$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: LPauQ3MsOqFg1XyQW2PAFJzYc2gmoWe79kzHalVpy6I= Subject key identifier: D7:64:AD:7C:BB:A5:4B:B2:51:AC:56:41:F6:65:2E:28:6B:1F:C8:3D Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 3484 Signing time: Sat 31 May 2025 14:34:59 +0000 Manifest this update: Sat 31 May 2025 14:34:59 +0000 Manifest next update: Sat 07 Jun 2025 14:34:59 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: BjJ9/IKcbSPvDnTkCuvJkEiwl7pn7L3xF38K/0exBQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: May 31 14:34:59 2025 GMT Not After : Jun 7 14:34:59 2025 GMT Subject: CN=683b1393-4b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a8:2d:33:71:81:b8:ca:c1:22:71:48:0d:9b: b3:7e:ce:84:05:1a:5b:d8:15:30:82:6a:c9:b8:2b: b9:ae:27:1a:d2:53:62:17:0a:91:3c:db:3b:59:0d: eb:76:a3:89:42:fc:2d:66:df:63:7f:4f:32:eb:0a: 3f:18:fb:7e:fd:33:24:74:46:7b:40:03:3e:b3:6b: 63:db:7f:4e:00:ff:c7:25:1b:57:6d:e1:b3:8e:d4: cf:b4:61:59:5b:77:a6:41:10:4e:00:0f:25:d2:16: f6:df:03:8b:24:58:00:42:97:96:72:19:b1:e4:e8: 62:0d:11:10:ea:fb:fe:ef:8b:9b:7c:09:b2:f9:95: 66:e5:87:05:4b:36:b7:a9:c5:d5:01:a6:6d:79:62: b5:b1:32:a8:1e:ca:65:8b:10:e9:fb:eb:9e:de:b5: f1:e4:b4:db:de:ee:18:13:36:49:1e:c6:72:b7:65: 0d:ca:fb:28:c7:58:d4:d6:40:d7:da:1a:92:a5:e2: 6b:50:09:94:18:29:f8:0a:e0:14:cb:cd:81:b7:e0: f5:65:e6:fb:f2:2b:3b:68:3f:ab:70:e4:4e:6d:40: ac:67:6c:79:bd:01:8b:d1:f4:ee:89:7f:d3:75:63: df:e8:e1:e3:50:75:3d:1d:6b:a0:f7:67:c3:53:c6: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:64:AD:7C:BB:A5:4B:B2:51:AC:56:41:F6:65:2E:28:6B:1F:C8:3D X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8f:74:b5:a8:4c:df:ef:fb:db:4c:34:1c:5e:36:39:ef:10: d0:13:3a:5d:08:21:db:08:a8:cc:a8:37:04:b7:01:77:db:8e: fc:c9:bf:2a:a7:78:f6:a7:6d:ee:b9:d4:63:cb:0c:17:89:e4: 66:17:10:b5:ac:60:77:67:b3:31:e6:0a:24:72:dd:cd:68:3e: 15:63:a4:d7:68:a5:db:b9:fd:7c:1d:d2:68:b2:06:b9:7c:2c: 9a:8f:74:93:cf:92:23:bb:b5:8d:40:50:60:fe:0d:7a:92:63: 2c:9b:03:4c:4a:6a:d9:85:48:31:e4:5f:66:96:10:5a:5f:8f: f3:03:37:59:fd:0d:7f:6f:f1:58:ce:0b:31:65:36:9f:91:e7: ee:63:92:e2:0f:3e:37:eb:fb:45:d5:64:31:6f:ee:96:d6:37: 04:64:5f:a2:3e:e0:77:18:eb:43:b5:a5:d7:20:00:db:98:73: fb:86:ec:e1:e3:cf:c7:1c:9e:d7:23:02:7f:08:1c:fe:37:76: c6:70:bf:f4:41:48:f5:11:21:c3:57:eb:90:6d:9e:2e:f3:33: b9:e0:2e:69:d1:11:8b:8b:24:4c:e0:f4:89:76:7e:b6:54:ad: 63:55:48:5d:9e:5c:81:21:91:56:fc:33:49:30:a9:2d:c6:bc: 5a:5e:60:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjUwNTMxMTQzNDU5WhcNMjUwNjA3MTQzNDU5WjAYMRYwFAYD VQQDEw02ODNiMTM5My00YjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+qgtM3GBuMrBInFIDZuzfs6EBRpb2BUwgmrJuCu5rica0lNiFwqRPNs7WQ3r dqOJQvwtZt9jf08y6wo/GPt+/TMkdEZ7QAM+s2tj239OAP/HJRtXbeGzjtTPtGFZ W3emQRBOAA8l0hb23wOLJFgAQpeWchmx5OhiDREQ6vv+74ubfAmy+ZVm5YcFSza3 qcXVAaZteWK1sTKoHsplixDp++ue3rXx5LTb3u4YEzZJHsZyt2UNyvsox1jU1kDX 2hqSpeJrUAmUGCn4CuAUy82Bt+D1Zeb78is7aD+rcORObUCsZ2x5vQGL0fTuiX/T dWPf6OHjUHU9HWug92fDU8ZGBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdkrXy7 pUuyUaxWQfZlLihrH8g9MB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNj3S1qEzf7/vbTDQcXjY57xDQEzpdCCHbCKjMqDcEtwF32478yb8q p3j2p23uudRjywwXieRmFxC1rGB3Z7Mx5gokct3NaD4VY6TXaKXbuf18HdJosga5 fCyaj3STz5Iju7WNQFBg/g16kmMsmwNMSmrZhUgx5F9mlhBaX4/zAzdZ/Q1/b/FY zgsxZTafkefuY5LiDz436/tF1WQxb+6W1jcEZF+iPuB3GOtDtaXXIADbmHP7huzh 48/HHJ7XIwJ/CBz+N3bGcL/0QUj1ESHDV+uQbZ4u8zO54C5p0RGLiyRM4PSJdn62 VK1jVUhdnlyBIZFW/DNJMKktxrxaXmCH -----END CERTIFICATE-----Generated at Sat May 31 16:33:08 2025 by rpki-client