$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: WVDNNLwMPDiFH4MI9CvR+QRxwU80uwZOx2B1HjSODtc= Subject key identifier: FE:74:7A:F4:7A:A7:E5:E4:FD:CD:04:33:E3:FD:06:42:AD:A4:CB:07 Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 19CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 19CF Signing time: Sat 14 Jun 2025 16:20:51 +0000 Manifest this update: Sat 14 Jun 2025 16:20:51 +0000 Manifest next update: Sat 21 Jun 2025 16:20:51 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: tikpkzfH4gqaQwh/Fh/yQd3ZlBvC0Q55p38DTQ29kPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6607 (0x19cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Jun 14 16:20:51 2025 GMT Not After : Jun 21 16:20:51 2025 GMT Subject: CN=684da163-7b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:82:47:e7:6d:66:6e:36:61:33:62:f6:bd: 05:ee:3f:a8:f0:50:fb:f0:f8:78:4b:ac:13:18:1c: e4:7d:3c:89:04:75:8e:5f:4d:58:5c:4a:14:63:f3: 77:1d:60:af:bb:23:23:bd:21:e2:95:8f:af:d2:71: 1c:e1:53:6f:28:c0:0e:05:7c:11:ad:68:14:0a:d4: 5a:1f:cb:a7:69:95:02:15:46:f7:65:a1:21:b9:87: 62:a6:f0:0e:95:d2:ba:55:84:b9:f3:cf:7b:f0:1e: 6e:38:47:c3:14:02:d3:7c:18:f9:ca:d8:ba:26:2e: 70:ac:e9:3a:b2:1d:32:97:ae:ef:82:b8:d3:1b:b1: cc:fd:6f:fa:c0:f9:e0:f6:78:8d:58:5d:1d:8b:cb: 6f:75:05:67:43:d8:66:57:6b:a2:4f:2c:50:3a:6a: 5b:d2:c3:e6:7a:b6:0a:72:d6:ef:ea:37:0e:bc:2b: 58:8f:ea:43:60:8c:c9:4e:55:72:0e:1d:80:a0:35: 65:4d:28:ca:ee:63:7a:35:58:d1:ed:f8:60:4e:65: 0c:0e:83:ac:e5:83:31:09:96:e1:42:37:68:5b:ef: 29:5e:59:a3:7f:ee:70:cf:10:0b:58:6b:27:c4:b3: a3:52:86:11:3f:b5:50:48:cf:88:9d:6e:2b:3d:45: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:7A:F4:7A:A7:E5:E4:FD:CD:04:33:E3:FD:06:42:AD:A4:CB:07 X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0c:85:20:ce:36:a3:98:1e:28:3e:d7:be:2e:77:96:6d:6a: b3:04:66:0f:60:c5:e4:03:7b:f2:3c:07:2b:b9:8d:15:06:85: b0:1c:06:4e:e6:3b:e6:1c:9e:0a:41:02:e3:94:f1:e9:5a:ea: f8:12:93:8f:59:a2:a5:e2:08:82:0c:7c:eb:ed:f2:2b:c2:43: d3:7b:0e:4c:61:50:92:89:cd:6a:b8:8b:1e:34:f9:21:d4:54: 55:c0:58:4b:38:fb:7c:c5:60:d1:1c:16:9e:ff:75:f9:03:3d: 3d:c4:d4:be:cf:1b:10:a7:fb:33:39:16:55:57:cc:73:84:16: 19:eb:41:2a:66:cf:d3:70:1d:06:24:dd:c5:af:75:87:65:95: 53:fb:7d:40:26:c1:7b:82:a3:84:48:07:76:bc:5e:20:68:c6: 6c:a3:d4:f3:f2:d9:c0:cb:b5:ce:19:9b:69:4e:d4:aa:94:c8: d4:d0:15:6d:67:5c:32:b6:a5:5b:5a:7e:83:c0:2a:f8:9d:72: 5f:76:ef:98:86:d2:47:b5:41:40:bb:8f:6b:35:e0:58:72:3f: 29:94:e3:05:fe:e4:e1:18:37:7a:ef:24:85:74:78:9c:9a:eb: e9:db:09:fe:08:5c:93:72:87:a0:2f:cf:76:55:12:79:00:a1: 17:47:fd:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjUwNjE0MTYyMDUxWhcNMjUwNjIxMTYyMDUxWjAYMRYwFAYD VQQDEw02ODRkYTE2My03YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnayCR+dtZm42YTNi9r0F7j+o8FD78Ph4S6wTGBzkfTyJBHWOX01YXEoUY/N3 HWCvuyMjvSHilY+v0nEc4VNvKMAOBXwRrWgUCtRaH8unaZUCFUb3ZaEhuYdipvAO ldK6VYS588978B5uOEfDFALTfBj5yti6Ji5wrOk6sh0yl67vgrjTG7HM/W/6wPng 9niNWF0di8tvdQVnQ9hmV2uiTyxQOmpb0sPmerYKctbv6jcOvCtYj+pDYIzJTlVy Dh2AoDVlTSjK7mN6NVjR7fhgTmUMDoOs5YMxCZbhQjdoW+8pXlmjf+5wzxALWGsn xLOjUoYRP7VQSM+InW4rPUW8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP50evR6 p+Xk/c0EM+P9BkKtpMsHMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYDIUgzjajmB4oPte+LneWbWqzBGYPYMXkA3vyPAcruY0VBoWwHAZO 5jvmHJ4KQQLjlPHpWur4EpOPWaKl4giCDHzr7fIrwkPTew5MYVCSic1quIseNPkh 1FRVwFhLOPt8xWDRHBae/3X5Az09xNS+zxsQp/szORZVV8xzhBYZ60EqZs/TcB0G JN3Fr3WHZZVT+31AJsF7gqOESAd2vF4gaMZso9Tz8tnAy7XOGZtpTtSqlMjU0BVt Z1wytqVbWn6DwCr4nXJfdu+YhtJHtUFAu49rNeBYcj8plOMF/uThGDd67ySFdHic muvp2wn+CFyTcoegL892VRJ5AKEXR/0h -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:23 2025 by rpki-client