$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: HiKfIUDy0v7BLupO9FrjV0dNr2xlPD0alD5rPCjoTvE= Subject key identifier: 45:72:C9:D6:65:AC:CE:F0:A2:68:07:D2:79:64:2B:A8:9D:0F:C5:8E Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 01BB Signing time: Sat 19 Jul 2025 03:41:46 +0000 Manifest this update: Sat 19 Jul 2025 03:41:45 +0000 Manifest next update: Sat 26 Jul 2025 03:41:45 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: 8R7k1ImeRPRqfVzJ+RYkHd1JuW1j1mcWpgnz+z5YyOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: Jul 19 03:41:45 2025 GMT Not After : Jul 26 03:41:45 2025 GMT Subject: CN=687b13f9-8ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:4f:e7:a4:40:76:01:91:73:ac:4c:cc:de: cf:62:76:dd:6d:ac:fa:ef:ad:b5:f9:d5:8d:49:5c: ac:eb:92:58:d3:f7:aa:f4:79:f3:92:99:9e:4d:8b: 7d:30:4b:f7:de:66:32:8e:c0:d2:0d:9f:74:46:e2: 70:c9:39:34:d2:c8:3c:4a:d9:c9:8e:2c:ce:87:2f: 27:bd:d2:7c:b6:b3:c0:32:d6:c2:a8:af:5c:4f:34: 10:a5:3d:d3:41:6d:f4:78:8e:87:f9:ff:c0:89:74: c2:1c:88:b5:1f:a0:9a:de:7d:47:78:99:e7:06:e3: b1:04:4a:45:2f:15:a2:bc:5f:b0:cb:6f:79:88:d7: 17:57:8e:ae:80:7d:e0:01:47:aa:d4:a6:0a:db:56: a3:cd:50:03:95:31:bb:a2:fa:4e:51:8a:84:cb:43: 27:5a:59:fb:85:7c:6b:5d:99:f6:cb:32:df:ba:b5: d5:61:7d:f7:30:89:5e:d3:b9:f0:01:a3:96:5e:83: 89:c1:fb:d0:19:fb:bd:92:6c:53:a7:33:52:3a:c3: 33:66:9a:23:4e:3e:ee:0f:2d:a0:fa:8d:e5:85:68: f2:98:10:36:e7:9d:58:7c:bd:bf:c8:fe:cc:15:eb: 2c:26:1f:c8:12:27:58:fb:74:dc:de:35:86:a3:c0: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:C9:D6:65:AC:CE:F0:A2:68:07:D2:79:64:2B:A8:9D:0F:C5:8E X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:29:c1:5e:1a:84:fb:66:1b:e4:9a:04:27:77:21:58:68:5e: 14:bf:7f:80:fa:8b:af:ab:07:2e:47:c1:cf:76:8e:c5:91:3f: 83:09:73:1f:ed:40:d8:22:29:c1:9e:8b:df:5f:de:25:89:ad: 27:b5:51:05:36:f6:a0:40:23:53:74:a8:c2:20:a7:76:c5:4d: 6b:50:2a:54:ed:f7:f0:57:cf:6f:e3:6d:03:cc:59:cd:b7:53: 5e:57:4e:7d:74:8e:88:07:35:8c:a8:2c:09:17:4f:b8:75:18: e9:d5:42:84:58:42:54:da:43:8b:52:46:8d:53:21:3f:89:60: 32:a3:1d:97:14:32:8e:b3:9e:7f:40:77:6a:f4:b2:72:7d:50: a1:76:d5:a1:c0:30:a6:08:92:61:8a:d2:63:49:bc:c2:00:6d: 4e:3d:33:e3:fa:ff:f5:eb:fb:9b:19:05:9e:53:bc:22:88:a3: 1b:71:c7:64:21:7f:27:01:6e:43:e3:cb:34:c2:6f:f8:8a:48: 5c:de:01:71:6f:fa:45:23:c4:90:2b:39:a2:bb:c1:35:6f:8c: 26:d5:cd:68:38:69:ef:d9:f3:d0:f9:6f:fa:5c:93:13:c4:16: 6b:b7:9c:dc:89:a4:12:31:10:0f:29:e4:3b:7c:e9:57:d6:47: 7a:4e:d9:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjUwNzE5MDM0MTQ1WhcNMjUwNzI2MDM0MTQ1WjAYMRYwFAYD VQQDEw02ODdiMTNmOS04YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hZP56RAdgGRc6xMzN7PYnbdbaz67621+dWNSVys65JY0/eq9HnzkpmeTYt9 MEv33mYyjsDSDZ90RuJwyTk00sg8StnJjizOhy8nvdJ8trPAMtbCqK9cTzQQpT3T QW30eI6H+f/AiXTCHIi1H6Ca3n1HeJnnBuOxBEpFLxWivF+wy295iNcXV46ugH3g AUeq1KYK21ajzVADlTG7ovpOUYqEy0MnWln7hXxrXZn2yzLfurXVYX33MIle07nw AaOWXoOJwfvQGfu9kmxTpzNSOsMzZpojTj7uDy2g+o3lhWjymBA2551YfL2/yP7M FessJh/IEidY+3Tc3jWGo8BeHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVyydZl rM7womgH0nlkK6idD8WOMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTKcFeGoT7ZhvkmgQndyFYaF4Uv3+A+ouvqwcuR8HPdo7FkT+DCXMf 7UDYIinBnovfX94lia0ntVEFNvagQCNTdKjCIKd2xU1rUCpU7ffwV89v420DzFnN t1NeV059dI6IBzWMqCwJF0+4dRjp1UKEWEJU2kOLUkaNUyE/iWAyox2XFDKOs55/ QHdq9LJyfVChdtWhwDCmCJJhitJjSbzCAG1OPTPj+v/16/ubGQWeU7wiiKMbccdk IX8nAW5D48s0wm/4ikhc3gFxb/pFI8SQKzmiu8E1b4wm1c1oOGnv2fPQ+W/6XJMT xBZrt5zciaQSMRAPKeQ7fOlX1kd6Ttlu -----END CERTIFICATE-----Generated at Sun Jul 20 10:38:08 2025 by rpki-client