$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: Z+vKBLvk4lKL0nTJyvTGIL+fxxv9gOOdXHOSwzmSOxE= Subject key identifier: B6:FE:1A:99:0A:78:DA:B5:9B:99:A9:74:F7:D2:56:5E:61:C7:5A:EB Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2152 Signing time: Wed 20 Aug 2025 15:58:35 +0000 Manifest this update: Wed 20 Aug 2025 15:58:35 +0000 Manifest next update: Wed 27 Aug 2025 15:58:35 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: No17sL1caMFSMU8H2xkkSyTAbSkM23dl1rCz5+5CBVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8530 (0x2152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Aug 20 15:58:35 2025 GMT Not After : Aug 27 15:58:35 2025 GMT Subject: CN=68a5f0ab-7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:e8:d0:eb:ca:6b:b7:18:a7:48:8c:df:17: 2a:85:af:ca:1e:ed:99:46:0a:0e:cc:d7:9c:50:97: 4c:de:a6:fe:d3:c8:4f:fc:6b:11:50:ce:2a:86:8b: 5e:56:a2:b2:ca:80:24:5f:e6:b3:2d:c9:c2:92:44: 9b:95:e3:f0:38:38:0e:a6:90:e8:1e:65:bc:b5:d0: 00:80:3c:91:43:8a:15:69:69:80:99:6d:ec:ed:5e: e7:3d:7c:44:a4:79:fd:06:42:20:22:aa:73:8c:a1: 67:be:f7:37:86:21:de:f7:40:a8:5b:75:ce:6f:32: ec:f3:2f:5b:c4:71:9f:1d:25:0c:95:b0:74:d3:f1: 29:2a:cc:4e:e7:9b:ee:1c:7e:4d:51:6c:0f:20:54: 9a:29:05:b7:fd:40:fd:bd:60:3c:97:cb:ef:01:27: ed:ca:07:50:5f:c9:93:75:42:0a:00:33:1e:e9:12: 71:e2:16:d9:d8:0c:d1:78:02:c8:b3:85:e6:6d:96: 0d:52:de:53:b1:bd:7d:c1:48:22:20:f5:e2:99:2d: d3:36:6d:2e:94:9d:49:aa:87:50:04:75:fd:dc:d5: 80:d9:4e:e7:fb:68:96:33:b9:6e:54:f7:ad:2e:19: ef:3a:e1:9d:ab:89:49:fc:1a:22:95:1b:1e:41:9b: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FE:1A:99:0A:78:DA:B5:9B:99:A9:74:F7:D2:56:5E:61:C7:5A:EB X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:07:31:37:85:79:e1:d6:e9:58:1c:7a:a3:99:9b:0d:0b:55: 24:bb:85:b3:3c:a9:2e:dc:08:62:23:7d:cf:24:53:10:0a:92: 1b:c8:7c:52:80:ef:e4:e8:ee:25:d0:97:ac:da:03:e1:b5:77: 54:49:2a:03:3c:11:71:3c:2b:fc:f9:fe:66:52:df:57:0c:56: 5e:22:4c:8d:cb:28:88:6d:e9:9b:6f:f2:28:60:03:bf:66:98: 20:39:65:9b:8f:a1:62:59:56:8f:36:88:69:fd:05:1c:fe:7d: 3e:36:69:83:ad:9e:74:e9:d5:06:04:15:34:75:eb:98:67:86: 34:ce:1f:d7:1e:78:5a:18:b5:36:07:e8:7b:10:c0:56:da:08: c7:47:cb:38:23:91:f0:a1:a4:c9:e2:86:f8:b4:b8:fb:fd:59: d3:27:c4:dd:21:5c:d8:97:f6:42:86:64:66:af:f0:50:f4:d3: ea:92:87:d3:b8:43:96:6e:f7:81:e8:c6:0d:87:4f:5d:bd:41: d4:6a:b0:90:e8:d7:4b:77:72:6d:e1:be:e0:0d:99:55:46:1f: 0e:e2:a4:52:cc:8a:fb:c7:9a:78:fd:c5:96:81:29:07:1c:1e: 98:c9:27:ab:74:8a:db:86:c3:0a:14:b4:48:67:78:97:fb:c8: a3:77:4b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUwODIwMTU1ODM1WhcNMjUwODI3MTU1ODM1WjAYMRYwFAYD VQQDEw02OGE1ZjBhYi03YzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gHo0OvKa7cYp0iM3xcqha/KHu2ZRgoOzNecUJdM3qb+08hP/GsRUM4qhote VqKyyoAkX+azLcnCkkSblePwODgOppDoHmW8tdAAgDyRQ4oVaWmAmW3s7V7nPXxE pHn9BkIgIqpzjKFnvvc3hiHe90CoW3XObzLs8y9bxHGfHSUMlbB00/EpKsxO55vu HH5NUWwPIFSaKQW3/UD9vWA8l8vvASftygdQX8mTdUIKADMe6RJx4hbZ2AzReALI s4XmbZYNUt5Tsb19wUgiIPXimS3TNm0ulJ1JqodQBHX93NWA2U7n+2iWM7luVPet LhnvOuGdq4lJ/BoilRseQZumCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb+GpkK eNq1m5mpdPfSVl5hx1rrMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2BzE3hXnh1ulYHHqjmZsNC1Uku4WzPKku3AhiI33PJFMQCpIbyHxS gO/k6O4l0Jes2gPhtXdUSSoDPBFxPCv8+f5mUt9XDFZeIkyNyyiIbembb/IoYAO/ ZpggOWWbj6FiWVaPNohp/QUc/n0+NmmDrZ506dUGBBU0deuYZ4Y0zh/XHnhaGLU2 B+h7EMBW2gjHR8s4I5HwoaTJ4ob4tLj7/VnTJ8TdIVzYl/ZChmRmr/BQ9NPqkofT uEOWbveB6MYNh09dvUHUarCQ6NdLd3Jt4b7gDZlVRh8O4qRSzIr7x5p4/cWWgSkH HB6YySerdIrbhsMKFLRIZ3iX+8ijd0tI -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:36 2025 by rpki-client