$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft File: 7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json) Hash identifier: LUr4Ays6DO9LbSrVL3DbeygvZS0g65iZWTSx+5X5cCI= Subject key identifier: 47:27:34:F3:D6:34:80:2E:AF:D6:62:FD:72:E6:AD:96:B4:24:5A:AD Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D Certificate issuer: /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft Manifest number: 0135 Signing time: Sat 31 May 2025 04:06:37 +0000 Manifest this update: Sat 31 May 2025 04:06:37 +0000 Manifest next update: Sat 07 Jun 2025 04:06:37 +0000 Files and hashes: 1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: O4UbQwU1HREaUlNUenbAcHDJAABAIA6YV+iVoGwzNrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Validity Not Before: May 31 04:06:37 2025 GMT Not After : Jun 7 04:06:37 2025 GMT Subject: CN=683a804d-3781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:6c:5a:be:88:a7:c2:c7:ad:89:cb:12:fc: 49:6a:40:9f:9b:68:87:02:b9:1b:49:9d:03:c3:45: 97:e3:2f:e2:42:af:57:94:f3:cc:8a:3a:8f:8f:fe: 67:c5:a8:4e:6e:86:04:ff:6b:55:f8:2e:3f:64:32: af:15:5e:d9:1d:59:ab:28:8e:5a:d8:13:1c:f9:9e: 20:71:5b:83:9f:2d:c9:7c:53:43:d5:8b:c3:97:2b: 16:27:ad:d8:62:5f:e6:93:72:ea:be:d1:23:99:bc: d0:a2:a2:cd:6a:71:aa:10:73:26:ef:69:60:86:38: ce:52:c2:51:2c:c8:04:f9:60:6f:7b:6d:aa:cc:24: 5a:6c:1a:9a:34:8d:f3:bf:9c:30:e0:59:00:b9:ea: ae:93:c7:36:2d:c4:45:96:99:c2:d4:56:c4:cf:8e: ee:83:97:14:10:2c:f5:f6:f8:1b:75:e6:db:93:c1: a6:1b:94:cc:69:8b:99:c4:9a:3c:7a:89:8a:e1:a9: 5e:b6:cc:b9:12:a9:4e:fb:a4:f7:a0:3f:00:8c:38: b9:ef:7a:8e:ca:46:22:88:c5:a6:0b:82:a1:8e:7b: bc:bd:9c:86:e1:e4:03:81:52:e4:d8:b0:af:8f:55: c7:61:20:7e:68:33:3c:92:e4:5a:1c:8d:e7:03:68: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:27:34:F3:D6:34:80:2E:AF:D6:62:FD:72:E6:AD:96:B4:24:5A:AD X509v3 Authority Key Identifier: keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:49:38:b3:2b:15:c7:b0:e0:e7:39:3c:91:31:5f:7f:17:5b: a7:ea:93:03:7f:22:7e:81:96:86:58:11:fe:9e:02:4e:e8:f2: b7:8a:d3:d0:98:31:e7:5b:14:f3:49:20:b0:1f:7d:c9:00:42: e3:bb:73:30:29:9f:d8:e8:be:e5:e2:e1:82:25:7d:90:48:98: e8:a2:5e:e5:f8:6b:ff:b2:2d:52:c5:8e:ed:f5:2e:1b:ad:28: 3d:d9:b4:ac:71:0f:d1:48:68:89:37:17:e2:2b:4f:69:27:14: 32:e8:af:7c:37:d4:93:76:96:ae:e2:e6:dd:58:88:5e:a5:77: 0a:b6:d3:15:29:bb:14:ed:a0:55:8c:29:88:fb:fb:1a:b2:9a: 59:f4:8c:a2:c2:6c:0a:4c:d6:14:8e:d5:11:c1:ee:93:31:16: 93:ce:94:cd:87:14:6e:b2:33:17:25:ea:b9:96:8d:50:a6:b5: 68:9f:a6:9e:00:0a:78:43:22:d7:4a:49:c9:c1:3a:73:c8:90: 38:7e:55:15:9b:6d:d2:1a:43:6d:14:0c:7d:91:55:08:20:0c: 63:ae:95:05:de:9f:2e:3c:cd:48:19:8a:54:8c:0d:4a:db:9f: 18:a2:2a:68:45:a3:e1:d5:76:44:45:11:8b:94:d9:9a:60:e8: 55:ef:66:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKEVFRUM1M0VBRDE3RkJGODlCMjIxRDlCQTVBRkNEMDEw NzkwQzk5NEQwHhcNMjUwNTMxMDQwNjM3WhcNMjUwNjA3MDQwNjM3WjAYMRYwFAYD VQQDEw02ODNhODA0ZC0zNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF5sWr6Ip8LHrYnLEvxJakCfm2iHArkbSZ0Dw0WX4y/iQq9XlPPMijqPj/5n xahOboYE/2tV+C4/ZDKvFV7ZHVmrKI5a2BMc+Z4gcVuDny3JfFND1YvDlysWJ63Y Yl/mk3LqvtEjmbzQoqLNanGqEHMm72lghjjOUsJRLMgE+WBve22qzCRabBqaNI3z v5ww4FkAuequk8c2LcRFlpnC1FbEz47ug5cUECz19vgbdebbk8GmG5TMaYuZxJo8 eomK4aletsy5EqlO+6T3oD8AjDi573qOykYiiMWmC4Khjnu8vZyG4eQDgVLk2LCv j1XHYSB+aDM8kuRaHI3nA2gyywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcnNPPW NIAur9Zi/XLmrZa0JFqtMB8GA1UdIwQYMBaAFO7sU+rRf7+JsiHZulr80BB5DJlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xQThBMDY2NDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0bXlJZG02V3Z6UUVIa01t VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xQThBMDY2NDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0 bXlJZG02V3Z6UUVIa01tVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4STizKxXHsODnOTyRMV9/F1un6pMDfyJ+gZaGWBH+ngJO6PK3itPQ mDHnWxTzSSCwH33JAELju3MwKZ/Y6L7l4uGCJX2QSJjool7l+Gv/si1SxY7t9S4b rSg92bSscQ/RSGiJNxfiK09pJxQy6K98N9STdpau4ubdWIhepXcKttMVKbsU7aBV jCmI+/sasppZ9IyiwmwKTNYUjtURwe6TMRaTzpTNhxRusjMXJeq5lo1QprVon6ae AAp4QyLXSknJwTpzyJA4flUVm23SGkNtFAx9kVUIIAxjrpUF3p8uPM1IGYpUjA1K 258YoipoRaPh1XZERRGLlNmaYOhV72at -----END CERTIFICATE-----Generated at Sat May 31 16:33:06 2025 by rpki-client