$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json) Hash identifier: FhODz6UKx1me8HZb3CHXosLAr4WTeV1/bDrGwoJ785k= Subject key identifier: 8C:9E:81:86:DC:9E:28:C6:C1:78:36:CB:50:DE:7F:B2:74:F9:06:9F Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:15:18 +0000 Manifest this update: Sat 19 Jul 2025 07:15:18 +0000 Manifest next update: Sat 26 Jul 2025 07:15:17 +0000 Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: DWu6mcusdDUZZVWXIC4+gIK95oHNWYp/5r0LWK5R96I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Validity Not Before: Jul 19 07:15:18 2025 GMT Not After : Jul 26 07:15:17 2025 GMT Subject: CN=687b4606-7219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:3b:f8:92:e4:42:02:54:3d:61:fb:62:58: 36:79:d6:a0:ca:44:9c:14:0d:5d:dc:bd:47:51:8f: 20:25:77:28:0e:78:ea:ef:d3:c0:3d:ad:e3:a8:66: 50:e8:bf:0c:bd:e6:d0:98:a6:e0:dc:bf:15:ac:cb: 0f:24:3a:ab:fd:70:a3:b0:cd:18:26:31:c3:08:ca: bb:f8:9e:38:0c:31:1d:e8:0a:a1:39:fc:65:8b:31: 80:32:e0:de:a9:db:5e:16:88:8b:40:6e:23:0d:ff: 9c:74:db:c8:92:58:c6:a4:ce:26:0d:02:cd:9d:df: ee:f8:f0:a3:d6:6a:75:d0:a7:dd:28:af:76:0c:9a: 37:ad:da:a4:aa:40:27:ea:8e:2a:16:15:e6:d3:9b: 1a:77:ef:fe:aa:7a:52:9d:0d:14:7a:4b:7e:3b:e9: 48:19:c3:a9:f5:b3:f6:3a:a0:a8:bd:35:cd:c4:ab: 88:57:1e:9d:0d:30:d7:c2:41:da:89:75:7e:c6:82: e3:25:9e:a7:45:7a:e8:1e:c6:71:f5:3a:f9:60:e2: b9:43:5c:23:72:75:79:84:b6:4c:90:8d:9a:94:c6: a8:b2:88:59:32:21:05:61:85:c3:90:ad:6a:ba:49: fc:54:96:bc:1b:21:1b:69:32:28:2d:7c:39:52:61: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:81:86:DC:9E:28:C6:C1:78:36:CB:50:DE:7F:B2:74:F9:06:9F X509v3 Authority Key Identifier: keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:06:45:be:a6:f5:b7:37:a6:38:5a:fd:e1:bd:48:4e:53:20: f3:8a:23:38:20:83:34:12:41:29:75:f1:f1:54:5a:6c:cb:bf: 32:6b:56:75:0c:b0:d7:cb:ba:80:b3:28:41:7e:ef:81:5f:2c: 1a:0b:06:0e:8e:db:44:1b:d0:ef:f0:a7:77:d6:2c:1e:8e:da: e2:d1:6f:27:e4:d3:86:a1:fa:5c:a6:f1:e7:87:c5:b9:d7:a8: 45:65:f8:3a:8c:92:4d:7c:0e:ef:9d:4b:17:6b:3e:58:78:cf: ba:61:13:9d:95:bf:5f:7d:3e:e9:ef:54:26:04:42:7d:4c:94: 01:f8:a4:1c:b2:28:08:87:04:88:47:bd:c8:d0:6d:f9:35:33: e8:eb:b8:16:94:78:86:02:ab:13:94:f6:f6:e7:e3:bc:38:8d: 77:54:c5:7f:85:7d:65:0c:e5:f3:80:cf:66:7d:8a:fe:41:f4: c0:10:73:b2:94:88:47:29:cb:ef:62:54:82:2d:25:63:54:93: ff:79:9b:4f:cf:fa:42:de:39:5f:db:cb:89:4a:64:9a:db:9d: 3a:39:67:1d:21:75:b4:7c:57:78:2a:8a:4b:41:60:41:9a:ff: 33:24:f9:61:78:61:f6:43:d9:6e:c3:3b:8a:7c:26:c2:7e:f1: 3c:91:38:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDEyNTExMC8GA1UEBRMoMDFFRDg0MUZCOTUxQUFGQTI1OTE4MEVGOTI5OUU0RDM2 RkRGN0MzRDAeFw0yNTA3MTkwNzE1MThaFw0yNTA3MjYwNzE1MTdaMBgxFjAUBgNV BAMTDTY4N2I0NjA2LTcyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsWjv4kuRCAlQ9YftiWDZ51qDKRJwUDV3cvUdRjyAldygOeOrv08A9reOoZlDo vwy95tCYpuDcvxWsyw8kOqv9cKOwzRgmMcMIyrv4njgMMR3oCqE5/GWLMYAy4N6p 214WiItAbiMN/5x028iSWMakziYNAs2d3+748KPWanXQp90or3YMmjet2qSqQCfq jioWFebTmxp37/6qelKdDRR6S3476UgZw6n1s/Y6oKi9Nc3Eq4hXHp0NMNfCQdqJ dX7GguMlnqdFeugexnH1Ovlg4rlDXCNydXmEtkyQjZqUxqiyiFkyIQVhhcOQrWq6 SfxUlrwbIRtpMigtfDlSYTaLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjJ6Bhtye KMbBeDbLUN5/snT5Bp8wHwYDVR0jBBgwFoAUAe2EH7lRqvolkYDvkpnk02/ffD0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMTI1L0ZFNzc4RUM4Q0Mx MDExRUY4NzM5NkE2RUM0RjlBRTAyL0FlMkVIN2xScXZvbGtZRHZrcG5rMDJfZmZE MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWUyRUg3bFJxdm9sa1lEdmtwbmswMl9mZkQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MTI1L0ZFNzc4RUM4Q0MxMDExRUY4NzM5NkE2RUM0RjlBRTAyL0FlMkVIN2xScXZv bGtZRHZrcG5rMDJfZmZEMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADcGRb6m9bc3pjha/eG9SE5TIPOKIzgggzQSQSl18fFUWmzLvzJrVnUM sNfLuoCzKEF+74FfLBoLBg6O20Qb0O/wp3fWLB6O2uLRbyfk04ah+lym8eeHxbnX qEVl+DqMkk18Du+dSxdrPlh4z7phE52Vv199PunvVCYEQn1MlAH4pByyKAiHBIhH vcjQbfk1M+jruBaUeIYCqxOU9vbn47w4jXdUxX+FfWUM5fOAz2Z9iv5B9MAQc7KU iEcpy+9iVIItJWNUk/95m0/P+kLeOV/by4lKZJrbnTo5Zx0hdbR8V3gqiktBYEGa /zMk+WF4YfZD2W7DO4p8JsJ+8TyRON0= -----END CERTIFICATE-----Generated at Sun Jul 20 10:05:37 2025 by rpki-client