$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: eo682nurHjta/cMSeDNgTD96TKdio/ETNejVOWR68zI= Subject key identifier: 66:B9:41:41:C1:E6:D0:42:2D:EA:9F:CA:B7:DF:18:B9:C3:0B:B6:73 Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 01A6 Signing time: Sun 20 Jul 2025 23:25:51 +0000 Manifest this update: Sun 20 Jul 2025 23:25:51 +0000 Manifest next update: Sun 27 Jul 2025 23:25:51 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: VmSAVzYPQrCjnxfFTLMbLVe/ZwRMWOsj61PIRcvoSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Jul 20 23:25:51 2025 GMT Not After : Jul 27 23:25:51 2025 GMT Subject: CN=687d7aff-e088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:85:11:37:b3:7d:d8:86:06:8c:28:e9:0e: 24:90:5a:b5:8f:db:cf:8a:0b:10:da:b3:a0:bb:74: 7d:44:70:dd:65:8c:ed:5a:4c:fb:3b:fc:99:fd:9c: d1:07:6b:8b:d2:ca:78:77:26:31:b2:2f:79:b3:c0: 64:9a:0e:0e:86:d4:99:27:a0:66:bc:bf:94:72:1e: 1f:c8:d3:ab:12:9f:01:4c:df:6d:08:78:34:c9:92: f6:db:12:ae:75:19:84:ae:39:c4:d5:d9:af:f4:ed: 15:40:11:89:65:f2:98:3e:da:15:54:ff:49:4f:3d: 5b:af:52:a2:91:6d:74:00:9d:0d:2a:6d:ef:c7:d0: 3a:1b:3e:df:df:1d:7b:d7:64:01:eb:36:91:89:ef: ad:4e:19:2b:bb:d6:f8:47:a5:9a:cf:93:12:29:b7: f1:4a:58:12:d9:6a:17:6d:ea:ce:fc:a7:bc:38:cd: b8:e7:da:4f:73:83:77:4a:f7:66:36:af:f4:59:f5: bb:92:cc:1d:64:11:5d:28:d8:68:c3:10:bc:29:50: 3c:1e:55:ff:c5:eb:f3:90:bc:27:37:4a:78:26:8d: 81:79:13:40:0d:90:01:ad:0d:b7:e0:28:3a:c1:83: 2c:bd:f4:ef:6e:b9:6a:a1:50:1e:71:b3:4d:01:95: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B9:41:41:C1:E6:D0:42:2D:EA:9F:CA:B7:DF:18:B9:C3:0B:B6:73 X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:53:02:5c:75:f5:ea:1b:c5:82:6b:1f:4d:c0:18:ef:c8:82: 30:f8:f2:a4:a9:c1:00:86:5b:71:b4:cc:0d:c2:a8:bd:b6:15: c4:8a:9a:b0:bc:81:de:40:5d:d2:74:60:cd:a2:95:a7:3f:61: 20:07:f7:7c:a7:26:e7:52:74:f4:b4:f4:49:43:00:39:1b:62: 87:df:83:c6:d5:85:a6:90:7a:91:cd:03:b2:4f:33:a3:d3:a1: 84:d3:e8:af:89:c0:c3:fa:61:5f:b2:75:1c:1e:5a:d7:d3:4d: 10:8c:01:b0:59:f0:2a:8f:d3:f3:72:ff:19:8e:6f:f6:8a:7b: ff:38:af:cd:eb:c8:9e:cd:ad:82:49:48:2f:ec:bd:51:e5:ff: e7:95:53:c4:d1:e1:5c:38:5b:3c:7d:ea:83:ed:c9:63:8d:f2: 38:19:d9:02:7b:d5:08:61:ec:1d:36:56:58:0a:b6:6a:93:58: e5:78:94:96:e4:1c:6c:09:3a:fd:4c:f4:ce:fa:58:54:f6:ab: 1d:d9:3b:8c:fe:ca:b4:c9:dc:b7:1c:f6:b1:83:94:2b:f5:ab: 22:ee:7a:ce:3a:18:29:17:4c:87:23:a8:51:2a:6f:b4:46:3b: 5f:19:ed:ce:18:6d:9c:a1:ae:12:3d:0a:1a:2d:35:22:be:1b: ef:e2:ab:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjUwNzIwMjMyNTUxWhcNMjUwNzI3MjMyNTUxWjAYMRYwFAYD VQQDEw02ODdkN2FmZi1lMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT6FETezfdiGBowo6Q4kkFq1j9vPigsQ2rOgu3R9RHDdZYztWkz7O/yZ/ZzR B2uL0sp4dyYxsi95s8Bkmg4OhtSZJ6BmvL+Uch4fyNOrEp8BTN9tCHg0yZL22xKu dRmErjnE1dmv9O0VQBGJZfKYPtoVVP9JTz1br1KikW10AJ0NKm3vx9A6Gz7f3x17 12QB6zaRie+tThkru9b4R6Waz5MSKbfxSlgS2WoXberO/Ke8OM2459pPc4N3Svdm Nq/0WfW7kswdZBFdKNhowxC8KVA8HlX/xevzkLwnN0p4Jo2BeRNADZABrQ234Cg6 wYMsvfTvbrlqoVAecbNNAZW8/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa5QUHB 5tBCLeqfyrffGLnDC7ZzMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUwJcdfXqG8WCax9NwBjvyIIw+PKkqcEAhltxtMwNwqi9thXEipqw vIHeQF3SdGDNopWnP2EgB/d8pybnUnT0tPRJQwA5G2KH34PG1YWmkHqRzQOyTzOj 06GE0+ivicDD+mFfsnUcHlrX000QjAGwWfAqj9Pzcv8Zjm/2inv/OK/N68ieza2C SUgv7L1R5f/nlVPE0eFcOFs8feqD7cljjfI4GdkCe9UIYewdNlZYCrZqk1jleJSW 5BxsCTr9TPTO+lhU9qsd2TuM/sq0ydy3HPaxg5Qr9asi7nrOOhgpF0yHI6hRKm+0 RjtfGe3OGG2coa4SPQoaLTUivhvv4qsQ -----END CERTIFICATE-----Generated at Mon Jul 21 00:31:18 2025 by rpki-client