$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft File: 7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json) Hash identifier: 9gTId/49Mch9PR9Tp1oGdXDzkn8XroK4Nwlc5dpWzWM= Subject key identifier: EC:AD:71:33:00:5D:06:36:9A:15:40:DA:EB:45:B3:DB:B6:4A:94:65 Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55 Certificate issuer: /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft Manifest number: 3498 Signing time: Sun 20 Jul 2025 15:10:41 +0000 Manifest this update: Sun 20 Jul 2025 15:10:41 +0000 Manifest next update: Sun 27 Jul 2025 15:10:41 +0000 Files and hashes: 1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: sHng7+mHMOUYr2SLpWAe0/Yj1xl191QsYte3w/owXkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255 Validity Not Before: Jul 20 15:10:41 2025 GMT Not After : Jul 27 15:10:41 2025 GMT Subject: CN=687d06f1-84e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:08:a1:9a:20:3c:cc:98:81:a3:0e:14:ef: b4:86:d0:d4:bd:34:45:af:f0:6b:f6:c3:19:aa:1c: 40:49:bd:24:e6:5d:79:0b:d3:ac:9a:ce:0e:08:ab: 35:fc:a6:3e:5f:8c:41:18:7d:bf:e8:81:ca:5b:6f: de:28:0f:45:1a:56:d4:ca:38:8f:68:7a:bb:6e:00: 95:21:05:83:ef:5e:a4:e4:7f:12:a6:90:f4:b3:07: 8d:1c:9d:3a:1e:d0:c1:1a:c6:dc:06:d4:61:a9:b5: 41:19:22:10:2e:39:79:3c:dd:f1:c5:4e:8f:c7:a5: 4c:74:d0:91:e8:ae:e4:ac:31:7b:fc:27:0d:f3:94: de:b5:9f:d2:f9:c0:5c:41:22:e6:35:4b:89:fe:aa: 90:f9:d5:80:b9:51:b2:89:97:17:4c:4b:94:db:c8: ad:03:ea:4d:93:dd:40:00:03:61:37:2e:44:7e:26: fd:82:b5:0d:15:59:1f:f2:11:c0:79:3e:67:1c:e2: 0f:8d:28:96:be:ff:3b:8f:a5:8c:42:cb:28:a2:99: cf:33:20:9c:c7:b9:a8:96:a8:66:67:a9:40:82:2f: 9f:89:c4:13:a8:b9:cc:b5:49:29:8d:45:11:c6:48: 04:58:e5:7c:5e:46:91:9e:4f:58:d8:00:b6:84:cf: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AD:71:33:00:5D:06:36:9A:15:40:DA:EB:45:B3:DB:B6:4A:94:65 X509v3 Authority Key Identifier: keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:88:22:e1:c7:5e:5a:e1:62:18:fc:07:0e:51:26:a1:e8:06: 74:b4:57:84:c4:3c:d1:02:96:b8:95:4e:3c:05:18:c9:a9:e7: 04:74:2e:5d:df:96:cf:6c:90:c8:b3:6e:76:45:02:24:b8:73: 05:22:35:66:bb:8e:a8:52:bb:8a:e1:08:e0:1a:c9:6c:19:f1: 3f:f0:fe:f2:82:a8:33:e2:51:f4:0b:ef:3c:90:09:21:92:6d: d4:68:e5:1e:cd:07:b6:e2:eb:60:97:80:76:99:32:b3:e0:64: 2f:a1:bc:55:82:42:fc:5d:63:ca:b3:cc:cd:f7:64:36:4d:16: a4:bb:5a:23:82:04:23:76:17:3d:58:45:e6:f7:94:7c:5a:e6: b5:5a:e1:bb:35:1a:04:fc:07:86:4b:ea:ca:02:43:bc:d7:30: 82:2a:d0:80:51:42:4b:e8:89:06:2e:16:a8:8d:9f:80:a4:62: b8:50:a7:f8:bc:d8:a2:fc:57:ee:05:4e:a0:f3:dc:2f:4e:50: 45:2a:be:b2:f4:81:54:a1:54:a3:63:34:7a:2d:93:55:06:63: eb:8f:bb:ec:03:6e:a4:89:9e:e6:26:bc:1b:1e:17:cc:68:7a: 0e:9c:84:e9:a9:06:ca:14:88:df:29:8a:3e:04:6b:0d:79:ac: ce:a0:34:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGQjkxMTAvBgNVBAUTKEVDQjVCQjUzMEE3MkE0MDk1Njg5RUNCQjE1OEYyQUU1 RUZFOTEyNTUwHhcNMjUwNzIwMTUxMDQxWhcNMjUwNzI3MTUxMDQxWjAYMRYwFAYD VQQDEw02ODdkMDZmMS04NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCcIoZogPMyYgaMOFO+0htDUvTRFr/Br9sMZqhxASb0k5l15C9Osms4OCKs1 /KY+X4xBGH2/6IHKW2/eKA9FGlbUyjiPaHq7bgCVIQWD716k5H8SppD0sweNHJ06 HtDBGsbcBtRhqbVBGSIQLjl5PN3xxU6Px6VMdNCR6K7krDF7/CcN85TetZ/S+cBc QSLmNUuJ/qqQ+dWAuVGyiZcXTEuU28itA+pNk91AAANhNy5Efib9grUNFVkf8hHA eT5nHOIPjSiWvv87j6WMQssoopnPMyCcx7molqhmZ6lAgi+ficQTqLnMtUkpjUUR xkgEWOV8XkaRnk9Y2AC2hM9hcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOytcTMA XQY2mhVA2utFs9u2SpRlMB8GA1UdIwQYMBaAFOy1u1MKcqQJVonsuxWPKuXv6RJV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUZCOS8yMTE0RDU2ODFE QTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBBbFdpZXk3Rlk4cTVlX3BF bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMVzdVd3B5cEFsV2lleTdGWThxNWVfcEVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUZCOS8yMTE0RDU2ODFEQTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBB bFdpZXk3Rlk4cTVlX3BFbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCiCLhx15a4WIY/AcOUSah6AZ0tFeExDzRApa4lU48BRjJqecEdC5d 35bPbJDIs252RQIkuHMFIjVmu46oUruK4QjgGslsGfE/8P7ygqgz4lH0C+88kAkh km3UaOUezQe24utgl4B2mTKz4GQvobxVgkL8XWPKs8zN92Q2TRaku1ojggQjdhc9 WEXm95R8Wua1WuG7NRoE/AeGS+rKAkO81zCCKtCAUUJL6IkGLhaojZ+ApGK4UKf4 vNii/FfuBU6g89wvTlBFKr6y9IFUoVSjYzR6LZNVBmPrj7vsA26kiZ7mJrwbHhfM aHoOnITpqQbKFIjfKYo+BGsNeazOoDTI -----END CERTIFICATE-----Generated at Mon Jul 21 09:10:50 2025 by rpki-client