$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft File: ADiahleuCYgERy-OaNcF4u_b18A.mft (raw, json) Hash identifier: SZ9TtFyH8QZbfUG+Wb2cf+V3VWDnmIlpN6Jn+bPPNr8= Subject key identifier: A8:89:FE:6C:DB:3D:F9:B9:C0:40:18:91:EE:95:EF:0B:5B:31:A2:A8 Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft Manifest number: 0E1B Signing time: Fri 18 Jul 2025 19:02:21 +0000 Manifest this update: Fri 18 Jul 2025 19:02:21 +0000 Manifest next update: Fri 25 Jul 2025 19:02:21 +0000 Files and hashes: 1: ADiahleuCYgERy-OaNcF4u_b18A.crl (hash: Ai2XskQDJsyFJZ1oj5uMQUn5K4CnlaOvMo1HzWFLyCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Validity Not Before: Jul 18 19:02:21 2025 GMT Not After : Jul 25 19:02:21 2025 GMT Subject: CN=687a9a3d-a668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:9f:51:8a:b3:cb:34:0a:df:23:98:9e:85: 97:d5:a0:de:5e:a1:0c:72:b4:70:3c:48:67:f7:74: aa:fa:b4:bb:d1:43:fc:ff:25:77:cc:99:fb:8f:65: 7a:de:bd:fd:a6:30:19:23:4d:c5:6f:b0:ae:f6:04: 8c:df:f9:0a:ac:86:29:c3:a9:f9:bb:9e:dc:ae:65: ba:0c:24:ae:a6:65:32:d0:c8:48:4f:42:45:11:ad: 66:29:fb:c1:9b:c0:3c:c1:4b:1c:a6:9f:f2:a7:6c: 57:d0:b7:13:97:5c:bb:dc:8f:7c:c3:cf:2b:05:1d: f8:15:e9:7a:15:74:e6:87:09:3e:7c:32:ca:f7:44: 67:56:21:bf:9b:b7:65:91:5b:01:cf:35:bc:43:08: b0:ed:d8:49:b4:0d:6b:e0:42:c6:2a:a2:44:63:3f: b4:60:d6:49:20:86:dd:6a:18:e1:3e:09:aa:d0:02: 35:77:ac:27:d7:db:2d:15:0f:2c:c7:10:59:86:4b: 52:0a:c7:8e:23:09:58:06:98:17:5a:84:0d:9d:70: e7:c2:fe:1d:91:28:08:a0:57:7a:79:69:74:87:6b: d1:d8:30:f2:7a:02:3b:a4:53:99:d0:38:f5:d1:6e: fd:47:12:64:21:80:1c:11:52:47:c8:e5:80:b0:7b: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:89:FE:6C:DB:3D:F9:B9:C0:40:18:91:EE:95:EF:0B:5B:31:A2:A8 X509v3 Authority Key Identifier: keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2f:fc:e4:4d:3e:1e:8f:2b:c5:07:3a:98:45:3d:2c:65:eb: 65:4d:fa:27:d2:22:0e:ea:24:a4:3a:58:12:c8:5a:ab:cf:ca: ea:3f:a5:fd:17:65:08:be:d1:76:60:fc:7a:2c:50:d0:33:33: b4:99:fe:1b:0c:71:8d:4d:60:7f:e5:2a:64:bd:98:dd:ca:c7: ba:a4:e8:76:60:86:c6:8a:0a:bd:b0:52:b4:08:2b:c5:f5:f5: 46:fb:7a:20:12:50:62:42:20:a1:f4:8e:49:3b:27:35:55:08: 4d:10:a4:1a:c1:aa:29:b3:3f:7a:2e:fc:8c:29:e9:e7:25:17: 8c:c8:59:92:20:12:f3:46:5a:6f:3c:3c:40:13:0d:88:01:87: 7e:f5:31:bb:e0:98:3e:87:56:33:0b:98:e9:db:41:a7:4b:0b: 8b:47:e0:23:1c:4a:c9:69:a0:18:be:56:ef:b6:f8:90:87:45: 88:e5:1b:71:1c:d1:39:85:f3:48:c6:11:8d:e9:97:21:1d:ef: c2:80:ad:8a:d7:fd:54:82:b2:d4:2c:e1:4c:68:4f:fd:9f:88: 72:26:a8:68:2f:18:63:30:08:c4:25:63:22:87:cf:da:50:0a: 1f:a0:02:3e:f8:8e:c1:42:2a:49:1d:b4:97:76:c6:f9:54:ac: d8:de:6f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDAwMzg5QTg2NTdBRTA5ODgwNDQ3MkY4RTY4RDcwNUUy RUZEQkQ3QzAwHhcNMjUwNzE4MTkwMjIxWhcNMjUwNzI1MTkwMjIxWjAYMRYwFAYD VQQDEw02ODdhOWEzZC1hNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a2fUYqzyzQK3yOYnoWX1aDeXqEMcrRwPEhn93Sq+rS70UP8/yV3zJn7j2V6 3r39pjAZI03Fb7Cu9gSM3/kKrIYpw6n5u57crmW6DCSupmUy0MhIT0JFEa1mKfvB m8A8wUscpp/yp2xX0LcTl1y73I98w88rBR34Fel6FXTmhwk+fDLK90RnViG/m7dl kVsBzzW8Qwiw7dhJtA1r4ELGKqJEYz+0YNZJIIbdahjhPgmq0AI1d6wn19stFQ8s xxBZhktSCseOIwlYBpgXWoQNnXDnwv4dkSgIoFd6eWl0h2vR2DDyegI7pFOZ0Dj1 0W79RxJkIYAcEVJHyOWAsHsOhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiJ/mzb Pfm5wEAYke6V7wtbMaKoMB8GA1UdIwQYMBaAFAA4moZXrgmIBEcvjmjXBeLv29fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZZ0VSeS1PYU5jRjR1X2Ix OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FEaWFobGV1Q1lnRVJ5LU9hTmNGNHVfYjE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BRGlhaGxldUNZ Z0VSeS1PYU5jRjR1X2IxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApL/zkTT4ejyvFBzqYRT0sZetlTfon0iIO6iSkOlgSyFqrz8rqP6X9 F2UIvtF2YPx6LFDQMzO0mf4bDHGNTWB/5SpkvZjdyse6pOh2YIbGigq9sFK0CCvF 9fVG+3ogElBiQiCh9I5JOyc1VQhNEKQawaopsz96LvyMKennJReMyFmSIBLzRlpv PDxAEw2IAYd+9TG74Jg+h1YzC5jp20GnSwuLR+AjHErJaaAYvlbvtviQh0WI5Rtx HNE5hfNIxhGN6ZchHe/CgK2K1/1UgrLULOFMaE/9n4hyJqhoLxhjMAjEJWMih8/a UAofoAI++I7BQipJHbSXdsb5VKzY3m8F -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:13 2025 by rpki-client