$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: +w9Qcf9d4OV6Nt3duPVZLA866kEdrjf4da1+Bw/pkSo= Subject key identifier: 17:6E:7C:70:4C:04:8D:75:B3:CE:73:1A:6F:90:95:60:19:CD:7F:43 Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 3484 Signing time: Sat 31 May 2025 14:31:10 +0000 Manifest this update: Sat 31 May 2025 14:31:10 +0000 Manifest next update: Sat 07 Jun 2025 14:31:10 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: QF2CjEA9YgmeScApbbOgCo1ip+uLACXwSqGIyd/xTqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: May 31 14:31:10 2025 GMT Not After : Jun 7 14:31:10 2025 GMT Subject: CN=683b12ae-9c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:f0:c4:c0:57:a1:47:05:50:85:ae:39:74: 42:03:19:49:0b:16:51:3e:31:1e:7e:e8:c3:30:08: 41:99:8e:82:35:5f:85:d3:9d:b9:1d:94:bb:85:a4: f0:c8:b7:ee:43:26:46:1d:43:af:c2:04:14:6a:cd: d8:67:b3:d1:2f:9e:69:a2:15:b0:30:a6:49:28:a2: 68:27:29:cb:1b:34:5e:b3:34:4c:b5:b7:61:fb:39: 52:53:f3:31:6e:76:7f:82:7e:a1:c3:94:ef:9c:79: 35:2c:93:1e:af:ba:e4:9d:fb:bd:db:3d:a1:8c:33: 11:da:f3:30:c1:8f:42:7e:ef:3b:65:15:f6:05:f8: 02:91:0d:4c:ca:64:f4:87:07:6e:0d:c6:15:fc:3b: 20:f6:ad:51:c0:4e:32:21:77:fb:86:ff:cb:65:09: 8a:2c:58:47:14:80:4b:ef:6f:7e:36:42:43:52:1f: c1:a3:b5:2d:77:08:34:5d:46:80:e7:b9:fc:e0:8a: 5f:d3:10:e9:7e:48:85:f8:39:f8:ce:35:3b:37:c5: 5f:23:86:d8:cf:df:22:ca:2a:ae:b5:1c:16:ee:41: 5a:ec:77:2c:b2:ee:cf:f8:8a:62:16:8c:93:07:f4: ac:0c:5b:b2:ae:ad:a9:95:17:92:e9:d1:4a:a6:bf: 2f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6E:7C:70:4C:04:8D:75:B3:CE:73:1A:6F:90:95:60:19:CD:7F:43 X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:73:c8:80:c2:10:94:a8:23:eb:ae:2e:d1:e7:cc:69:b7:10: 83:49:8c:05:75:b7:c1:cd:59:48:3b:91:28:9a:50:69:6d:7a: de:ba:09:68:4a:6d:e5:4b:b7:39:13:b1:03:0e:0b:55:ea:5b: d9:06:47:56:14:02:4f:4c:52:05:45:d7:5a:3b:40:cb:a1:d4: 42:68:e6:10:8f:f6:df:32:70:87:3d:ae:1f:ba:83:d9:d1:da: 1c:8b:f1:7b:ce:f3:d5:e4:f5:43:c1:c9:8b:5f:1e:54:4e:0e: 19:08:9a:30:4b:14:d6:67:de:57:6f:60:ff:7e:de:1f:06:4e: f0:c4:22:e6:43:1b:58:50:da:d5:a8:13:a3:8e:a4:e2:28:b5: 4c:d6:f8:d0:fe:5f:75:fe:7d:bd:88:47:71:c8:8b:59:e5:cd: 8b:ad:37:62:3c:ed:7b:56:b7:6f:ce:62:6b:cd:0a:93:30:b7: d7:02:54:80:82:72:a1:b8:22:ba:d3:85:6e:cf:d9:d6:8c:c6: 3d:bf:65:b0:31:06:4a:d5:6f:b7:0c:14:35:1e:e3:8e:b2:98: b4:73:ab:48:97:8c:e0:b4:66:e3:f0:ca:8d:41:e2:2f:39:6d: 14:9c:41:13:42:7b:28:b9:24:18:e3:8b:27:b8:65:8d:dd:24: 78:09:25:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjUwNTMxMTQzMTEwWhcNMjUwNjA3MTQzMTEwWjAYMRYwFAYD VQQDEw02ODNiMTJhZS05YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NPwxMBXoUcFUIWuOXRCAxlJCxZRPjEefujDMAhBmY6CNV+F0525HZS7haTw yLfuQyZGHUOvwgQUas3YZ7PRL55pohWwMKZJKKJoJynLGzReszRMtbdh+zlSU/Mx bnZ/gn6hw5TvnHk1LJMer7rknfu92z2hjDMR2vMwwY9Cfu87ZRX2BfgCkQ1MymT0 hwduDcYV/Dsg9q1RwE4yIXf7hv/LZQmKLFhHFIBL729+NkJDUh/Bo7Utdwg0XUaA 57n84Ipf0xDpfkiF+Dn4zjU7N8VfI4bYz98iyiqutRwW7kFa7Hcssu7P+IpiFoyT B/SsDFuyrq2plReS6dFKpr8v6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdufHBM BI11s85zGm+QlWAZzX9DMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIc8iAwhCUqCPrri7R58xptxCDSYwFdbfBzVlIO5EomlBpbXreuglo Sm3lS7c5E7EDDgtV6lvZBkdWFAJPTFIFRddaO0DLodRCaOYQj/bfMnCHPa4fuoPZ 0doci/F7zvPV5PVDwcmLXx5UTg4ZCJowSxTWZ95Xb2D/ft4fBk7wxCLmQxtYUNrV qBOjjqTiKLVM1vjQ/l91/n29iEdxyItZ5c2LrTdiPO17VrdvzmJrzQqTMLfXAlSA gnKhuCK604Vuz9nWjMY9v2WwMQZK1W+3DBQ1HuOOspi0c6tIl4zgtGbj8MqNQeIv OW0UnEETQnsouSQY44snuGWN3SR4CSUD -----END CERTIFICATE-----Generated at Sat May 31 16:40:48 2025 by rpki-client