$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: PQjtAKaqITPN2O93jD73RMMY3FPuSGN0/gprz5zvwKo= Subject key identifier: F4:46:C4:57:87:C0:F7:C5:A6:88:43:B5:59:76:93:7A:3A:E6:42:FA Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 07 Signing time: Fri 13 Jun 2025 07:03:14 +0000 Manifest this update: Fri 13 Jun 2025 07:03:13 +0000 Manifest next update: Fri 20 Jun 2025 07:03:13 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: Zz/LFPRJAL1I2877M/tggMwJn5gbt//Fn26OrL/fApY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Jun 13 07:03:13 2025 GMT Not After : Jun 20 07:03:13 2025 GMT Subject: CN=684bcd32-72dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:5c:e1:a5:c4:22:77:69:ea:13:a6:20:58: 75:ba:99:17:3d:b6:f6:5d:89:16:47:70:b2:1c:a9: b3:13:31:91:26:b6:a5:5f:e9:9b:43:dc:15:fd:39: 94:02:68:c2:b1:d0:91:cd:0e:bc:6e:e3:ab:28:42: e8:77:04:da:8a:de:4f:5e:89:e9:85:45:66:3e:8a: fb:50:09:83:e1:79:37:ce:06:f9:5e:dd:10:97:79: 0d:f8:43:a5:94:7a:87:4a:37:b4:69:d0:d7:af:3c: 71:03:c8:f9:8c:75:b2:4f:dc:f8:75:14:59:59:cd: 48:d4:6a:73:90:04:fd:ba:b6:4b:92:96:6b:9f:0f: a1:2a:2a:11:35:8a:42:99:cb:70:a9:2b:8b:98:73: fa:19:e4:3d:26:4b:0f:74:ab:e3:0c:fd:77:0a:d9: 52:fa:f0:83:c0:09:78:9f:ec:65:e2:d8:25:92:1c: a9:bf:75:b6:e2:45:a0:fb:66:cf:df:28:b5:47:d2: 15:eb:a3:f4:5b:b4:26:23:82:d5:d7:a5:65:94:b6: 12:2a:5b:96:0b:bd:15:59:f8:49:ed:7c:42:8a:3b: 27:8e:55:e5:c2:f4:98:ca:20:d3:87:36:a2:5b:25: e8:7b:6b:b1:84:b8:d2:92:b8:42:e7:03:5a:25:c2: 1f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:46:C4:57:87:C0:F7:C5:A6:88:43:B5:59:76:93:7A:3A:E6:42:FA X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:29:5b:a4:9d:1e:9f:a0:36:dc:41:1d:0a:74:59:b1:82:c0: 7a:49:eb:a0:4c:fd:c8:1f:77:0e:ce:d6:d2:48:7a:8f:ed:81: 06:2d:7b:6a:c2:08:72:cc:d8:7f:ec:97:9d:cb:4e:b2:27:46: fc:78:57:af:5d:57:06:c9:23:5e:55:dd:61:22:ce:5f:1f:20: 20:88:94:7d:09:bd:9a:e0:51:7a:95:06:59:ed:1c:5a:be:dc: e2:d4:4e:f7:2b:a6:ad:f2:e9:34:2e:fc:31:40:3d:78:fe:7e: 7d:cf:74:4c:cb:99:43:6b:f3:c0:a9:29:fc:f5:6d:86:89:f6: 23:33:f3:3b:2e:f4:9b:fb:31:d0:2f:fa:04:70:d1:19:af:87: 4a:51:b3:aa:a6:58:a5:21:c2:8d:1b:a1:57:0f:08:49:5c:8a: 24:2a:d1:f4:f3:64:1a:94:1c:e3:96:bd:f1:a8:cb:ea:a4:7f: 96:c9:86:fa:38:0b:56:53:06:6f:e9:77:fc:8b:62:8d:44:c0: 73:68:08:fb:4a:cc:be:9a:6c:e8:cb:48:8c:fb:75:93:30:e9: af:ec:2d:cc:da:88:9d:4f:4e:8f:15:d8:ca:13:13:c6:1a:7e: 03:7c:11:45:a8:29:74:51:57:0a:54:c9:e8:cf:00:e6:ee:76: e6:21:58:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTA2MTMwNzAzMTNaFw0yNTA2MjAwNzAzMTNaMBgxFjAUBgNV BAMTDTY4NGJjZDMyLTcyZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvlzhpcQid2nqE6YgWHW6mRc9tvZdiRZHcLIcqbMTMZEmtqVf6ZtD3BX9OZQC aMKx0JHNDrxu46soQuh3BNqK3k9eiemFRWY+ivtQCYPheTfOBvle3RCXeQ34Q6WU eodKN7Rp0NevPHEDyPmMdbJP3Ph1FFlZzUjUanOQBP26tkuSlmufD6EqKhE1ikKZ y3CpK4uYc/oZ5D0mSw90q+MM/XcK2VL68IPACXif7GXi2CWSHKm/dbbiRaD7Zs/f KLVH0hXro/RbtCYjgtXXpWWUthIqW5YLvRVZ+EntfEKKOyeOVeXC9JjKINOHNqJb Jeh7a7GEuNKSuELnA1olwh/DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9EbEV4fA 98WmiEO1WXaTejrmQvowHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4pW6SdHp+gNtxBHQp0WbGCwHpJ66BM/cgfdw7O1tJIeo/tgQYte2rC CHLM2H/sl53LTrInRvx4V69dVwbJI15V3WEizl8fICCIlH0JvZrgUXqVBlntHFq+ 3OLUTvcrpq3y6TQu/DFAPXj+fn3PdEzLmUNr88CpKfz1bYaJ9iMz8zsu9Jv7MdAv +gRw0Rmvh0pRs6qmWKUhwo0boVcPCElciiQq0fTzZBqUHOOWvfGoy+qkf5bJhvo4 C1ZTBm/pd/yLYo1EwHNoCPtKzL6abOjLSIz7dZMw6a/sLczaiJ1PTo8V2MoTE8Ya fgN8EUWoKXRRVwpUyejPAObuduYhWJY= -----END CERTIFICATE-----Generated at Sun Jun 15 02:47:04 2025 by rpki-client