$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft File: aR7cVncnIjOjjzNRkaropa4q97k.mft (raw, json) Hash identifier: MW9UDrM+m6bPxLkOZVIybAPRwTtGZyAxdffyYk6wLhE= Subject key identifier: 83:9F:96:92:94:13:2D:7B:7D:EB:B4:4D:13:84:3A:F9:F5:F9:33:2C Authority key identifier: 69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9 Certificate issuer: /CN=A9155725/serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft Manifest number: 3D Signing time: Sat 19 Jul 2025 07:47:22 +0000 Manifest this update: Sat 19 Jul 2025 07:47:21 +0000 Manifest next update: Sat 26 Jul 2025 07:47:21 +0000 Files and hashes: 1: aR7cVncnIjOjjzNRkaropa4q97k.crl (hash: PX27SpvLVwsjYTa/0VuLyl5g0Bzaszm0hbhpoQpACvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155725, serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9 Validity Not Before: Jul 19 07:47:21 2025 GMT Not After : Jul 26 07:47:21 2025 GMT Subject: CN=687b4d8a-b898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:37:31:cc:47:87:fb:47:11:44:3f:b2:fa: 51:e8:c2:75:e7:41:04:f1:7b:a8:2c:f6:5d:20:bb: 8d:e7:08:cb:c8:09:ae:e3:5a:80:d3:5f:a2:39:ac: 6a:24:40:a9:f0:68:7e:ce:00:47:f0:78:14:03:30: e2:ac:2e:49:4a:ba:a4:c7:e4:b8:ac:1b:7f:f6:82: c6:bc:6b:94:8b:1e:b4:47:82:21:20:53:41:12:3b: ae:d6:2c:a4:3c:e3:1b:1b:32:7e:64:91:04:98:e5: 3e:03:ba:4f:3f:5f:fb:50:11:34:71:7d:fa:a0:38: dd:85:eb:43:61:fa:18:eb:5d:cd:cc:81:49:8c:8f: e4:bc:f6:0b:4b:c6:8c:09:4e:61:84:28:93:f1:8d: e8:1b:2a:df:da:31:1c:14:6e:58:63:94:f5:80:50: 6e:11:e7:c0:84:b2:98:ed:c6:d7:8f:42:c1:4f:43: 2b:c4:76:18:5b:14:35:c2:28:1b:fb:44:ea:9a:11: eb:f5:04:8c:c5:a6:8d:fc:63:e2:60:61:df:8b:8d: f7:4f:21:43:e5:a3:e6:4f:73:81:62:2b:75:a0:49: 29:98:87:b4:0e:bc:6d:b9:f6:4a:d3:bb:de:fe:9b: 57:f4:a9:16:b4:65:f2:6a:43:f9:6c:08:98:cf:a4: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9F:96:92:94:13:2D:7B:7D:EB:B4:4D:13:84:3A:F9:F5:F9:33:2C X509v3 Authority Key Identifier: keyid:69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:18:6a:81:b0:2e:0b:82:31:39:5f:63:33:58:59:4e:39:1d: e0:c1:79:e8:ca:2b:d3:de:41:8e:1f:f4:14:69:9c:a3:67:11: c9:ad:92:e7:d5:42:3e:20:8c:e8:e4:de:85:a6:22:de:5d:76: 33:80:34:27:58:d8:a2:68:a1:7c:75:f7:ad:94:e2:83:b6:7b: 1d:7f:07:e1:18:3a:a5:07:1c:02:69:04:e1:b4:28:bd:7a:53: cf:3b:eb:68:ed:37:21:82:21:87:c2:31:94:e1:b6:ac:4a:fa: cc:8c:fb:ba:e0:2c:9e:3e:fa:6f:67:15:5f:5f:3b:f7:b2:5b: 52:7f:72:5f:48:4d:a0:23:8f:8f:24:8e:6f:67:3a:36:42:43: a5:26:ba:4c:24:d1:2c:e3:fb:66:d3:c8:8f:30:0e:e6:1c:81: c9:83:8a:8e:80:cd:7d:bd:a8:95:b5:8a:47:16:4a:ff:04:84: ad:61:80:0b:d5:87:14:62:7a:97:c7:69:79:36:bd:ce:12:e3: 13:97:7a:0a:4b:43:0a:62:a3:58:fd:84:fc:60:a3:07:d2:55: a5:8c:59:69:3d:5f:ff:f6:c7:68:87:05:d8:79:46:d5:ef:21: a9:fb:9b:47:2d:0c:17:e8:c5:4f:a6:92:ad:a4:c9:04:1a:96: 05:5f:5b:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTcyNTExMC8GA1UEBRMoNjkxRURDNTY3NzI3MjIzM0EzOEYzMzUxOTFBQUU4QTVB RTJBRjdCOTAeFw0yNTA3MTkwNzQ3MjFaFw0yNTA3MjYwNzQ3MjFaMBgxFjAUBgNV BAMTDTY4N2I0ZDhhLWI4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/yDcxzEeH+0cRRD+y+lHownXnQQTxe6gs9l0gu43nCMvICa7jWoDTX6I5rGok QKnwaH7OAEfweBQDMOKsLklKuqTH5LisG3/2gsa8a5SLHrRHgiEgU0ESO67WLKQ8 4xsbMn5kkQSY5T4Duk8/X/tQETRxffqgON2F60Nh+hjrXc3MgUmMj+S89gtLxowJ TmGEKJPxjegbKt/aMRwUblhjlPWAUG4R58CEspjtxtePQsFPQyvEdhhbFDXCKBv7 ROqaEev1BIzFpo38Y+JgYd+LjfdPIUPlo+ZPc4FiK3WgSSmYh7QOvG259krTu97+ m1f0qRa0ZfJqQ/lsCJjPpK7pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg5+WkpQT LXt967RNE4Q6+fX5MywwHwYDVR0jBBgwFoAUaR7cVncnIjOjjzNRkaropa4q97kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NzI1LzVBNjZDRjY4MDgz QTExRjA5RkYxRDA3NEM0RjlBRTAyL2FSN2NWbmNuSWpPamp6TlJrYXJvcGE0cTk3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVI3Y1ZuY25Jak9qanpOUmthcm9wYTRxOTdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NzI1LzVBNjZDRjY4MDgzQTExRjA5RkYxRDA3NEM0RjlBRTAyL2FSN2NWbmNuSWpP amp6TlJrYXJvcGE0cTk3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8YaoGwLguCMTlfYzNYWU45HeDBeejKK9PeQY4f9BRpnKNnEcmtkufV Qj4gjOjk3oWmIt5ddjOANCdY2KJooXx1962U4oO2ex1/B+EYOqUHHAJpBOG0KL16 U88762jtNyGCIYfCMZThtqxK+syM+7rgLJ4++m9nFV9fO/eyW1J/cl9ITaAjj48k jm9nOjZCQ6Umukwk0Szj+2bTyI8wDuYcgcmDio6AzX29qJW1ikcWSv8EhK1hgAvV hxRiepfHaXk2vc4S4xOXegpLQwpio1j9hPxgowfSVaWMWWk9X//2x2iHBdh5RtXv Ian7m0ctDBfoxU+mkq2kyQQalgVfWxo= -----END CERTIFICATE-----Generated at Sun Jul 20 07:20:00 2025 by rpki-client