$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: ssjcYFEnBbwDwI/OD8JI/bo7hMTtR4cH6izOVGlg854= Subject key identifier: 18:8C:71:5F:35:BD:31:CE:A6:22:30:92:11:88:E7:12:D3:DA:D7:2A Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 3083 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 3082 Signing time: Fri 20 Jun 2025 15:28:22 +0000 Manifest this update: Fri 20 Jun 2025 15:28:22 +0000 Manifest next update: Fri 27 Jun 2025 15:28:22 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: SzX8677/yv68+Naj6POOLYvy5Qcq6Oydfy6z1bwwbnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12419 (0x3083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Jun 20 15:28:22 2025 GMT Not After : Jun 27 15:28:22 2025 GMT Subject: CN=68557e16-00ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:9a:2f:18:75:f6:1f:ee:d2:5a:0a:c5:0a: 5e:5b:48:73:00:55:32:f7:38:6d:b7:e2:54:59:89: 27:02:e3:73:10:25:95:14:6d:a6:2f:e4:b8:4c:da: 49:75:17:c9:8a:9b:82:42:52:ac:3c:7b:48:fe:ac: 1e:49:5b:fd:c3:99:e7:d8:40:e0:2d:d5:21:88:ad: 0f:90:8f:cc:78:65:70:a7:58:36:6a:10:6b:95:8d: 72:6d:eb:e9:f7:ff:05:c1:da:48:59:2b:ba:50:51: b6:d4:ef:52:9f:5e:ed:55:a0:de:d6:96:04:70:3f: 8d:74:ea:8e:98:9b:3b:98:09:15:b8:27:9a:aa:a3: 38:68:98:0d:e3:03:92:59:cb:2e:e9:4a:43:d4:d2: 45:d9:ec:26:07:9f:66:17:8d:9e:ab:68:75:98:39: 6d:d1:ee:41:76:bc:b7:12:70:89:2f:f4:66:1b:36: a4:03:96:c2:d2:8d:7c:ee:52:8b:74:25:98:6d:1c: 25:eb:4f:3a:18:ab:b0:1e:5a:c4:ea:b8:85:31:75: 7a:06:4e:af:50:d3:01:bc:94:24:da:5d:9b:85:1b: 86:50:b2:9e:04:34:e4:77:2d:0e:fa:83:c2:2b:32: ca:29:4a:22:8d:44:b4:b7:36:9b:d2:c8:60:9f:5d: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8C:71:5F:35:BD:31:CE:A6:22:30:92:11:88:E7:12:D3:DA:D7:2A X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ff:4b:58:1a:3b:0e:00:0b:ee:2f:16:ae:26:4e:28:b0:51: 24:bc:55:40:77:06:5e:20:ea:28:aa:9b:d7:8b:ce:30:10:ba: c2:b8:d6:08:a6:61:e5:95:38:7a:a3:7c:ca:c6:c3:00:01:84: 60:28:90:1e:27:01:af:66:ca:38:fa:47:02:ef:65:3e:a3:1d: 64:9b:13:98:75:f8:4f:67:73:7a:52:9a:a9:3e:3b:ba:3f:51: 48:71:01:56:80:6f:c8:8b:1b:ea:af:b2:6d:89:2a:e9:4d:aa: 0d:15:40:8d:7b:3b:8e:32:57:98:6b:fc:90:01:60:ce:0e:c7: 67:44:65:a9:7d:64:dc:ea:97:d1:26:f3:f0:c5:fa:7d:bb:36: 1c:e6:06:10:3f:e9:db:3a:ea:80:03:75:b7:4a:8e:e2:84:20: 02:12:5d:70:e0:89:73:3b:24:aa:7b:1e:04:73:1b:13:45:4d: ed:4e:0d:dc:a2:17:66:6d:69:88:64:a5:89:bd:85:66:74:67: 4f:fa:fd:d3:76:7b:7a:7e:bd:57:e4:eb:24:d1:5e:cc:30:41: 1b:d7:df:af:0f:73:f0:86:59:44:e3:30:e7:6a:37:99:7f:21: 0a:bf:00:21:f5:90:28:b9:bc:0d:a4:dc:8d:8f:bd:33:bd:95: 81:ba:72:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUwNjIwMTUyODIyWhcNMjUwNjI3MTUyODIyWjAYMRYwFAYD VQQDEw02ODU1N2UxNi0wMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx06aLxh19h/u0loKxQpeW0hzAFUy9zhtt+JUWYknAuNzECWVFG2mL+S4TNpJ dRfJipuCQlKsPHtI/qweSVv9w5nn2EDgLdUhiK0PkI/MeGVwp1g2ahBrlY1ybevp 9/8FwdpIWSu6UFG21O9Sn17tVaDe1pYEcD+NdOqOmJs7mAkVuCeaqqM4aJgN4wOS Wcsu6UpD1NJF2ewmB59mF42eq2h1mDlt0e5Bdry3EnCJL/RmGzakA5bC0o187lKL dCWYbRwl6086GKuwHlrE6riFMXV6Bk6vUNMBvJQk2l2bhRuGULKeBDTkdy0O+oPC KzLKKUoijUS0tzab0shgn10ZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiMcV81 vTHOpiIwkhGI5xLT2tcqMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5/0tYGjsOAAvuLxauJk4osFEkvFVAdwZeIOooqpvXi84wELrCuNYI pmHllTh6o3zKxsMAAYRgKJAeJwGvZso4+kcC72U+ox1kmxOYdfhPZ3N6UpqpPju6 P1FIcQFWgG/Iixvqr7JtiSrpTaoNFUCNezuOMleYa/yQAWDODsdnRGWpfWTc6pfR JvPwxfp9uzYc5gYQP+nbOuqAA3W3So7ihCACEl1w4IlzOySqex4EcxsTRU3tTg3c ohdmbWmIZKWJvYVmdGdP+v3Tdnt6fr1X5Osk0V7MMEEb19+vD3PwhllE4zDnajeZ fyEKvwAh9ZAoubwNpNyNj70zvZWBunI6 -----END CERTIFICATE-----Generated at Fri Jun 20 23:08:35 2025 by rpki-client