$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: mFUL9P4EUJ+ApxHDaotGIUpvV20xSyiY2Cl5plHevkI= Subject key identifier: 05:09:CD:A6:78:D7:EC:F3:91:87:3E:78:AA:B9:87:17:35:A5:EE:9A Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 0196 Signing time: Wed 18 Jun 2025 23:08:19 +0000 Manifest this update: Wed 18 Jun 2025 23:08:18 +0000 Manifest next update: Wed 25 Jun 2025 23:08:18 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: RLQq8hKqwvl5zfckAGaxSxFqxvr/MYcfbCzqPamMKeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Jun 18 23:08:18 2025 GMT Not After : Jun 25 23:08:18 2025 GMT Subject: CN=685346e2-e71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:6b:c0:ef:df:a1:4f:6f:93:31:24:03:ba: 42:d4:8e:41:f7:37:0c:d1:8e:20:eb:cd:02:7f:38: e3:6a:fe:49:c7:01:4d:71:44:ae:48:61:14:59:5e: 4a:71:53:ef:07:ed:52:22:49:10:6c:73:d4:b3:4a: 6b:a4:ae:8e:0b:11:31:4a:64:2a:b9:10:90:a1:24: d6:f1:5d:b2:ff:62:45:fd:59:47:db:2d:59:ab:64: da:48:d5:e4:97:67:ec:09:91:90:2e:e1:f9:17:0b: 9d:b7:a3:d8:31:d1:34:c7:8e:53:1d:68:30:22:b8: 17:c7:b4:3c:e2:c0:ca:07:21:21:6b:38:ad:a4:4b: 0a:5e:2b:33:73:a0:b9:b5:dd:ec:03:74:6c:75:c3: 6a:2d:c9:e8:2f:80:38:40:38:1e:3d:44:99:43:95: 40:85:dc:3e:f4:ad:2c:71:83:fe:df:ff:a6:45:31: 53:04:89:fe:2c:e9:70:85:12:6e:f1:ca:f0:c7:35: a8:b5:0a:e7:7d:8c:47:94:1c:6e:8a:bc:6b:b4:50: d5:ad:e6:a1:f7:33:e2:13:a9:75:65:21:71:57:74: 94:2b:ac:9e:47:81:02:db:42:9a:33:18:e8:cc:ed: c0:91:2a:ae:d4:49:ee:b5:3e:e2:5c:56:6f:07:c8: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:09:CD:A6:78:D7:EC:F3:91:87:3E:78:AA:B9:87:17:35:A5:EE:9A X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:84:11:39:1d:f8:07:7e:0d:96:33:bf:fc:d4:6a:c0:90:d7: ab:e2:2e:66:6c:7a:8a:73:1c:e8:2d:a1:8a:a1:e7:14:d4:d0: 38:37:3e:ab:20:62:e9:eb:f2:7f:9e:02:19:9a:d7:93:d5:bd: 3e:41:8d:f2:61:c2:47:41:ad:ce:4b:77:a4:27:08:de:13:c4: 2b:90:c3:38:50:88:c2:c3:40:f5:25:c4:0d:92:9d:a4:b3:42: 07:d8:df:ef:88:fe:89:e3:29:b3:71:2a:8d:fc:3a:1e:03:80: 26:fd:74:c0:ed:75:1c:ab:95:5e:71:f2:08:bd:70:a8:c9:3d: 1a:77:0f:26:13:5d:01:82:aa:23:11:3d:be:2c:32:f6:dd:b7: b5:88:03:cb:8b:38:cb:09:9d:7a:cb:fa:75:5c:2b:a3:b7:1d: c6:77:a6:a9:7c:e3:5e:76:28:96:1a:54:ce:9c:20:e7:80:64: 16:e7:8b:0d:0d:b4:71:d9:89:62:4a:c7:e5:ca:08:94:0c:9b: 20:22:78:22:de:0b:ab:6c:eb:2d:dd:2a:ac:e6:6f:77:5f:f1: 15:dd:71:a1:1c:d7:28:9e:af:a5:1d:65:c6:ef:37:ec:b8:9a: 5b:3a:a8:d1:e1:2e:32:79:d0:80:8e:49:19:33:1e:9a:b4:96: 69:0a:4e:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjUwNjE4MjMwODE4WhcNMjUwNjI1MjMwODE4WjAYMRYwFAYD VQQDEw02ODUzNDZlMi1lNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6X9rwO/foU9vkzEkA7pC1I5B9zcM0Y4g680Cfzjjav5JxwFNcUSuSGEUWV5K cVPvB+1SIkkQbHPUs0prpK6OCxExSmQquRCQoSTW8V2y/2JF/VlH2y1Zq2TaSNXk l2fsCZGQLuH5Fwudt6PYMdE0x45THWgwIrgXx7Q84sDKByEhazitpEsKXiszc6C5 td3sA3RsdcNqLcnoL4A4QDgePUSZQ5VAhdw+9K0scYP+3/+mRTFTBIn+LOlwhRJu 8crwxzWotQrnfYxHlBxuirxrtFDVreah9zPiE6l1ZSFxV3SUK6yeR4EC20KaMxjo zO3AkSqu1EnutT7iXFZvB8jZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUJzaZ4 1+zzkYc+eKq5hxc1pe6aMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfhBE5HfgHfg2WM7/81GrAkNer4i5mbHqKcxzoLaGKoecU1NA4Nz6r IGLp6/J/ngIZmteT1b0+QY3yYcJHQa3OS3ekJwjeE8QrkMM4UIjCw0D1JcQNkp2k s0IH2N/viP6J4ymzcSqN/DoeA4Am/XTA7XUcq5VecfIIvXCoyT0adw8mE10Bgqoj ET2+LDL23be1iAPLizjLCZ16y/p1XCujtx3Gd6apfONediiWGlTOnCDngGQW54sN DbRx2YliSsflygiUDJsgIngi3gurbOst3Sqs5m93X/EV3XGhHNconq+lHWXG7zfs uJpbOqjR4S4yedCAjkkZMx6atJZpCk6H -----END CERTIFICATE-----Generated at Fri Jun 20 23:10:22 2025 by rpki-client