$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: XOdrVHREUUc3sT69skG4bUss7/0WuQspZbEVJXXgErw= Subject key identifier: 26:F6:85:3E:BD:F7:01:41:21:B4:7C:1D:7A:6B:3C:6F:5B:D2:02:FA Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 76 Signing time: Sat 09 Aug 2025 07:24:03 +0000 Manifest this update: Sat 09 Aug 2025 07:24:03 +0000 Manifest next update: Sat 16 Aug 2025 07:24:03 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: NPzwRtBntshfsPwsJoHVQ7cVJFwXsfkYc3MRWMqG5iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Aug 9 07:24:03 2025 GMT Not After : Aug 16 07:24:03 2025 GMT Subject: CN=6896f793-f70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:10:e5:5f:54:b1:25:70:bc:8e:78:92:1b: dc:8a:3a:bc:5e:22:71:ef:88:02:7d:53:ba:8b:14: 2a:70:44:c0:60:ed:00:29:e9:44:a1:02:71:a5:3f: b4:c5:e8:e2:a9:1c:ae:6f:53:ad:c4:d4:15:b0:5f: 7a:00:53:fe:1d:2c:e7:e6:a3:1e:b0:db:0b:d5:e3: 5c:c9:de:49:2b:ff:98:95:0e:2c:77:4e:19:ba:24: 16:57:5f:47:01:c1:47:ca:76:fb:a9:c0:81:86:bb: 0d:5d:c3:7c:64:02:6f:31:17:97:8d:aa:bd:42:12: 04:48:55:25:49:87:84:9a:60:74:7e:52:e2:b6:a3: 9a:14:dd:e3:df:c2:0e:ba:a7:7c:b4:2f:b8:13:11: 06:29:79:0a:0a:32:2b:52:d4:ef:c7:f9:9e:96:c7: e2:50:99:68:c8:72:2f:11:db:34:3f:74:12:f8:70: 12:dd:b3:f5:6c:f7:94:9f:a1:71:1c:13:c9:6f:80: 1f:7c:45:55:c5:9c:39:3b:3c:4b:8c:90:cf:55:6f: 30:5f:8d:cf:f3:31:c6:7e:04:81:98:4f:12:03:59: 69:e8:39:9f:84:a2:b7:72:7a:40:56:0f:86:d6:ee: f4:34:7c:f3:6d:dc:43:06:b9:7e:65:77:d3:d8:a4: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:85:3E:BD:F7:01:41:21:B4:7C:1D:7A:6B:3C:6F:5B:D2:02:FA X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:21:46:60:a0:d3:09:32:a7:24:92:7d:ed:23:b1:b2:0c:c0: 25:2e:0f:49:ba:0a:64:cc:1d:9d:45:5b:4c:65:57:a9:c0:2c: de:90:ab:5a:17:2e:29:dc:8f:61:85:a8:90:83:d9:c8:3c:a0: be:12:df:19:8c:4b:47:ea:5d:6a:b5:37:bf:4d:51:c8:9f:d1: ad:fb:f1:66:e4:44:ea:6c:2e:e7:01:0e:85:c5:fb:e9:cf:e7: 44:d8:33:fb:91:e5:db:2f:00:8f:6d:c2:a0:44:00:24:74:a0: 58:2b:6d:66:6f:15:8d:8e:0c:03:61:97:cd:07:30:1a:4a:dd: 17:1b:d1:cb:0c:96:6e:ab:7b:b4:4a:21:29:82:15:23:e5:a1: 5e:aa:87:68:a3:39:50:99:f2:5c:d5:05:76:21:ce:c2:9a:dd: 2d:fd:f1:1d:d3:57:fd:78:04:e2:d9:3c:45:24:fc:73:4b:ce: 3b:9a:ad:9c:6c:8a:93:f4:1b:9a:26:df:a9:49:5d:49:fc:3f: f9:db:6a:37:53:4d:aa:7b:2a:95:ca:47:6a:46:6f:ce:b4:ef: 00:2d:da:df:f4:2b:e2:4c:60:48:11:8f:32:06:05:a9:0c:d7: 65:fb:a7:3f:59:9b:7a:fc:4a:b4:2d:89:4e:ae:bf:c2:65:03: ef:30:77:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5ODA1REMyNDgw NDE1NzA3RDAeFw0yNTA4MDkwNzI0MDNaFw0yNTA4MTYwNzI0MDNaMBgxFjAUBgNV BAMTDTY4OTZmNzkzLWY3MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbjxDlX1SxJXC8jniSG9yKOrxeInHviAJ9U7qLFCpwRMBg7QAp6UShAnGlP7TF 6OKpHK5vU63E1BWwX3oAU/4dLOfmox6w2wvV41zJ3kkr/5iVDix3Thm6JBZXX0cB wUfKdvupwIGGuw1dw3xkAm8xF5eNqr1CEgRIVSVJh4SaYHR+UuK2o5oU3ePfwg66 p3y0L7gTEQYpeQoKMitS1O/H+Z6Wx+JQmWjIci8R2zQ/dBL4cBLds/Vs95SfoXEc E8lvgB98RVXFnDk7PEuMkM9VbzBfjc/zMcZ+BIGYTxIDWWnoOZ+EordyekBWD4bW 7vQ0fPNt3EMGuX5ld9PYpGKrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJvaFPr33 AUEhtHwdems8b1vSAvowHwYDVR0jBBgwFoAUe2JiC/6zjOtk0hDJgF3CSAQVcH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0JFMzE4RkIwRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTJKaUNfNnpqT3RrMGhESmdGM0NTQVFWY0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90 azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAhRmCg0wkypySSfe0jsbIMwCUuD0m6CmTMHZ1FW0xlV6nALN6Qq1oX Lincj2GFqJCD2cg8oL4S3xmMS0fqXWq1N79NUcif0a378WbkROpsLucBDoXF++nP 50TYM/uR5dsvAI9twqBEACR0oFgrbWZvFY2ODANhl80HMBpK3Rcb0csMlm6re7RK ISmCFSPloV6qh2ijOVCZ8lzVBXYhzsKa3S398R3TV/14BOLZPEUk/HNLzjuarZxs ipP0G5om36lJXUn8P/nbajdTTap7KpXKR2pGb8607wAt2t/0K+JMYEgRjzIGBakM 12X7pz9Zm3r8SrQtiU6uv8JlA+8wd/U= -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:12 2025 by rpki-client