$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: 1LNkUseElXxHO6p+TaToXCAD8jP7KL8ojAmyLop4RIE= Subject key identifier: A0:00:48:E9:22:97:D7:EE:B2:15:90:2F:97:FE:8C:52:3D:44:67:68 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2128 Signing time: Fri 30 May 2025 16:06:34 +0000 Manifest this update: Fri 30 May 2025 16:06:33 +0000 Manifest next update: Fri 06 Jun 2025 16:06:33 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: 83dCXMiPM4uZd2QKUIwE0QcboIrT1P69GuatYf2NQKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8488 (0x2128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: May 30 16:06:33 2025 GMT Not After : Jun 6 16:06:33 2025 GMT Subject: CN=6839d78a-067f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:f9:49:d6:a4:5c:6c:84:1a:e5:28:cc:c3: fc:a7:23:ef:f2:99:ff:f4:0b:b7:2e:fe:a4:f3:c0: 20:c5:9c:f0:60:ee:eb:15:39:bd:61:85:9b:e0:77: b3:38:22:81:22:91:b3:0c:31:ad:46:7d:2b:3d:7d: 57:1a:bb:3d:84:9b:a9:1b:8b:f5:6b:c4:19:37:8d: 50:b5:39:da:62:eb:e3:59:e9:43:d2:3f:d4:21:23: 5a:7c:a6:fe:54:65:32:1c:ea:8a:43:55:99:89:00: 13:32:60:c8:f9:05:ef:cc:43:fd:3d:92:56:cd:5a: ac:bc:34:52:f7:da:d5:1d:58:76:49:f7:e9:2e:a4: 5e:65:52:1f:0e:5c:2f:3d:23:5b:77:87:e5:dd:c7: 9d:94:ee:05:e8:4a:82:22:b5:d9:18:76:f6:b2:25: 85:1c:69:8a:b5:d2:ff:3f:f5:ba:90:7b:0e:ec:39: 20:3d:3e:e9:71:90:56:60:28:d0:89:67:aa:3a:e1: ed:fc:26:b0:ef:25:61:90:74:05:46:99:19:e3:a8: 9d:74:dc:73:16:e2:5d:86:e9:b2:ff:94:36:48:3e: 73:b7:d7:2f:57:87:19:d4:a1:37:b2:0a:84:c5:57: 37:5f:02:79:38:08:89:43:f3:8d:fa:a0:fb:ec:63: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:00:48:E9:22:97:D7:EE:B2:15:90:2F:97:FE:8C:52:3D:44:67:68 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:74:1d:66:ad:a1:af:5d:40:39:b9:42:66:c0:d9:57:8c: c4:25:97:3b:62:9d:fc:4d:bd:0e:a1:e4:1a:04:12:e8:2e:b2: e7:95:84:b5:af:d6:ee:55:8a:7a:67:2f:c1:b8:ae:c7:7b:d4: f3:07:0c:1f:c7:89:e8:9e:37:51:d7:40:83:a4:47:3e:fd:31: dc:fb:87:ae:58:ca:8a:39:26:5a:8b:a7:08:1b:08:67:74:53: fb:db:fc:e9:7a:32:67:a0:f9:36:32:8f:3d:b8:f7:c5:ef:1e: 63:45:fd:9a:86:d3:d8:df:ab:66:ce:8f:41:39:f6:13:71:4e: be:65:ce:c7:40:13:8d:59:47:3c:80:7e:cd:b5:7d:a8:0b:0e: 19:05:57:23:a1:0b:45:4e:07:e4:51:35:7e:ea:24:07:bb:85: 8d:1c:d6:ed:6f:f0:ff:9f:9b:2a:ea:56:b6:c8:99:92:67:61: b7:82:b7:55:9c:82:ee:1f:b0:3c:0c:f7:99:a6:4b:71:0b:be: 07:1f:92:71:f5:aa:c6:80:16:1b:8a:e3:6e:fc:cb:c6:e9:6f: 4a:ea:f7:bd:8f:d8:9b:c2:09:0f:d0:e5:4b:e1:a5:24:a5:93: d2:5a:84:fc:5c:63:1e:f8:37:21:c8:3e:bf:04:ff:9e:fe:0f: 94:0a:50:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICISgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwNTMwMTYwNjMzWhcNMjUwNjA2MTYwNjMzWjAYMRYwFAYD VQQDEw02ODM5ZDc4YS0wNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyb5SdakXGyEGuUozMP8pyPv8pn/9Au3Lv6k88AgxZzwYO7rFTm9YYWb4Hez OCKBIpGzDDGtRn0rPX1XGrs9hJupG4v1a8QZN41QtTnaYuvjWelD0j/UISNafKb+ VGUyHOqKQ1WZiQATMmDI+QXvzEP9PZJWzVqsvDRS99rVHVh2SffpLqReZVIfDlwv PSNbd4fl3cedlO4F6EqCIrXZGHb2siWFHGmKtdL/P/W6kHsO7DkgPT7pcZBWYCjQ iWeqOuHt/Caw7yVhkHQFRpkZ46iddNxzFuJdhumy/5Q2SD5zt9cvV4cZ1KE3sgqE xVc3XwJ5OAiJQ/ON+qD77GPKWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAASOki l9fushWQL5f+jFI9RGdoMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf1XQdZq2hr11AOblCZsDZV4zEJZc7Yp38Tb0OoeQaBBLoLrLnlYS1 r9buVYp6Zy/BuK7He9TzBwwfx4nonjdR10CDpEc+/THc+4euWMqKOSZai6cIGwhn dFP72/zpejJnoPk2Mo89uPfF7x5jRf2ahtPY36tmzo9BOfYTcU6+Zc7HQBONWUc8 gH7NtX2oCw4ZBVcjoQtFTgfkUTV+6iQHu4WNHNbtb/D/n5sq6la2yJmSZ2G3grdV nILuH7A8DPeZpktxC74HH5Jx9arGgBYbiuNu/MvG6W9K6ve9j9ibwgkP0OVL4aUk pZPSWoT8XGMe+DchyD6/BP+e/g+UClDf -----END CERTIFICATE-----Generated at Sat May 31 17:08:52 2025 by rpki-client