$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: O4dxQs0gYnJCRB0eBv7hR3plkAM3EXaxu3guIkZsRwE= Subject key identifier: DB:21:55:A4:6B:AD:6B:D8:CD:C8:63:06:67:14:43:A9:9B:9A:07:D5 Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 19EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 19EC Signing time: Sun 10 Aug 2025 16:20:52 +0000 Manifest this update: Sun 10 Aug 2025 16:20:52 +0000 Manifest next update: Sun 17 Aug 2025 16:20:52 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: aZuclZcZggzIjyRGxVBjZZ5oQArN2ARrUGBaul9/s4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6636 (0x19ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Aug 10 16:20:52 2025 GMT Not After : Aug 17 16:20:52 2025 GMT Subject: CN=6898c6e4-0153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:d6:8b:d7:97:4c:45:81:15:47:dc:e0:97: 41:4c:bc:05:98:c6:81:a9:aa:b9:22:e6:17:15:d5: 9e:d1:78:5e:33:0c:7e:6e:4e:c7:af:4a:63:e6:94: 9c:47:76:fb:51:57:aa:c4:2e:00:e5:d7:7c:83:44: f4:e4:3b:e9:a6:18:ac:c7:3b:68:d7:f4:2b:e3:62: c4:c5:c3:38:60:64:c8:e9:0f:db:f1:62:88:5f:25: e7:1f:96:29:3e:97:9e:fa:2e:49:3e:52:53:26:13: ff:d8:85:b0:c2:30:03:11:bf:48:ae:eb:01:81:f8: 29:4d:59:86:9e:2a:9c:03:5b:e3:3a:77:2b:af:03: 40:6d:27:c9:5a:3a:cd:ec:21:14:a7:5f:70:6a:05: 6d:bd:2d:67:37:31:de:c4:74:e9:2f:7b:4d:d7:ac: 13:67:48:a9:97:28:a2:df:95:15:40:fe:7e:03:9e: 36:fd:68:6d:29:7b:32:de:a4:b3:79:b5:ca:bd:c5: 62:e8:2c:00:09:12:fe:63:93:b3:28:e1:9e:3d:d0: a2:dc:a2:1e:58:dd:de:0f:20:00:d4:02:02:fc:7e: b1:2b:f4:04:be:b4:da:9d:e5:08:6d:69:88:24:57: b7:3a:1d:39:fb:e1:2d:95:7e:a9:40:32:7d:e8:55: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:21:55:A4:6B:AD:6B:D8:CD:C8:63:06:67:14:43:A9:9B:9A:07:D5 X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:4a:8e:3f:f1:d3:e2:ef:a7:fd:22:35:cc:87:47:7d:72:ea: 5e:8d:85:fc:30:09:20:56:02:a3:e8:93:6a:a5:cc:aa:28:2c: ca:b2:fb:3b:88:22:07:f9:90:aa:39:94:98:2a:a1:fd:2e:92: bc:48:c1:57:cd:33:45:a0:a1:02:55:7b:8f:f2:22:9a:09:9d: b4:9f:5f:45:bb:ef:0f:83:35:8a:ec:17:8b:66:4c:1e:81:03: a2:a4:b4:62:64:74:5c:f4:cd:d3:35:f0:09:4b:ca:27:ca:41: 9f:07:3c:a2:22:47:44:09:8c:dc:d2:22:11:da:4a:ac:eb:a1: cc:bb:c4:67:e2:76:bf:21:08:a6:c8:40:f5:fa:57:af:0d:fb: 59:76:fe:c3:85:25:70:95:19:19:86:2e:1b:7c:82:ca:39:52: 1f:18:55:f1:8a:91:dc:f4:79:55:f0:f2:51:a9:57:c0:06:ad: 19:c8:f0:e1:fd:6f:8f:b2:6f:58:8c:f6:45:3b:fa:67:11:ce: e2:f5:d7:03:9b:dc:63:48:4f:58:27:40:3b:2c:d9:48:10:c3: e1:13:6e:1b:1b:8b:cd:0a:0b:7e:e8:a7:27:bd:75:d6:1c:33: 07:85:0d:ee:22:43:c4:15:84:83:65:32:de:ec:be:76:42:44: 32:f2:f6:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjUwODEwMTYyMDUyWhcNMjUwODE3MTYyMDUyWjAYMRYwFAYD VQQDEw02ODk4YzZlNC0wMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNDWi9eXTEWBFUfc4JdBTLwFmMaBqaq5IuYXFdWe0XheMwx+bk7Hr0pj5pSc R3b7UVeqxC4A5dd8g0T05Dvpphisxzto1/Qr42LExcM4YGTI6Q/b8WKIXyXnH5Yp Ppee+i5JPlJTJhP/2IWwwjADEb9IrusBgfgpTVmGniqcA1vjOncrrwNAbSfJWjrN 7CEUp19wagVtvS1nNzHexHTpL3tN16wTZ0iplyii35UVQP5+A542/WhtKXsy3qSz ebXKvcVi6CwACRL+Y5OzKOGePdCi3KIeWN3eDyAA1AIC/H6xK/QEvrTaneUIbWmI JFe3Oh05++EtlX6pQDJ96FX3eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNshVaRr rWvYzchjBmcUQ6mbmgfVMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDASo4/8dPi76f9IjXMh0d9cupejYX8MAkgVgKj6JNqpcyqKCzKsvs7 iCIH+ZCqOZSYKqH9LpK8SMFXzTNFoKECVXuP8iKaCZ20n19Fu+8PgzWK7BeLZkwe gQOipLRiZHRc9M3TNfAJS8onykGfBzyiIkdECYzc0iIR2kqs66HMu8Rn4na/IQim yED1+levDftZdv7DhSVwlRkZhi4bfILKOVIfGFXxipHc9HlV8PJRqVfABq0ZyPDh /W+Psm9YjPZFO/pnEc7i9dcDm9xjSE9YJ0A7LNlIEMPhE24bG4vNCgt+6KcnvXXW HDMHhQ3uIkPEFYSDZTLe7L52QkQy8vaf -----END CERTIFICATE-----Generated at Mon Aug 11 10:33:54 2025 by rpki-client