$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: CTkJHHoQeTqkJqTk1Ee2sYgwaArstqDKjSGAdX9hTKk= Subject key identifier: 30:4F:E1:E6:81:BD:9B:B6:71:BE:72:60:9F:E7:EC:53:72:93:CA:01 Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 3066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 3065 Signing time: Thu 24 Apr 2025 15:27:20 +0000 Manifest this update: Thu 24 Apr 2025 15:27:20 +0000 Manifest next update: Thu 01 May 2025 15:27:20 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: utC0mZ+7g4PZKE1xW1cl9iMjB81fMCLG/rFWvrLOcag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12390 (0x3066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Apr 24 15:27:20 2025 GMT Not After : May 1 15:27:20 2025 GMT Subject: CN=680a5858-3127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:f7:42:e8:bb:e5:60:6f:06:22:9e:26:eb: 5b:40:d9:d3:a9:bf:5f:6c:18:ad:e7:c7:da:fd:c3: a3:ae:63:8e:ab:1a:b9:7d:ad:9d:c2:0f:ec:89:17: cb:73:da:c7:94:48:e4:ca:e2:ca:de:f6:ce:34:71: a4:d9:df:6a:31:e5:0b:61:a5:fe:e3:e2:21:44:d2: 76:2b:91:bd:c1:4a:9f:96:5d:9c:10:f8:b4:8d:45: ca:12:00:61:2c:42:13:0f:fa:b8:d6:87:af:53:9f: 04:c8:5b:d1:1c:f8:60:34:5f:0a:75:d7:c7:13:a2: a2:17:ae:4b:05:a1:52:d1:5c:fc:d0:8c:48:84:8f: b9:22:16:43:56:7e:18:ac:6c:d8:9a:45:f5:00:66: 09:11:ba:5f:b8:1b:25:30:ae:b2:06:32:f7:a9:f3: d6:be:e2:af:37:dd:fa:ac:67:13:7d:d7:3e:77:4b: b0:93:6a:ae:e7:22:32:ba:61:46:41:e6:0f:3e:db: c5:05:73:be:17:15:66:36:f8:d9:d7:6d:52:3d:21: d5:24:05:31:b7:c3:53:0f:85:fb:8f:e0:a8:9b:41: 44:54:b3:1d:0c:0f:ee:97:49:bc:f9:c5:74:13:e5: 22:4b:cb:60:eb:6a:42:a4:19:d3:3f:7e:9a:ea:ef: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4F:E1:E6:81:BD:9B:B6:71:BE:72:60:9F:E7:EC:53:72:93:CA:01 X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7b:94:8e:63:8c:52:37:50:d4:df:ac:b9:df:23:ac:02:ad: 9d:aa:97:cd:aa:7c:5b:62:e1:73:f5:f2:e3:b2:77:f7:b5:d7: ae:aa:4c:d2:64:80:0d:96:d2:01:c2:7e:32:cd:cf:f4:bc:6f: a2:13:b3:35:7f:7d:e6:88:1c:af:0a:17:af:43:38:b9:98:f2: e3:1e:71:cb:71:c2:2e:c4:4e:c6:1d:96:35:23:d8:29:df:aa: 96:9a:84:e8:14:32:13:8d:f4:e0:12:bf:38:ed:ee:51:01:bc: 03:96:57:ba:4f:75:32:4d:00:c5:ef:db:8f:88:00:29:1f:8b: fd:56:95:7e:90:86:9c:99:93:93:2a:30:66:41:9f:47:07:9b: 2d:f5:a2:c7:f3:b1:5b:31:6a:5a:67:a7:bf:32:a6:55:cd:fe: 91:c4:0a:e7:86:74:d1:55:c8:3a:7d:f0:89:90:1b:b9:50:9c: 9c:43:98:57:2b:93:9a:08:50:d2:8c:55:6e:cd:20:6a:8c:6f: 33:56:46:7d:3a:a4:7a:43:8f:68:09:0f:29:59:76:a3:70:a5: a9:a9:1e:6b:70:7d:e1:20:b6:f0:c8:8a:6e:a2:72:b2:a3:af: 93:a4:7b:91:49:89:0f:eb:a1:38:18:d7:d4:9d:6a:4a:24:e8: 87:b9:2c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUwNDI0MTUyNzIwWhcNMjUwNTAxMTUyNzIwWjAYMRYwFAYD VQQDEw02ODBhNTg1OC0zMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcr3Qui75WBvBiKeJutbQNnTqb9fbBit58fa/cOjrmOOqxq5fa2dwg/siRfL c9rHlEjkyuLK3vbONHGk2d9qMeULYaX+4+IhRNJ2K5G9wUqfll2cEPi0jUXKEgBh LEITD/q41oevU58EyFvRHPhgNF8KddfHE6KiF65LBaFS0Vz80IxIhI+5IhZDVn4Y rGzYmkX1AGYJEbpfuBslMK6yBjL3qfPWvuKvN936rGcTfdc+d0uwk2qu5yIyumFG QeYPPtvFBXO+FxVmNvjZ121SPSHVJAUxt8NTD4X7j+Com0FEVLMdDA/ul0m8+cV0 E+UiS8tg62pCpBnTP36a6u92mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBP4eaB vZu2cb5yYJ/n7FNyk8oBMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWe5SOY4xSN1DU36y53yOsAq2dqpfNqnxbYuFz9fLjsnf3tdeuqkzS ZIANltIBwn4yzc/0vG+iE7M1f33miByvChevQzi5mPLjHnHLccIuxE7GHZY1I9gp 36qWmoToFDITjfTgEr847e5RAbwDlle6T3UyTQDF79uPiAApH4v9VpV+kIacmZOT KjBmQZ9HB5st9aLH87FbMWpaZ6e/MqZVzf6RxArnhnTRVcg6ffCJkBu5UJycQ5hX K5OaCFDSjFVuzSBqjG8zVkZ9OqR6Q49oCQ8pWXajcKWpqR5rcH3hILbwyIpuonKy o6+TpHuRSYkP66E4GNfUnWpKJOiHuSwm -----END CERTIFICATE-----Generated at Sat Apr 26 15:11:19 2025 by rpki-client