$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: CRn1hJBhDgZcFiiy+uE+ufRCQIgcERjsaQPgne78JcA= Subject key identifier: 27:90:72:DB:D9:89:09:64:11:70:F4:9B:CC:83:51:73:CA:61:D4:07 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0B59 Signing time: Sat 14 Jun 2025 18:56:57 +0000 Manifest this update: Sat 14 Jun 2025 18:56:56 +0000 Manifest next update: Sat 21 Jun 2025 18:56:56 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: h3sU12lTpp6sHHNdh9FMHzv6vtmmSbIcI2i1mZ9gMc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Jun 14 18:56:56 2025 GMT Not After : Jun 21 18:56:56 2025 GMT Subject: CN=684dc5f9-33be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:6a:2f:36:a0:5f:67:88:5b:6b:63:ec:68: 87:29:f0:83:d7:9c:09:1c:98:5d:7e:d0:db:15:36: 61:22:cd:6b:9d:b4:69:73:d2:88:dd:b8:e4:75:ee: 70:ed:cb:1b:be:f1:c3:f9:df:df:fc:6b:ff:2b:ee: 1f:0b:4a:a5:82:88:1e:f3:84:d7:ee:c5:3d:f1:ef: 1c:db:b3:fc:b0:2f:61:3a:db:c2:10:e7:20:ba:86: 34:39:30:62:4b:95:7d:0c:8f:67:95:14:e9:95:a1: 51:70:58:e9:57:7f:6c:2e:05:8f:8c:eb:13:c2:a3: 47:04:f0:17:11:42:85:9e:c4:02:08:a1:31:0b:de: 59:28:41:db:ad:cb:ae:5e:e2:44:a6:55:e5:32:f7: 54:cc:ae:4f:df:5e:12:91:ef:d5:c6:82:e2:0f:71: 73:91:db:97:14:ac:80:73:66:cc:1f:55:d1:8d:47: 46:4f:03:50:f1:a4:54:9b:1b:55:4b:aa:a9:42:49: fc:eb:78:52:fc:ff:44:63:ce:7f:9c:e3:a1:e3:bb: 7e:43:91:24:28:56:85:3c:7b:1b:5e:97:d7:db:c4: 76:45:20:da:df:bb:75:d8:16:b1:68:5a:bc:b9:58: 63:26:e7:93:88:77:e2:a8:ec:46:4f:5e:ca:a6:3b: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:90:72:DB:D9:89:09:64:11:70:F4:9B:CC:83:51:73:CA:61:D4:07 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f7:fc:58:04:f9:68:9e:6e:8f:ae:3d:bc:c6:7f:34:34:2c: ba:75:4a:8c:b4:7e:bf:75:e1:23:b0:8a:a9:a4:55:c5:09:d1: 7b:b3:2e:4c:c2:3b:5e:73:9f:b0:00:65:c1:a9:1a:22:2e:59: 9d:10:13:10:3e:8d:8a:25:68:34:76:fb:f4:3d:bf:79:aa:cc: dd:ab:2d:ca:f6:9c:54:9b:d4:f3:d5:da:02:9e:ba:88:66:15: b5:58:4e:68:a5:b6:75:df:85:7c:96:9d:60:00:ed:a8:0a:5a: 1f:99:9c:79:d1:e2:7d:3c:fb:de:09:c4:1d:fd:84:40:39:32: 1a:b3:8d:d9:23:76:8e:d1:a7:fe:47:8b:bc:b0:a6:5f:99:30: 67:d4:86:71:df:ef:f9:11:de:a8:df:b1:5b:01:fc:fe:4a:d7: 33:8c:9a:ed:5f:a8:da:11:74:64:1f:87:7a:b3:30:2c:78:18: f6:66:c9:22:6e:35:0e:0e:6b:11:4e:e9:07:fc:78:1f:b2:63: a9:45:65:2c:9e:85:98:bc:c1:6e:02:b0:65:38:59:fb:8e:17: 07:63:b6:2e:59:87:fa:b0:09:d0:26:33:23:cc:3b:78:61:24: 29:8a:3e:24:ce:c7:2c:01:db:e3:99:30:1a:14:50:c3:85:ee: a8:75:76:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUwNjE0MTg1NjU2WhcNMjUwNjIxMTg1NjU2WjAYMRYwFAYD VQQDEw02ODRkYzVmOS0zM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tRqLzagX2eIW2tj7GiHKfCD15wJHJhdftDbFTZhIs1rnbRpc9KI3bjkde5w 7csbvvHD+d/f/Gv/K+4fC0qlgoge84TX7sU98e8c27P8sC9hOtvCEOcguoY0OTBi S5V9DI9nlRTplaFRcFjpV39sLgWPjOsTwqNHBPAXEUKFnsQCCKExC95ZKEHbrcuu XuJEplXlMvdUzK5P314Ske/VxoLiD3FzkduXFKyAc2bMH1XRjUdGTwNQ8aRUmxtV S6qpQkn863hS/P9EY85/nOOh47t+Q5EkKFaFPHsbXpfX28R2RSDa37t12BaxaFq8 uVhjJueTiHfiqOxGT17KpjuDbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeQctvZ iQlkEXD0m8yDUXPKYdQHMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl9/xYBPlonm6Prj28xn80NCy6dUqMtH6/deEjsIqppFXFCdF7sy5M wjtec5+wAGXBqRoiLlmdEBMQPo2KJWg0dvv0Pb95qszdqy3K9pxUm9Tz1doCnrqI ZhW1WE5opbZ134V8lp1gAO2oClofmZx50eJ9PPveCcQd/YRAOTIas43ZI3aO0af+ R4u8sKZfmTBn1IZx3+/5Ed6o37FbAfz+StczjJrtX6jaEXRkH4d6szAseBj2Zski bjUODmsRTukH/HgfsmOpRWUsnoWYvMFuArBlOFn7jhcHY7YuWYf6sAnQJjMjzDt4 YSQpij4kzscsAdvjmTAaFFDDhe6odXbo -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:46 2025 by rpki-client