$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json) Hash identifier: XZlKg0yKGBLEn8ZwIFwn28u5/l/afWkIqAuBdOBbhSk= Subject key identifier: BE:01:6B:1A:27:A9:9D:31:86:67:F5:1C:44:43:CA:A0:72:52:A5:38 Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft Manifest number: 3FF1 Signing time: Sun 20 Jul 2025 14:50:31 +0000 Manifest this update: Sun 20 Jul 2025 14:50:31 +0000 Manifest next update: Sun 27 Jul 2025 14:50:31 +0000 Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: k7WCLz6aKHxJV4cgURgoQPUjZD7qRSlNzaTMp9JcXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9 Validity Not Before: Jul 20 14:50:31 2025 GMT Not After : Jul 27 14:50:31 2025 GMT Subject: CN=687d0237-0960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:01:e5:40:2b:10:a8:d8:15:64:04:73:ef: d0:d5:30:af:a9:24:de:1b:69:1c:58:85:a5:6a:37: 79:2a:0c:48:ef:be:f0:95:93:c8:35:01:7d:7a:f8: 9c:77:11:ff:cd:3e:58:62:02:9d:61:93:5f:34:c4: ff:ae:0e:a6:49:56:51:1c:45:7d:81:e3:db:9e:ca: 9f:16:94:1c:70:9c:92:87:86:18:46:ae:7d:d0:15: 63:d5:f9:f7:87:95:fd:f8:63:d3:c9:0b:e2:cb:92: 17:8f:0c:2b:bd:08:dd:84:f8:3e:2c:a7:b7:3f:41: b2:a4:4e:69:00:36:a1:d0:8f:3f:6b:f0:a9:6b:73: 80:b4:4b:ee:ca:62:8a:4e:f0:83:0b:6c:0a:f2:57: ac:8d:4f:49:8f:ec:75:51:cc:c7:29:72:3d:3b:6d: 14:52:48:9a:47:46:8a:a2:ab:1f:41:25:7f:47:46: 17:5a:8c:72:c7:ca:b8:9d:45:54:8b:27:c7:66:ab: 8d:75:11:3e:f0:17:e9:db:37:6b:56:e9:f4:ea:83: b1:bb:e0:58:95:c6:c6:3f:6d:45:10:a1:db:33:85: de:98:99:c4:53:75:38:1b:34:9d:e6:18:fa:fe:15: 5e:b7:48:51:b3:ba:22:37:38:44:03:b5:39:e1:34: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:6B:1A:27:A9:9D:31:86:67:F5:1C:44:43:CA:A0:72:52:A5:38 X509v3 Authority Key Identifier: keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:be:b1:13:04:5e:a2:ed:0d:51:0f:c7:ff:f1:86:f7:14: a1:53:f6:0b:80:9f:c9:8a:a9:93:5a:c3:92:5c:bc:a4:e9:2a: 17:8d:b0:95:05:de:84:55:02:77:da:8c:22:73:dc:4f:c3:98: a1:ce:5f:9d:ee:14:aa:f6:58:b8:0b:4d:d1:92:9e:c0:c1:25: 64:dc:72:39:b1:88:ae:70:57:13:84:50:b4:e8:a9:95:59:2b: e9:76:98:70:38:52:93:09:23:e8:ca:03:7f:77:db:b3:d8:b6: a2:ad:06:e4:ab:18:70:b5:33:a2:81:41:d2:3a:bb:cc:2c:54: 38:de:93:b7:28:25:91:2c:6c:74:cf:d8:9e:47:a0:64:f6:42: 4e:f7:0d:a6:3e:78:f0:77:e2:a3:3b:ea:36:d7:01:a0:4e:da: f3:d0:03:d4:d9:55:4a:fb:3c:cb:ab:9c:8d:49:15:10:97:6f: 4e:f8:2a:16:75:77:b8:48:37:79:00:1d:c0:97:a6:aa:c8:fc: 2a:46:39:03:24:b2:bd:ff:3e:eb:13:d8:24:d2:e1:74:e1:bd: 00:d6:3f:fd:38:94:b8:8b:96:69:6b:33:cb:e4:c8:46:cf:4d: a4:15:17:d2:63:bb:5c:1d:68:bc:d6:bd:17:09:1d:f8:2f:c9: 06:08:2e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKEVEQzFGRTc4QkM4N0JGMjVCMkUzOEQ3RDcyQ0Q5Q0Ez MzAyMjZDRTkwHhcNMjUwNzIwMTQ1MDMxWhcNMjUwNzI3MTQ1MDMxWjAYMRYwFAYD VQQDEw02ODdkMDIzNy0wOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdMB5UArEKjYFWQEc+/Q1TCvqSTeG2kcWIWlajd5KgxI777wlZPINQF9evic dxH/zT5YYgKdYZNfNMT/rg6mSVZRHEV9gePbnsqfFpQccJySh4YYRq590BVj1fn3 h5X9+GPTyQviy5IXjwwrvQjdhPg+LKe3P0GypE5pADah0I8/a/Cpa3OAtEvuymKK TvCDC2wK8lesjU9Jj+x1UczHKXI9O20UUkiaR0aKoqsfQSV/R0YXWoxyx8q4nUVU iyfHZquNdRE+8Bfp2zdrVun06oOxu+BYlcbGP21FEKHbM4XemJnEU3U4GzSd5hj6 /hVet0hRs7oiNzhEA7U54TR3kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4Baxon qZ0xhmf1HERDyqByUqU4MB8GA1UdIwQYMBaAFO3B/ni8h78lsuONfXLNnKMwImzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5V3k0NDE5Y3MyY296QWli T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjSC1lTHlIdnlXeTQ0MTljczJjb3pBaWJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi83Y0gtZUx5SHZ5 V3k0NDE5Y3MyY296QWliT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdqb6xEwReou0NUQ/H//GG9xShU/YLgJ/JiqmTWsOSXLyk6SoXjbCV Bd6EVQJ32owic9xPw5ihzl+d7hSq9li4C03Rkp7AwSVk3HI5sYiucFcThFC06KmV WSvpdphwOFKTCSPoygN/d9uz2LairQbkqxhwtTOigUHSOrvMLFQ43pO3KCWRLGx0 z9ieR6Bk9kJO9w2mPnjwd+KjO+o21wGgTtrz0APU2VVK+zzLq5yNSRUQl29O+CoW dXe4SDd5AB3Al6aqyPwqRjkDJLK9/z7rE9gk0uF04b0A1j/9OJS4i5ZpazPL5MhG z02kFRfSY7tcHWi81r0XCR34L8kGCC7y -----END CERTIFICATE-----Generated at Mon Jul 21 09:27:53 2025 by rpki-client