$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft File: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json) Hash identifier: c1Qxyw3Kz2wosAMKWhdhtf/iNqBAPMoYcc8ICLx3w7k= Subject key identifier: 43:D1:23:01:5A:A8:6E:28:10:1D:66:AC:B5:05:B9:0A:C8:F6:55:C7 Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 Certificate issuer: /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Certificate serial: 0880 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft Manifest number: 134A Signing time: Fri 18 Jul 2025 19:39:44 +0000 Manifest this update: Fri 18 Jul 2025 19:39:43 +0000 Manifest next update: Fri 25 Jul 2025 19:39:43 +0000 Files and hashes: 1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: CdSMAF+3yddH61BXkGy5wIxM387/WeHY9iTnbVZ8tN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Validity Not Before: Jul 18 19:39:43 2025 GMT Not After : Jul 25 19:39:43 2025 GMT Subject: CN=687aa2ff-f435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:ce:7d:8d:b6:ce:6c:29:d2:db:4d:5f:70: 2e:c4:9e:e3:84:35:23:8a:a2:23:24:02:fb:02:c7: 08:29:06:27:8c:33:0b:25:d5:a9:9e:46:a2:fa:8d: f0:f2:5c:ad:cd:62:97:d1:ed:fd:76:a8:de:23:cd: 22:27:b7:74:88:9b:92:ec:4b:f7:9c:66:c2:7c:f2: 93:07:92:56:3a:2f:5a:c7:5c:ca:f9:43:c5:bc:a0: 90:bd:1a:aa:ac:4c:f7:19:c3:75:77:32:e7:40:43: 87:d7:4e:39:0f:3d:05:94:6d:33:40:ec:ad:8b:9d: 11:88:5f:c6:1f:69:ff:e1:8e:ca:b5:d7:f3:b1:de: 83:f8:37:f8:ad:4b:b3:21:7d:da:db:d7:88:e8:aa: 7b:67:a3:74:17:cc:47:5f:fc:2a:28:d5:ab:75:e8: 17:02:65:2b:82:7c:f0:71:a4:dd:b7:55:49:4f:e7: 70:1c:30:2c:4d:37:95:08:de:3e:40:59:c6:6f:fb: 43:7e:ca:70:bb:57:15:a2:b4:b3:f9:b9:d8:60:ed: ad:3d:af:2c:8d:73:93:53:5d:07:d6:2b:1f:3b:5f: 93:4b:75:7f:f9:bd:43:a2:77:02:a6:d6:32:fe:cf: 1f:9e:9a:96:d4:0b:ad:08:bd:ae:58:86:42:10:d2: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:23:01:5A:A8:6E:28:10:1D:66:AC:B5:05:B9:0A:C8:F6:55:C7 X509v3 Authority Key Identifier: keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:db:b7:90:4e:ac:c1:62:fa:6d:15:fb:fb:23:33:79:35:37: 2b:00:99:93:78:b0:2c:82:74:09:ed:83:0d:e0:1a:21:9f:27: ae:c7:bc:68:a9:54:81:4f:29:12:da:01:8b:f6:24:51:ed:40: a8:c9:b2:51:9a:6a:ba:89:6a:35:b0:00:3c:f0:48:e8:76:2b: 87:79:4a:96:4b:f3:0d:86:1c:b4:eb:96:52:83:1d:f6:83:7b: f6:82:c9:55:38:e0:ec:89:ec:67:0a:95:f2:5c:09:eb:99:ba: a9:9a:5f:a3:87:91:90:01:27:b9:28:56:48:10:85:b2:57:4b: 00:b9:c0:4f:25:b9:bd:ee:23:8b:78:cf:05:36:09:59:07:f9: be:2f:8e:0a:aa:0f:35:8a:1d:e2:15:09:b5:7f:2c:2d:6e:34: 14:36:df:16:6b:03:17:53:3f:3a:26:9b:a2:7a:5a:22:ca:12: fe:b6:26:88:55:b9:68:65:59:1b:37:24:80:06:cc:46:bd:c8: fe:db:44:bd:aa:17:be:be:31:8f:e3:9e:85:43:51:f5:15:13: 79:3c:6a:d3:5c:12:52:1c:1e:6b:1e:da:ba:bb:33:5a:06:5e: 5c:a4:c2:63:cf:10:5d:a7:e1:24:e5:3f:30:2d:c3:38:4e:b3: cb:33:99:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDExRDhEOERDNUQ5Njc4REUwMzMwOTY3QTJGMzgxRDRG NjdCQjU1QjYwHhcNMjUwNzE4MTkzOTQzWhcNMjUwNzI1MTkzOTQzWjAYMRYwFAYD VQQDEw02ODdhYTJmZi1mNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfrOfY22zmwp0ttNX3AuxJ7jhDUjiqIjJAL7AscIKQYnjDMLJdWpnkai+o3w 8lytzWKX0e39dqjeI80iJ7d0iJuS7Ev3nGbCfPKTB5JWOi9ax1zK+UPFvKCQvRqq rEz3GcN1dzLnQEOH1045Dz0FlG0zQOyti50RiF/GH2n/4Y7Ktdfzsd6D+Df4rUuz IX3a29eI6Kp7Z6N0F8xHX/wqKNWrdegXAmUrgnzwcaTdt1VJT+dwHDAsTTeVCN4+ QFnGb/tDfspwu1cVorSz+bnYYO2tPa8sjXOTU10H1isfO1+TS3V/+b1DoncCptYy /s8fnpqW1AutCL2uWIZCENKZUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPRIwFa qG4oEB1mrLUFuQrI9lXHMB8GA1UdIwQYMBaAFBHY2NxdlnjeAzCWei84HU9nu1W2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VONERNSlo2THpnZFQyZTdW YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkalkzRjJXZU40RE1KWjZMemdkVDJlN1ZiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VO NERNSlo2THpnZFQyZTdWYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ27eQTqzBYvptFfv7IzN5NTcrAJmTeLAsgnQJ7YMN4Bohnyeux7xo qVSBTykS2gGL9iRR7UCoybJRmmq6iWo1sAA88EjodiuHeUqWS/MNhhy065ZSgx32 g3v2gslVOODsiexnCpXyXAnrmbqpml+jh5GQASe5KFZIEIWyV0sAucBPJbm97iOL eM8FNglZB/m+L44Kqg81ih3iFQm1fywtbjQUNt8WawMXUz86JpuieloiyhL+tiaI VbloZVkbNySABsxGvcj+20S9qhe+vjGP456FQ1H1FRN5PGrTXBJSHB5rHtq6uzNa Bl5cpMJjzxBdp+Ek5T8wLcM4TrPLM5kO -----END CERTIFICATE-----Generated at Sun Jul 20 04:46:04 2025 by rpki-client