85:75:ea:0c: c0:4f:9a:c0:37:bb:97:21:43:8e:b2:cb:6b:25:2c:77:89:4a: 75:7d:fa:16:c3:31:c7:fc:7a:4a:7c:a8:fc:b0:b2:85:db:05: 57:51:70:3d:84:b9:6f:89:4e:17:87:bd:40:39:93:f7:e8:cb: 43:bd:91:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUwODExMDIwNTM5WhcNMjUwODE4MDIwNTM5WjAYMRYwFAYD VQQDEw02ODk5NGZmNC0zM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLy6CgFPkxf5b5jMA42rn/28uZX+4B40VRbBMsU38nuMfxgrzNXcdWH8z03X IeMoiGKoVXvZ9sXesWuLlffcWkamK/goWMkXK7V9rSiglncRKJWhOLKdEaDtRX80 T3oVsADm43/EiL0qgWLBcrQt5Eqp7m/7qrpgVmUn4Gk8HFqBBzBPZGJJRAe8xuIV sbU1MC8GZPkEi1lQOr/vG9w/11+oxGn02nVCZUuWdPjJsJpB1RWg1qgDjGk1gf1z kF+Us4yA6OE+o5S/5nO5VYWiReGx2noo8Rm3DxmQEneACNdqUiIq9B5U/XSEPkMf UPKpjrgsaZgCPkAmqRud8F1yYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyHn5mW NXqJ1qf7YAc8q22HMnWWMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwzYIev+92Sf+/jusNCTV5xXlhmiylkytu/EGcKIIXmnAdw2SkCket gkB0rX7zlVljs53t0wpEXXcaLavPALyrnH3lGfWKEJxgnvIinGKNP6u4/iNBFDVY yJwApHxcCzKOSutMwdkoVG6lPt843FbhmzCG0FBxRKXia/SmW8e71FN5w70zQ1VF gIxgIjKmwbLKGAKoeGQFzOH1Ekquu/qh760ZceRAaubCjVLIFZU8NuYl3zyPCTHv 6fD3speEf9l+O4V16gzAT5rAN7uXIUOOsstrJSx3iUp1ffoWwzHH/HpKfKj8sLKF 2wVXUXA9hLlviU4Xh71AOZP36MtDvZEr -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:59 2025 by rpki-client