$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json) Hash identifier: lOozub5FB6o+sANkaSi7ACAkA/P3lMFvTiABo817OFA= Subject key identifier: 8A:BC:5E:7F:A0:5A:53:BD:79:7D:68:EF:4A:E7:F1:49:40:7B:D8:67 Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft Manifest number: 07B8 Signing time: Sun 20 Jul 2025 21:17:50 +0000 Manifest this update: Sun 20 Jul 2025 21:17:50 +0000 Manifest next update: Sun 27 Jul 2025 21:17:50 +0000 Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: CbNNmLaILIE4wUNn/TmkuzqxOySMvfWHgPVt85UmZ8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DAE, serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Validity Not Before: Jul 20 21:17:50 2025 GMT Not After : Jul 27 21:17:50 2025 GMT Subject: CN=687d5cfe-fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:40:ec:0c:b3:87:fa:11:0f:71:c6:6a:c2: 09:e5:3d:ff:df:38:61:a0:42:c6:74:f6:b0:05:4b: 92:69:16:4e:03:8c:e2:08:0f:4a:80:9a:36:9c:aa: 6f:cf:1b:bd:da:92:c9:60:d7:a0:c6:62:5a:b6:17: 70:90:7c:e5:39:c8:78:4c:23:83:45:1b:13:09:66: c9:63:02:21:d3:73:70:a7:a5:e8:40:8b:07:f4:42: 03:6c:8e:ca:16:56:69:a8:90:b0:1f:23:1f:7e:a1: 1f:ad:08:1d:6f:96:63:68:5b:3f:1d:cf:70:07:fa: f6:54:0f:45:55:30:0a:8f:33:f6:f5:b7:1b:a1:fe: 8e:c0:77:73:de:2a:f2:ba:2c:e9:e7:61:58:e9:a3: 61:f7:bf:a7:27:60:75:e0:1f:e0:6e:c2:a1:af:0e: f7:12:79:a0:87:e7:ee:22:35:fd:ad:81:16:af:ae: 0e:dc:9e:e9:e2:88:2b:ec:85:f5:0b:05:83:5c:67: a0:d4:4d:68:f4:39:83:1d:bc:41:7c:9d:9c:bc:51: 5a:80:b2:cb:21:cd:c1:52:2c:d6:3d:28:18:e9:25: 87:72:8b:90:eb:19:ee:67:b2:8c:bc:fc:98:24:1f: 33:04:0e:32:af:aa:51:d5:0d:f2:f4:8b:65:f5:c8: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:5E:7F:A0:5A:53:BD:79:7D:68:EF:4A:E7:F1:49:40:7B:D8:67 X509v3 Authority Key Identifier: keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:58:9c:b2:29:51:3f:4c:e8:b8:90:5e:18:a4:45:39:6b:c1: 4b:59:91:56:f1:8c:1c:fa:e8:14:da:c6:f1:eb:1b:b3:d0:1b: be:15:a3:ef:a6:c7:e7:25:94:d7:ea:a4:fb:c5:42:e1:62:4d: 9b:60:de:77:de:cc:f9:ec:a6:9d:75:fb:33:ba:ae:c8:2c:c5: 23:13:64:1f:6f:1f:12:18:b8:8b:44:9d:d9:f6:1b:bc:b7:75: b3:5e:f9:d5:34:a7:d9:4b:b5:94:89:21:0d:26:4d:9c:a1:7e: 25:22:fe:82:f4:53:11:03:77:25:ec:17:80:04:3c:49:5e:7d: a5:8b:05:c5:db:e3:76:72:fa:c4:0a:59:98:28:1e:f9:5d:6d: 78:ae:08:4a:17:bd:a4:f4:70:f7:d1:89:20:86:67:52:40:8f: 7b:c6:89:6a:7f:72:d8:f0:95:88:36:92:9d:f6:4b:fc:2a:8d: 08:5f:4a:6e:cc:1f:61:ad:71:ad:95:9f:5c:30:83:df:b9:b9: 66:f0:fb:13:50:f7:b1:af:a7:a1:e3:61:59:d8:4b:6c:53:a9: 77:a0:60:2b:4e:04:81:53:96:b1:f5:a8:d8:6e:36:aa:dc:09: 91:48:6c:fe:f2:76:41:00:65:2f:ee:28:60:6e:02:63:73:4b: 6a:b8:e3:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREQUUxMTAvBgNVBAUTKEFEQzJEMDEwNzREREVEQjU4NzQxMjJGMkUxQjhBQzNC NEVEQ0RCN0IwHhcNMjUwNzIwMjExNzUwWhcNMjUwNzI3MjExNzUwWjAYMRYwFAYD VQQDEw02ODdkNWNmZS1mZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsBA7Ayzh/oRD3HGasIJ5T3/3zhhoELGdPawBUuSaRZOA4ziCA9KgJo2nKpv zxu92pLJYNegxmJathdwkHzlOch4TCODRRsTCWbJYwIh03Nwp6XoQIsH9EIDbI7K FlZpqJCwHyMffqEfrQgdb5ZjaFs/Hc9wB/r2VA9FVTAKjzP29bcbof6OwHdz3iry uizp52FY6aNh97+nJ2B14B/gbsKhrw73Enmgh+fuIjX9rYEWr64O3J7p4ogr7IX1 CwWDXGeg1E1o9DmDHbxBfJ2cvFFagLLLIc3BUizWPSgY6SWHcouQ6xnuZ7KMvPyY JB8zBA4yr6pR1Q3y9Itl9cgwLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq8Xn+g WlO9eX1o70rn8UlAe9hnMB8GA1UdIwQYMBaAFK3C0BB03e21h0Ei8uG4rDtO3Nt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERBRS8yN0U5MzQxODAz MzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdiV0hRU0x5NGJpc08wN2My M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjTFFFSFRkN2JXSFFTTHk0YmlzTzA3YzIzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERBRS8yN0U5MzQxODAzMzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdi V0hRU0x5NGJpc08wN2MyM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmWJyyKVE/TOi4kF4YpEU5a8FLWZFW8Ywc+ugU2sbx6xuz0Bu+FaPv psfnJZTX6qT7xULhYk2bYN533sz57Kaddfszuq7ILMUjE2Qfbx8SGLiLRJ3Z9hu8 t3WzXvnVNKfZS7WUiSENJk2coX4lIv6C9FMRA3cl7BeABDxJXn2liwXF2+N2cvrE ClmYKB75XW14rghKF72k9HD30YkghmdSQI97xolqf3LY8JWINpKd9kv8Ko0IX0pu zB9hrXGtlZ9cMIPfublm8PsTUPexr6eh42FZ2EtsU6l3oGArTgSBU5ax9ajYbjaq 3AmRSGz+8nZBAGUv7ihgbgJjc0tquOPa -----END CERTIFICATE-----Generated at Mon Jul 21 07:34:28 2025 by rpki-client