$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft File: e_1dY_8gHxhzXBGACmL2pyeujBE.mft (raw, json) Hash identifier: LOUUNnHkwT73zyaLplOy8MfBoRdxsQ5V0JfjteB06Hc= Subject key identifier: EF:BC:F5:EE:BB:0A:32:3C:B2:60:10:10:DC:0D:70:F4:A9:43:B4:27 Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 Certificate issuer: /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft Manifest number: 0A17 Signing time: Fri 18 Jul 2025 20:02:50 +0000 Manifest this update: Fri 18 Jul 2025 20:02:50 +0000 Manifest next update: Fri 25 Jul 2025 20:02:50 +0000 Files and hashes: 1: e_1dY_8gHxhzXBGACmL2pyeujBE.crl (hash: KPrzR6tHGesrpIQrz37L3f95AHBB8ybu3Xi/JtPF6Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F3A, serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Validity Not Before: Jul 18 20:02:50 2025 GMT Not After : Jul 25 20:02:50 2025 GMT Subject: CN=687aa86a-b7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:fc:14:ad:49:53:e2:d3:4a:8e:52:64:f0: ea:46:57:f3:b5:f7:3c:11:4d:51:c7:d0:7b:40:df: 2e:02:04:5b:ca:df:6b:c8:e8:b4:6f:fd:f8:81:a6: d8:05:9d:8a:6c:43:fa:86:be:90:ad:c7:67:5f:30: 93:1c:15:66:cd:a2:0a:05:1c:fa:ba:c7:a6:f5:bd: 6e:34:1a:64:4e:30:be:9d:3c:13:9c:90:10:5b:f2: fc:72:dd:68:4c:06:af:98:8e:b2:c1:6a:53:e8:df: 54:09:8f:ab:61:f1:58:72:26:6a:12:b7:5f:6a:35: 27:58:d8:a8:86:a3:cb:84:68:d5:4e:3e:bb:f7:73: a7:5d:7d:c4:0d:13:47:3b:9a:a3:39:57:af:ef:42: cc:19:ef:42:0c:50:03:f7:fd:63:47:b2:ab:c4:bd: 4e:3c:72:40:a9:74:c7:c1:d6:a8:a4:1d:a3:a2:d4: d2:1a:98:7c:45:f8:c1:c9:93:fb:e7:fd:55:de:5c: 73:6f:83:ac:62:1c:4f:90:fa:50:49:a6:99:5e:a9: d1:36:62:d9:a7:62:7c:98:8f:50:a0:74:e6:a0:ca: 27:30:13:5a:b5:28:9c:21:69:80:ab:08:d0:87:7b: 22:cc:4b:23:e2:ae:ec:26:7f:ce:1c:57:7f:f4:eb: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BC:F5:EE:BB:0A:32:3C:B2:60:10:10:DC:0D:70:F4:A9:43:B4:27 X509v3 Authority Key Identifier: keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:16:1d:22:87:f6:e2:73:39:d3:c7:37:43:92:8b:98:7b:53: 22:1b:07:c6:97:6a:21:4d:03:a3:79:36:c7:33:1e:8d:1a:b6: 26:94:ce:1c:6f:8e:e5:f9:81:44:d3:84:0f:ec:cd:d3:df:b9: 4e:c0:47:2c:f3:42:b8:52:62:dc:c0:11:5a:5d:c8:35:90:0c: 37:54:97:21:90:d8:90:1c:c7:6c:57:5c:a4:a7:0f:de:03:30: b8:15:4a:c6:6e:02:fe:b1:f4:3d:e7:33:1f:87:71:3e:24:a3: e3:cb:e3:ce:81:19:a5:ac:c5:a8:8d:7e:e5:b2:d1:c3:79:30: 44:1a:d6:60:62:1e:a0:cd:bb:b8:bb:e2:82:f9:4d:0d:37:f7: 21:2f:9e:41:9f:91:40:07:a5:63:e1:53:0f:9c:ea:fe:a8:48: 08:45:32:d4:08:e8:f9:17:80:48:ef:8c:c2:9b:24:54:b4:b6: 97:f7:7e:a9:d9:4e:91:fb:db:0e:74:f1:e3:e5:ad:f1:9e:b2: a2:69:3e:29:aa:29:81:35:1d:b7:b9:8f:f2:a6:3f:19:d6:79: b1:74:ba:4b:8c:5d:9f:74:1b:ba:4c:9e:81:ff:4a:c6:14:c5: 8d:60:40:af:0b:f1:d3:49:51:15:8b:d1:ef:32:45:dd:78:f6: da:ec:50:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGM0ExMTAvBgNVBAUTKDdCRkQ1RDYzRkYyMDFGMTg3MzVDMTE4MDBBNjJGNkE3 MjdBRThDMTEwHhcNMjUwNzE4MjAwMjUwWhcNMjUwNzI1MjAwMjUwWjAYMRYwFAYD VQQDEw02ODdhYTg2YS1iN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte38FK1JU+LTSo5SZPDqRlfztfc8EU1Rx9B7QN8uAgRbyt9ryOi0b/34gabY BZ2KbEP6hr6QrcdnXzCTHBVmzaIKBRz6usem9b1uNBpkTjC+nTwTnJAQW/L8ct1o TAavmI6ywWpT6N9UCY+rYfFYciZqErdfajUnWNiohqPLhGjVTj6793OnXX3EDRNH O5qjOVev70LMGe9CDFAD9/1jR7KrxL1OPHJAqXTHwdaopB2jotTSGph8RfjByZP7 5/1V3lxzb4OsYhxPkPpQSaaZXqnRNmLZp2J8mI9QoHTmoMonMBNatSicIWmAqwjQ h3sizEsj4q7sJn/OHFd/9OtqIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+89e67 CjI8smAQENwNcPSpQ7QnMB8GA1UdIwQYMBaAFHv9XWP/IB8Yc1wRgApi9qcnrowR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0YzQS9BQjQyRTE2MDc4 OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4aHpYQkdBQ21MMnB5ZXVq QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfMWRZXzhnSHhoelhCR0FDbUwycHlldWpCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0YzQS9BQjQyRTE2MDc4OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4 aHpYQkdBQ21MMnB5ZXVqQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJFh0ih/bicznTxzdDkouYe1MiGwfGl2ohTQOjeTbHMx6NGrYmlM4c b47l+YFE04QP7M3T37lOwEcs80K4UmLcwBFaXcg1kAw3VJchkNiQHMdsV1ykpw/e AzC4FUrGbgL+sfQ95zMfh3E+JKPjy+POgRmlrMWojX7lstHDeTBEGtZgYh6gzbu4 u+KC+U0NN/chL55Bn5FAB6Vj4VMPnOr+qEgIRTLUCOj5F4BI74zCmyRUtLaX936p 2U6R+9sOdPHj5a3xnrKiaT4pqimBNR23uY/ypj8Z1nmxdLpLjF2fdBu6TJ6B/0rG FMWNYECvC/HTSVEVi9HvMkXdePba7FAs -----END CERTIFICATE-----Generated at Sun Jul 20 07:42:58 2025 by rpki-client