$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: BWgMPKhtmCjHnT6yXwCex4WdoYR7MtliICufhIvi2SY= Subject key identifier: 1D:E3:0F:B2:BD:11:4A:FF:0D:57:C6:AF:99:A0:69:E3:D9:56:30:59 Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: 0140 Signing time: Sat 31 May 2025 03:57:21 +0000 Manifest this update: Sat 31 May 2025 03:57:21 +0000 Manifest next update: Sat 07 Jun 2025 03:57:21 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: vRc/nL5vQ5XVvQxOgKG1iSYhARXCzZ8poDj2+FzZHbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: May 31 03:57:21 2025 GMT Not After : Jun 7 03:57:21 2025 GMT Subject: CN=683a7e21-e74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:39:97:fb:29:73:08:c2:41:6f:b2:cd:44: f1:18:8b:38:54:15:d6:60:f0:6d:5a:1e:d3:2c:21: b4:93:82:6d:9d:7b:a4:ec:6a:06:4d:1f:1c:de:e0: da:87:ec:0d:5d:b9:ae:ea:6c:80:79:36:29:10:e4: 8f:22:d5:10:91:f8:dd:c3:4e:1b:8b:1a:8e:da:7a: 84:e3:3f:a7:82:d7:56:84:6c:30:00:4f:c9:63:76: 3f:67:13:29:cd:6d:72:d5:37:51:83:55:61:c2:6b: 2c:43:f3:87:77:30:1b:20:98:f3:99:dc:2c:48:94: 98:81:d3:32:21:83:6a:3e:c3:fc:11:e5:86:5e:af: 18:19:f1:c4:8e:78:9e:97:a3:d7:a9:da:29:77:05: d0:41:08:e5:08:42:0c:91:ca:1c:ba:a8:b4:d7:c7: d3:99:6c:ed:4d:a5:91:1f:45:b3:7b:70:80:b2:81: ca:2b:7f:5c:e2:dd:0d:de:6d:f0:8c:ae:13:22:88: f4:c0:4c:c8:40:e2:a1:ea:b7:fd:0b:28:a5:1d:6a: 2a:ae:2e:20:fa:6f:f5:b5:83:a2:d7:6f:fc:2b:0d: 13:8f:4f:a2:30:88:25:c0:03:ad:58:e7:8a:44:21: 86:eb:ee:78:e2:99:c2:d5:1b:6c:f5:38:dd:31:22: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:0F:B2:BD:11:4A:FF:0D:57:C6:AF:99:A0:69:E3:D9:56:30:59 X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b7:ae:28:55:05:68:b2:07:6f:1e:86:55:a2:b1:18:23:33: 92:8b:08:37:83:f6:76:63:e2:14:1f:f9:33:1f:78:66:bf:7c: bd:e4:70:c7:66:1f:8d:30:c5:44:51:44:e1:af:0f:2a:9c:e4: df:0c:50:d6:6e:ff:14:eb:49:ab:ca:31:83:9a:93:d6:04:cf: b1:ac:0c:4f:3e:83:4e:43:96:a8:74:09:7f:97:22:b3:f5:65: 42:51:29:6f:e1:5a:46:59:f8:bc:5b:58:77:48:bf:46:2e:4c: 07:26:d2:56:61:3c:a3:c1:32:06:b5:ef:af:5c:87:04:b9:4c: be:ca:23:6e:14:8a:d0:f9:b0:00:ef:2d:c2:b8:50:0f:fa:73: f0:14:cc:97:66:99:2a:47:0a:b8:9c:29:c9:79:b9:21:40:7a: 64:83:44:9c:c5:fb:95:7d:b2:45:e5:c1:8b:a9:e2:4c:91:3b: 9e:a3:d4:8d:d3:d0:68:3b:5f:91:30:40:e6:a2:40:ac:1d:67: 72:15:4a:05:01:f7:39:93:52:ce:c2:0b:22:17:79:7c:fc:26: a2:ab:d6:2b:1c:16:fb:a0:2e:af:7b:c8:a7:6e:ed:d5:e1:93: 7a:43:fa:0e:63:2c:8e:28:4d:6e:7a:9b:9b:ab:67:ec:97:81: bf:f1:a4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAxMDVGNTA5REYy MTBCQzA5MUMwHhcNMjUwNTMxMDM1NzIxWhcNMjUwNjA3MDM1NzIxWjAYMRYwFAYD VQQDEw02ODNhN2UyMS1lNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5c5l/spcwjCQW+yzUTxGIs4VBXWYPBtWh7TLCG0k4JtnXuk7GoGTR8c3uDa h+wNXbmu6myAeTYpEOSPItUQkfjdw04bixqO2nqE4z+ngtdWhGwwAE/JY3Y/ZxMp zW1y1TdRg1VhwmssQ/OHdzAbIJjzmdwsSJSYgdMyIYNqPsP8EeWGXq8YGfHEjnie l6PXqdopdwXQQQjlCEIMkcocuqi018fTmWztTaWRH0Wze3CAsoHKK39c4t0N3m3w jK4TIoj0wEzIQOKh6rf9CyilHWoqri4g+m/1tYOi12/8Kw0Tj0+iMIglwAOtWOeK RCGG6+544pnC1Rts9TjdMSLGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3jD7K9 EUr/DVfGr5mgaePZVjBZMB8GA1UdIwQYMBaAFO6uUpI7C65yyYPQEF9QnfIQvAkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM2OS9BNTFDNENBQTRF RkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJuTEpnOUFRWDFDZDhoQzhD UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJu TEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0t64oVQVosgdvHoZVorEYIzOSiwg3g/Z2Y+IUH/kzH3hmv3y95HDH Zh+NMMVEUUThrw8qnOTfDFDWbv8U60mryjGDmpPWBM+xrAxPPoNOQ5aodAl/lyKz 9WVCUSlv4VpGWfi8W1h3SL9GLkwHJtJWYTyjwTIGte+vXIcEuUy+yiNuFIrQ+bAA 7y3CuFAP+nPwFMyXZpkqRwq4nCnJebkhQHpkg0ScxfuVfbJF5cGLqeJMkTueo9SN 09BoO1+RMEDmokCsHWdyFUoFAfc5k1LOwgsiF3l8/Caiq9YrHBb7oC6ve8inbu3V 4ZN6Q/oOYyyOKE1uepubq2fsl4G/8aQP -----END CERTIFICATE-----Generated at Sat May 31 17:20:41 2025 by rpki-client