$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: GU6JTZqkC9/4u56KiUcsBeH6KoE91YilIBtcOG7z4wU= Subject key identifier: 24:CC:81:A7:F0:0A:7B:7B:AF:40:EE:BB:57:D5:4A:D6:17:91:CA:8E Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: A5 Signing time: Sat 31 May 2025 05:43:41 +0000 Manifest this update: Sat 31 May 2025 05:43:41 +0000 Manifest next update: Sat 07 Jun 2025 05:43:41 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: 1Gr7ytZGjUT29sTydaYdUleIpTFjbGNHyzei3SQn1RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: May 31 05:43:41 2025 GMT Not After : Jun 7 05:43:41 2025 GMT Subject: CN=683a970d-ecd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:07:b6:75:bc:e0:42:63:46:89:30:08:b3: e5:63:99:00:71:21:c3:8f:f3:f9:13:7d:a3:5b:b9: 2a:c5:e1:2d:ad:5e:30:a7:7b:3e:03:9d:61:d8:4f: 31:df:f7:f9:2d:84:e5:ce:29:00:a3:a1:1c:f9:32: 10:f6:89:58:b3:81:d9:8b:d4:e2:29:9d:43:3f:24: 1f:16:1f:43:ce:3a:6d:9c:ae:6f:d8:17:e6:7e:9a: 46:be:52:0c:5c:b7:1a:9a:d1:96:7b:c4:d9:c1:c3: 81:a4:e7:f1:ff:08:ac:1d:f6:00:ad:15:72:6c:72: 58:e3:13:45:5e:c1:73:b3:47:b4:e8:81:36:8f:d8: f3:eb:a8:b5:d3:2d:1a:0d:52:6a:af:a0:5c:b4:af: d9:db:af:3c:3b:da:3d:fd:89:a0:a1:1c:90:4a:c1: 5d:80:cf:82:fd:af:b4:1c:f5:60:68:53:17:5a:d0: 6e:4e:09:dc:27:ce:ef:6a:b1:d3:2d:ba:a9:d6:b0: 1e:01:96:c7:ae:9b:0a:8f:77:d1:b8:62:a7:65:2d: 8a:8c:32:08:87:6f:6d:db:fb:25:62:fc:89:33:83: 43:eb:c7:85:4d:79:32:a3:4f:07:e0:fb:36:9c:fb: ca:a6:68:72:19:ce:8e:ad:ca:41:42:2d:82:00:3b: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CC:81:A7:F0:0A:7B:7B:AF:40:EE:BB:57:D5:4A:D6:17:91:CA:8E X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8f:a0:ed:8f:18:fb:db:05:cc:51:bd:dd:e2:ea:47:9c:c9: 51:51:1c:8c:f0:6f:df:04:ac:a4:e0:40:b3:b6:ec:b9:49:fe: ab:f5:8f:87:eb:6a:45:02:8b:77:27:5f:ba:42:59:27:c2:b9: 93:5f:64:69:17:95:ef:d0:91:f7:41:e6:75:ad:cc:72:cc:ff: 80:8a:b2:d8:50:df:d9:7c:55:4f:4e:ea:35:a9:7e:8b:e1:11: 36:a2:7c:a7:fe:4d:8e:af:f3:f5:8c:e8:af:fb:83:13:27:e8: 6d:9e:68:03:d5:db:8c:9f:86:7e:d5:b7:24:6b:ed:c0:29:57: 4f:b3:88:3e:10:9d:a2:46:60:2d:c3:63:4f:0a:e6:cf:87:12: b2:4e:a7:5f:48:7e:03:51:13:9d:c6:83:00:05:79:af:f5:16: 92:db:c3:e0:a6:4e:b7:50:3b:4f:61:f4:be:bc:68:4e:e7:de: 40:9c:74:00:d6:b3:79:3b:f9:8a:22:7f:3f:37:14:3d:1b:25: 30:d6:2a:54:c1:e3:a1:ba:e6:b8:96:87:9d:ff:d8:f3:2d:cb: 8a:e0:1b:ce:c1:d3:9f:4e:cf:87:8b:1a:10:33:1b:dd:ea:08: c8:77:ea:b3:e4:a3:9c:1b:ce:84:d1:28:29:46:4a:38:27:e0: cd:98:a9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUwNTMxMDU0MzQxWhcNMjUwNjA3MDU0MzQxWjAYMRYwFAYD VQQDEw02ODNhOTcwZC1lY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vIHtnW84EJjRokwCLPlY5kAcSHDj/P5E32jW7kqxeEtrV4wp3s+A51h2E8x 3/f5LYTlzikAo6Ec+TIQ9olYs4HZi9TiKZ1DPyQfFh9DzjptnK5v2BfmfppGvlIM XLcamtGWe8TZwcOBpOfx/wisHfYArRVybHJY4xNFXsFzs0e06IE2j9jz66i10y0a DVJqr6BctK/Z2688O9o9/YmgoRyQSsFdgM+C/a+0HPVgaFMXWtBuTgncJ87varHT Lbqp1rAeAZbHrpsKj3fRuGKnZS2KjDIIh29t2/slYvyJM4ND68eFTXkyo08H4Ps2 nPvKpmhyGc6OrcpBQi2CADu7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTMgafw Cnt7r0Duu1fVStYXkcqOMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4j6Dtjxj72wXMUb3d4upHnMlRURyM8G/fBKyk4ECztuy5Sf6r9Y+H 62pFAot3J1+6QlknwrmTX2RpF5Xv0JH3QeZ1rcxyzP+AirLYUN/ZfFVPTuo1qX6L 4RE2onyn/k2Or/P1jOiv+4MTJ+htnmgD1duMn4Z+1bcka+3AKVdPs4g+EJ2iRmAt w2NPCubPhxKyTqdfSH4DUROdxoMABXmv9RaS28Pgpk63UDtPYfS+vGhO595AnHQA 1rN5O/mKIn8/NxQ9GyUw1ipUweOhuua4loed/9jzLcuK4BvOwdOfTs+HixoQMxvd 6gjId+qz5KOcG86E0SgpRko4J+DNmKm0 -----END CERTIFICATE-----Generated at Sat May 31 17:00:22 2025 by rpki-client