$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: o70KSXXXSjQypyW19HJkIoABh1qxfcP/sXqdIIr9lqM= Subject key identifier: D7:74:AA:5B:C2:6B:3A:BC:31:67:F0:B3:11:90:9A:DF:84:2D:FA:2B Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 6C Signing time: Mon 21 Jul 2025 07:13:39 +0000 Manifest this update: Mon 21 Jul 2025 07:13:38 +0000 Manifest next update: Mon 28 Jul 2025 07:13:38 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: 5HGHBjb0T0OYLfnrxIi+XpYPk4pgsRJ1CMuVzo1MwdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Jul 21 07:13:38 2025 GMT Not After : Jul 28 07:13:38 2025 GMT Subject: CN=687de8a2-caac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:91:ab:6f:bd:b9:2f:b5:71:67:21:a8:2d: bd:a7:f4:fe:33:1d:21:73:20:0c:33:3d:66:5f:69: 25:fd:1c:8b:1e:98:17:99:d2:ed:01:67:8c:4f:ff: 28:0d:69:77:2d:2c:ea:d4:ef:91:73:ae:db:f6:98: 7b:e6:e3:8a:06:65:55:ac:c6:72:5b:bf:47:15:60: 36:a2:a8:64:31:6a:ed:b3:7d:ed:b9:07:7b:30:cd: b8:df:2f:56:66:ed:b9:88:7c:94:5e:76:29:82:f8: 79:a6:78:a0:f1:e1:bf:e7:9b:d1:e5:d7:fd:4c:a2: de:59:e4:fa:f0:dc:35:5e:95:12:8d:79:51:72:4d: fe:b0:c4:41:76:97:72:ea:b7:33:5a:09:41:36:06: 0e:e9:e5:0b:8b:9b:96:1f:2b:81:d2:83:88:b5:7a: ca:dd:e3:94:26:33:7a:42:67:59:e2:a7:a3:ba:71: 7c:a0:24:df:a0:da:55:43:c8:a2:af:4b:09:7c:03: c1:be:71:22:78:a1:d0:36:f4:68:b2:47:7e:10:0f: 13:b5:91:aa:b2:38:79:24:6b:23:aa:b1:5c:1f:0b: 78:83:46:f5:2e:ca:5c:63:e3:c2:9b:c2:e8:ea:b2: de:4c:0a:67:ae:1c:44:29:a5:86:8d:98:63:42:b2: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:AA:5B:C2:6B:3A:BC:31:67:F0:B3:11:90:9A:DF:84:2D:FA:2B X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ef:da:82:dd:14:13:1a:84:14:5e:61:2a:80:fc:20:13:3d: b0:fa:16:ac:1d:a4:1b:70:e9:20:b0:87:70:21:2f:19:f4:01: 31:e5:1f:8f:52:ce:f1:e7:cd:62:af:75:89:c4:54:43:87:e3: 41:63:db:be:42:3e:e6:db:8e:51:fe:e5:b0:0e:bb:f1:fc:ca: cd:21:c4:a5:f8:d7:f3:96:55:a2:ef:be:48:f6:e7:67:17:5d: ab:93:b9:b8:cc:b5:df:ec:18:63:c5:a6:58:f8:bd:99:7a:ac: 69:47:1a:66:71:a4:a6:82:fd:99:b4:5f:f3:a6:1b:90:78:b9: f4:cb:88:15:d7:d9:74:6c:d7:8d:41:c7:e7:66:b8:f7:60:61: e2:d5:33:90:37:aa:21:8a:5c:8c:54:fb:de:11:99:48:77:14: 96:fa:bd:36:de:88:50:1b:6a:18:c2:7a:63:23:6b:47:79:af: 21:aa:bf:21:34:55:05:9a:cf:bb:f4:46:8e:c9:12:1d:bd:c9: fc:b6:a0:96:98:02:e8:a2:43:40:67:bd:f6:48:88:90:f3:07: ea:80:f0:55:bf:5b:81:46:f0:aa:b4:5c:56:d7:9a:df:7f:9d: f9:c6:63:6c:5e:2b:6a:30:bf:0a:01:2d:d6:ff:bc:22:21:80: 24:ee:32:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5ODA1REMyNDgw NDE1NzA3RDAeFw0yNTA3MjEwNzEzMzhaFw0yNTA3MjgwNzEzMzhaMBgxFjAUBgNV BAMTDTY4N2RlOGEyLWNhYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRaZGrb725L7VxZyGoLb2n9P4zHSFzIAwzPWZfaSX9HIsemBeZ0u0BZ4xP/ygN aXctLOrU75Fzrtv2mHvm44oGZVWsxnJbv0cVYDaiqGQxau2zfe25B3swzbjfL1Zm 7bmIfJRedimC+HmmeKDx4b/nm9Hl1/1Mot5Z5Prw3DVelRKNeVFyTf6wxEF2l3Lq tzNaCUE2Bg7p5QuLm5YfK4HSg4i1esrd45QmM3pCZ1nip6O6cXygJN+g2lVDyKKv Swl8A8G+cSJ4odA29GiyR34QDxO1kaqyOHkkayOqsVwfC3iDRvUuylxj48Kbwujq st5MCmeuHEQppYaNmGNCspjNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU13SqW8Jr OrwxZ/CzEZCa34Qt+iswHwYDVR0jBBgwFoAUe2JiC/6zjOtk0hDJgF3CSAQVcH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0JFMzE4RkIwRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTJKaUNfNnpqT3RrMGhESmdGM0NTQVFWY0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90 azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPv2oLdFBMahBReYSqA/CATPbD6FqwdpBtw6SCwh3AhLxn0ATHlH49S zvHnzWKvdYnEVEOH40Fj275CPubbjlH+5bAOu/H8ys0hxKX41/OWVaLvvkj252cX XauTubjMtd/sGGPFplj4vZl6rGlHGmZxpKaC/Zm0X/OmG5B4ufTLiBXX2XRs141B x+dmuPdgYeLVM5A3qiGKXIxU+94RmUh3FJb6vTbeiFAbahjCemMja0d5ryGqvyE0 VQWaz7v0Ro7JEh29yfy2oJaYAuiiQ0BnvfZIiJDzB+qA8FW/W4FG8Kq0XFbXmt9/ nfnGY2xeK2owvwoBLdb/vCIhgCTuMr0= -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:12 2025 by rpki-client