$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: JcJ2SV3m5T+5kjkDKFmYbVH4h2xvzyLZW0/iI8/+Pm0= Subject key identifier: 6E:CF:C4:32:2D:37:5B:A9:89:19:74:9C:67:4B:56:93:AC:79:36:25 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0B56 Signing time: Sun 08 Jun 2025 18:53:13 +0000 Manifest this update: Sun 08 Jun 2025 18:53:12 +0000 Manifest next update: Sun 15 Jun 2025 18:53:12 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: 1vyrHjwfw4z9xAyxCwtXdaVmxm7z0L8JWazWD9d25A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Jun 8 18:53:12 2025 GMT Not After : Jun 15 18:53:12 2025 GMT Subject: CN=6845dc19-4d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:16:6c:7c:aa:ad:4a:83:0e:c2:93:f6:e3: 21:64:bc:49:1f:ec:68:c5:46:a9:de:27:9b:a0:61: 9f:32:c1:e6:e2:67:51:72:db:38:21:2c:5c:18:a5: 99:c4:52:80:7e:f7:27:58:92:02:60:5f:8e:67:25: 35:15:76:e0:7e:36:a6:4f:5c:ad:b9:cc:f8:c5:7d: 90:94:67:ca:a5:cf:3b:51:68:8d:e2:c1:35:6f:93: 59:6e:a0:4b:42:e9:d9:d4:03:29:5e:6a:51:ee:f1: dd:5b:4e:39:08:75:ea:16:ba:29:31:ff:2e:6a:3e: d1:43:4d:2a:ec:d0:57:5b:eb:93:bd:54:28:1c:77: 05:45:eb:d7:45:a1:a3:fa:ab:7a:7e:f8:7b:4f:fa: 66:ff:f2:11:50:84:71:70:93:db:80:f8:7f:c5:e4: 04:3f:9a:58:df:27:11:73:44:f1:96:31:ea:38:ab: 27:59:c9:bf:91:db:20:b2:50:d2:9b:97:ea:3f:bc: 66:d4:32:c6:1f:29:74:c5:19:e5:51:55:01:2e:34: 4f:3e:23:d5:9b:b8:11:23:d0:b2:36:3e:5c:f1:03: f6:72:c1:67:b6:66:4d:4e:04:51:6e:9a:9c:8e:be: f2:28:45:66:4d:f3:12:b0:ec:41:3a:aa:88:b9:38: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CF:C4:32:2D:37:5B:A9:89:19:74:9C:67:4B:56:93:AC:79:36:25 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:45:16:d0:3c:5f:c4:12:61:bb:eb:b5:4f:58:1b:f6:16:db: 9e:09:7f:c7:dd:df:74:da:1c:0c:b9:77:ea:b8:8d:3b:88:b8: 09:8e:e4:56:55:71:62:d7:43:ba:09:b8:48:7c:b4:ef:06:4f: 02:da:3c:4a:ef:8b:3b:c4:75:df:3f:9f:28:cf:d1:7d:24:e9: 83:1a:fc:97:28:51:84:ec:66:fe:cd:e3:d1:70:f2:37:51:f9: 07:58:bc:77:1f:d5:34:84:fa:9a:fe:2d:88:08:3e:32:0a:4d: bc:68:1b:e0:71:4c:6a:d2:06:db:ea:a1:10:ba:3f:af:89:0e: c7:03:ca:dc:df:08:d2:67:ed:67:4d:7b:6b:d2:7d:31:b1:11: c5:91:95:d8:2e:f4:fc:83:2c:48:5f:68:a8:50:67:06:80:cf: 11:a9:b7:02:bd:04:f9:29:a9:03:08:24:e9:c9:7e:26:35:9f: 1e:ff:fa:9e:52:f3:fa:ff:89:f3:73:99:e9:f7:3a:4c:cc:1d: 2c:12:7a:9a:d0:47:c0:d6:1c:78:62:28:89:dc:55:7a:19:ea: 79:1c:00:3d:ab:ba:8d:25:c7:50:4c:f4:2a:72:fa:1d:61:d7: ed:9d:c3:87:43:49:f3:7c:73:f8:28:6e:05:37:2f:20:86:af: b0:e4:64:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUwNjA4MTg1MzEyWhcNMjUwNjE1MTg1MzEyWjAYMRYwFAYD VQQDEw02ODQ1ZGMxOS00ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHUWbHyqrUqDDsKT9uMhZLxJH+xoxUap3ieboGGfMsHm4mdRcts4ISxcGKWZ xFKAfvcnWJICYF+OZyU1FXbgfjamT1ytucz4xX2QlGfKpc87UWiN4sE1b5NZbqBL QunZ1AMpXmpR7vHdW045CHXqFropMf8uaj7RQ00q7NBXW+uTvVQoHHcFRevXRaGj +qt6fvh7T/pm//IRUIRxcJPbgPh/xeQEP5pY3ycRc0TxljHqOKsnWcm/kdsgslDS m5fqP7xm1DLGHyl0xRnlUVUBLjRPPiPVm7gRI9CyNj5c8QP2csFntmZNTgRRbpqc jr7yKEVmTfMSsOxBOqqIuTj+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7PxDIt N1upiRl0nGdLVpOseTYlMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4RRbQPF/EEmG767VPWBv2FtueCX/H3d902hwMuXfquI07iLgJjuRW VXFi10O6CbhIfLTvBk8C2jxK74s7xHXfP58oz9F9JOmDGvyXKFGE7Gb+zePRcPI3 UfkHWLx3H9U0hPqa/i2ICD4yCk28aBvgcUxq0gbb6qEQuj+viQ7HA8rc3wjSZ+1n TXtr0n0xsRHFkZXYLvT8gyxIX2ioUGcGgM8RqbcCvQT5KakDCCTpyX4mNZ8e//qe UvP6/4nzc5np9zpMzB0sEnqa0EfA1hx4YiiJ3FV6Gep5HAA9q7qNJcdQTPQqcvod YdftncOHQ0nzfHP4KG4FNy8ghq+w5GQb -----END CERTIFICATE-----Generated at Mon Jun 9 14:12:05 2025 by rpki-client