$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: K9PXU9/R+/iiEfHRbbB6KzWJqAs4ihZN+/3KYG4S7Yw= Subject key identifier: 21:69:CA:D6:20:56:EB:D8:D1:9A:E1:48:BC:DC:E1:D8:62:E4:B1:CD Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05DC Signing time: Fri 18 Jul 2025 23:19:25 +0000 Manifest this update: Fri 18 Jul 2025 23:19:24 +0000 Manifest next update: Fri 25 Jul 2025 23:19:24 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: yxnCXEhRNzgqrk62qdV9+2GAoy5SlKKvHhGK7JwSjjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1501 (0x5dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: Jul 18 23:19:24 2025 GMT Not After : Jul 25 23:19:24 2025 GMT Subject: CN=687ad67c-f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:b3:a7:58:65:1d:57:00:1c:ec:12:e3:d8: bd:f7:d9:42:33:16:a6:73:e9:9a:08:59:52:b8:44: 16:af:15:2c:00:d3:28:64:ab:48:6a:9d:e3:cd:dc: aa:b5:9b:91:b3:04:fe:73:d5:43:8c:06:c3:84:fe: 2c:17:80:28:50:8b:d9:2c:35:5e:1b:3b:68:bb:b9: a7:20:76:b0:95:bd:7a:86:aa:57:be:8e:c1:32:51: a8:2a:bf:b7:bf:9d:23:2e:51:e6:19:60:08:23:35: c0:a0:fa:30:96:b6:b1:10:f8:f8:20:20:a6:df:3d: e5:37:d3:7c:8d:95:54:7d:00:c7:31:2c:df:71:90: c1:37:5e:1d:ea:14:d8:f7:0b:0c:11:09:69:8f:eb: df:5d:61:82:96:b7:84:d0:14:20:06:47:82:a9:d8: 4a:e9:84:68:a2:42:5d:f4:a6:f2:4d:2f:c6:41:ce: ee:69:a8:82:d6:a2:c0:21:a3:ca:73:45:95:e1:ec: 24:71:30:63:d5:7c:77:a6:51:ea:52:af:f2:d0:ce: ca:ff:7c:66:e6:88:03:a8:a7:e1:54:b9:bb:8c:64: e7:a8:d0:88:3d:35:14:49:dd:29:03:43:1d:5b:bc: ae:37:fc:be:93:e6:71:41:79:39:dc:9e:0c:a2:d9: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:CA:D6:20:56:EB:D8:D1:9A:E1:48:BC:DC:E1:D8:62:E4:B1:CD X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:50:0c:b1:3b:b5:6e:2f:06:d8:d3:71:40:0e:06:82:54:7a: 37:ba:c9:44:7b:3c:24:44:ec:c1:03:db:53:a5:53:0e:28:7d: 27:53:e9:99:b7:c7:c7:a9:5a:d5:de:af:41:72:40:36:33:3f: 8b:e7:71:f9:85:b1:d9:a2:e0:40:2b:52:44:3f:6e:27:50:ac: 11:f1:42:e0:08:7d:b1:e0:3d:f0:2a:82:a9:14:8b:08:51:4c: a5:a5:84:89:f0:a9:c6:12:d9:47:27:7d:c9:3e:a2:18:6e:cc: d9:9f:67:a1:2f:0a:a7:6e:be:85:69:b1:52:a5:50:15:90:bc: 28:08:02:68:83:82:f3:97:74:12:65:81:54:89:8f:93:0c:e1: 56:0a:53:3f:e7:f9:79:df:b0:ca:45:de:9f:98:57:84:ef:41: 98:d1:01:71:33:b7:9e:db:65:99:ae:4e:bb:02:5c:ac:3f:99: 31:65:74:51:92:7e:68:4b:23:ed:18:ad:30:4c:16:8e:73:e0: 8c:5d:75:32:e8:07:ed:e2:bc:88:45:9f:bf:18:f2:89:b5:a8: b9:ca:f4:ed:8e:b9:45:e2:03:b4:ce:48:6d:2a:6d:3e:7b:19: 79:72:66:c6:29:ed:91:f2:63:53:17:fa:c2:25:81:0e:7b:00: 7d:e9:22:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwNzE4MjMxOTI0WhcNMjUwNzI1MjMxOTI0WjAYMRYwFAYD VQQDEw02ODdhZDY3Yy1mMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN6zp1hlHVcAHOwS49i999lCMxamc+maCFlSuEQWrxUsANMoZKtIap3jzdyq tZuRswT+c9VDjAbDhP4sF4AoUIvZLDVeGztou7mnIHawlb16hqpXvo7BMlGoKr+3 v50jLlHmGWAIIzXAoPowlraxEPj4ICCm3z3lN9N8jZVUfQDHMSzfcZDBN14d6hTY 9wsMEQlpj+vfXWGClreE0BQgBkeCqdhK6YRookJd9KbyTS/GQc7uaaiC1qLAIaPK c0WV4ewkcTBj1Xx3plHqUq/y0M7K/3xm5ogDqKfhVLm7jGTnqNCIPTUUSd0pA0Md W7yuN/y+k+ZxQXk53J4MotkEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFpytYg VuvY0ZrhSLzc4dhi5LHNMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiUAyxO7VuLwbY03FADgaCVHo3uslEezwkROzBA9tTpVMOKH0nU+mZ t8fHqVrV3q9BckA2Mz+L53H5hbHZouBAK1JEP24nUKwR8ULgCH2x4D3wKoKpFIsI UUylpYSJ8KnGEtlHJ33JPqIYbszZn2ehLwqnbr6FabFSpVAVkLwoCAJog4Lzl3QS ZYFUiY+TDOFWClM/5/l537DKRd6fmFeE70GY0QFxM7ee22WZrk67AlysP5kxZXRR kn5oSyPtGK0wTBaOc+CMXXUy6Aft4ryIRZ+/GPKJtai5yvTtjrlF4gO0zkhtKm0+ exl5cmbGKe2R8mNTF/rCJYEOewB96SJV -----END CERTIFICATE-----Generated at Sun Jul 20 08:00:32 2025 by rpki-client