$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: XZ3Oo+ohEuWhxXl2LOnI49UAh+pqm8YTk1HZWBdrHQE= Subject key identifier: EC:76:66:62:0E:4A:5D:BA:E9:4D:9F:C3:E4:A9:AE:43:AB:5F:7A:F0 Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 01B1 Signing time: Sun 10 Aug 2025 23:18:44 +0000 Manifest this update: Sun 10 Aug 2025 23:18:44 +0000 Manifest next update: Sun 17 Aug 2025 23:18:44 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: YjWwPxdqoiS4ySYjEKOq8scTMhyK54ag4z1Z1r5hF2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Aug 10 23:18:44 2025 GMT Not After : Aug 17 23:18:44 2025 GMT Subject: CN=689928d4-ed65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:76:36:0f:48:4b:99:b3:b2:4b:b1:fc:3e: d2:29:64:7b:40:e6:ef:60:70:61:08:24:0a:bb:b1: 16:d1:9b:51:57:18:9a:94:65:66:95:fe:af:d6:ad: ec:03:4e:2a:61:89:bf:cd:0f:48:c7:42:2a:04:5b: 36:fc:c6:e4:d8:7e:95:7e:27:6b:79:c9:a8:bb:5b: d3:24:1d:61:60:53:e9:a7:92:e0:49:e3:c6:02:2c: 4b:4a:f8:43:23:16:05:70:04:b3:76:da:8d:ee:bd: 94:f3:fa:bb:35:b6:8a:67:ac:da:5b:ae:b4:84:5f: 71:29:4c:b8:cf:d3:e8:77:eb:01:fe:bd:93:3a:8a: 83:b6:22:f0:b8:16:df:e4:fc:63:f5:de:dd:de:2b: d0:7b:3c:4f:e7:b6:39:ae:74:00:19:68:54:80:85: b2:b0:23:e8:bd:d5:82:e4:6f:2e:c7:89:c4:79:7c: e0:44:2d:f5:02:67:2f:c7:8f:d5:22:4c:a5:08:45: 21:5d:b5:95:8b:cf:bf:3d:f2:1a:b2:54:fa:0e:08: 82:f5:fc:de:13:cf:9a:bc:8f:c7:20:63:bc:44:ee: ca:ee:aa:69:97:f4:b0:5e:b5:4a:78:62:5e:61:d5: 92:4b:56:c6:c1:36:0d:5f:a5:c3:ef:68:34:11:9d: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:76:66:62:0E:4A:5D:BA:E9:4D:9F:C3:E4:A9:AE:43:AB:5F:7A:F0 X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:b7:a8:48:20:e8:a8:6f:5e:a6:fc:90:e1:14:bb:86:73:f0: 4f:ec:de:35:6d:6a:41:ce:e5:9e:49:3c:fb:1b:74:44:de:a0: 1b:db:51:68:75:a8:e4:bd:f3:49:e4:a4:ce:3f:91:c5:f8:f8: 05:87:3a:1b:52:77:d1:e4:01:67:02:92:e2:24:d6:88:5c:da: 2b:16:1d:e2:27:b0:36:3e:28:7c:fb:bf:05:89:f9:69:87:47: 5c:51:b9:6c:d1:66:70:9a:c6:19:a2:71:5c:fc:c9:53:ce:12: aa:b5:33:39:da:8f:3f:7d:45:1a:24:7a:7a:c7:77:b6:09:96: 5c:60:61:c7:20:37:7a:e9:d7:67:12:5f:c1:60:10:af:44:75: f3:b2:fc:38:eb:8d:f7:e7:e6:2a:5c:c8:ce:84:57:ac:7c:bb: f7:3f:08:f3:75:95:73:ea:a0:c8:9a:25:b9:8a:16:a6:a9:d1: 44:94:8a:ec:63:94:23:8c:2c:1e:9e:72:85:62:70:6a:c7:0c: a7:1b:4c:40:a7:3e:88:ae:97:9c:16:8c:92:7a:c6:da:ba:06: f5:64:70:53:03:b9:c9:3f:0f:d9:f6:cd:c9:b8:e1:4d:c4:2f: 81:e3:2a:d8:ac:5e:46:13:0b:7e:65:45:9b:92:15:d5:9c:73: 8c:71:b1:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjUwODEwMjMxODQ0WhcNMjUwODE3MjMxODQ0WjAYMRYwFAYD VQQDEw02ODk5MjhkNC1lZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKZ2Ng9IS5mzskux/D7SKWR7QObvYHBhCCQKu7EW0ZtRVxialGVmlf6v1q3s A04qYYm/zQ9Ix0IqBFs2/Mbk2H6Vfidrecmou1vTJB1hYFPpp5LgSePGAixLSvhD IxYFcASzdtqN7r2U8/q7NbaKZ6zaW660hF9xKUy4z9Pod+sB/r2TOoqDtiLwuBbf 5Pxj9d7d3ivQezxP57Y5rnQAGWhUgIWysCPovdWC5G8ux4nEeXzgRC31Amcvx4/V IkylCEUhXbWVi8+/PfIaslT6DgiC9fzeE8+avI/HIGO8RO7K7qppl/SwXrVKeGJe YdWSS1bGwTYNX6XD72g0EZ2E5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOx2ZmIO Sl266U2fw+SprkOrX3rwMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKt6hIIOiob16m/JDhFLuGc/BP7N41bWpBzuWeSTz7G3RE3qAb21Fo dajkvfNJ5KTOP5HF+PgFhzobUnfR5AFnApLiJNaIXNorFh3iJ7A2Pih8+78Fiflp h0dcUbls0WZwmsYZonFc/MlTzhKqtTM52o8/fUUaJHp6x3e2CZZcYGHHIDd66ddn El/BYBCvRHXzsvw464335+YqXMjOhFesfLv3PwjzdZVz6qDImiW5ihamqdFElIrs Y5QjjCwennKFYnBqxwynG0xApz6IrpecFoySesbaugb1ZHBTA7nJPw/Z9s3JuOFN xC+B4yrYrF5GEwt+ZUWbkhXVnHOMcbHo -----END CERTIFICATE-----Generated at Mon Aug 11 12:56:28 2025 by rpki-client