$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft File: 7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json) Hash identifier: vkCXPIrmBbPE0oRVl0BUu5ilgeoeSB++pL6cNZvcA/I= Subject key identifier: 62:C6:25:FE:BD:21:4E:73:9C:73:15:DB:86:33:5D:36:CE:6C:57:65 Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55 Certificate issuer: /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft Manifest number: 3488 Signing time: Wed 18 Jun 2025 15:06:14 +0000 Manifest this update: Wed 18 Jun 2025 15:06:13 +0000 Manifest next update: Wed 25 Jun 2025 15:06:13 +0000 Files and hashes: 1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: Dul7t9iDAuAOH+0k0c0g1nA71SUraohENclBrV0V/Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255 Validity Not Before: Jun 18 15:06:13 2025 GMT Not After : Jun 25 15:06:13 2025 GMT Subject: CN=6852d5e5-3adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:a8:c8:bb:db:bc:93:99:c3:2f:13:b0:7b: 6e:f6:cd:6a:e9:11:c0:a3:cf:8b:e9:55:07:ff:9f: 91:80:5b:0a:cb:62:47:37:34:81:b9:50:24:90:f3: d8:e0:ed:a9:d6:5f:b5:7e:1d:e1:1a:e7:11:f8:7f: 06:5d:35:45:48:f4:4f:74:dd:b0:3b:48:94:8c:70: 67:82:09:75:37:82:ed:00:56:42:f2:71:63:ae:13: c5:7f:cd:f4:c4:04:4c:09:3f:f2:2b:80:d8:a1:ac: c6:e7:bd:65:72:e8:28:28:34:8b:c3:0c:37:4b:d2: 3b:bc:91:ee:08:f5:75:aa:e5:82:a9:4c:71:67:b9: ef:f1:a5:23:33:c3:15:48:cf:ee:4a:0a:e7:0a:dd: 69:4e:2c:ca:d3:d6:01:2d:8d:de:0e:49:88:22:fa: e3:62:da:05:60:89:43:d2:e3:6a:0c:0f:31:bc:21: 35:cb:22:c0:2b:01:a4:b8:fc:15:13:5f:a1:5f:ef: c4:74:bb:a3:bb:e5:31:0a:b6:7d:6e:be:15:d4:9a: e2:99:da:17:26:53:04:b8:0d:bd:37:85:f8:2d:24: 4b:a8:b4:49:b8:aa:92:58:15:0a:a1:21:ae:29:b0: 52:d1:d9:3b:5e:51:db:7e:c5:2e:83:90:7b:7d:5b: f0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C6:25:FE:BD:21:4E:73:9C:73:15:DB:86:33:5D:36:CE:6C:57:65 X509v3 Authority Key Identifier: keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:24:3c:9e:e1:4c:7e:8b:a5:b6:5c:13:47:aa:0a:d2:7e:b1: b8:45:5a:d4:0f:e2:52:19:6a:d9:0c:39:13:39:24:a6:38:05: e4:0d:ba:ca:dc:63:58:e1:a3:87:26:2f:82:b3:e5:94:b0:71: 2e:6f:ea:0c:e1:be:67:d2:08:b5:5f:c7:08:b9:47:f3:c8:76: 2b:c0:aa:e6:c2:ff:d4:d0:d5:05:76:3b:82:a9:3d:47:ef:df: 5c:a4:7e:52:0e:2b:91:26:15:5c:1d:e6:44:09:54:bf:35:78: c7:d7:fb:7f:b6:e1:d4:f4:5f:31:a1:b1:6b:9c:1c:cd:30:00: ed:c3:db:f6:c5:f6:ff:89:97:fd:25:32:a8:f9:ac:6e:3a:90: f5:97:22:e3:71:6e:b0:97:8d:d2:34:e3:c4:24:91:ba:bd:6f: 73:bb:76:b7:e5:2d:28:0e:a0:72:d8:ea:1d:87:9a:e9:84:e3: 2d:18:da:dd:ed:e4:7c:c6:f9:16:0a:b7:26:6b:31:e4:f1:c9: 32:af:1d:ae:e2:2d:4e:e6:9a:df:8a:29:d4:02:7a:0e:6c:9a: 76:9a:2b:e7:fc:fc:4e:9a:38:d9:b1:2b:16:fd:a4:05:7f:ae: b5:a4:96:4a:76:3f:27:26:38:9e:e4:a5:54:79:88:00:5a:96: 3a:57:5f:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGQjkxMTAvBgNVBAUTKEVDQjVCQjUzMEE3MkE0MDk1Njg5RUNCQjE1OEYyQUU1 RUZFOTEyNTUwHhcNMjUwNjE4MTUwNjEzWhcNMjUwNjI1MTUwNjEzWjAYMRYwFAYD VQQDEw02ODUyZDVlNS0zYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2b6oyLvbvJOZwy8TsHtu9s1q6RHAo8+L6VUH/5+RgFsKy2JHNzSBuVAkkPPY 4O2p1l+1fh3hGucR+H8GXTVFSPRPdN2wO0iUjHBnggl1N4LtAFZC8nFjrhPFf830 xARMCT/yK4DYoazG571lcugoKDSLwww3S9I7vJHuCPV1quWCqUxxZ7nv8aUjM8MV SM/uSgrnCt1pTizK09YBLY3eDkmIIvrjYtoFYIlD0uNqDA8xvCE1yyLAKwGkuPwV E1+hX+/EdLuju+UxCrZ9br4V1JrimdoXJlMEuA29N4X4LSRLqLRJuKqSWBUKoSGu KbBS0dk7XlHbfsUug5B7fVvwQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLGJf69 IU5znHMV24YzXTbObFdlMB8GA1UdIwQYMBaAFOy1u1MKcqQJVonsuxWPKuXv6RJV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUZCOS8yMTE0RDU2ODFE QTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBBbFdpZXk3Rlk4cTVlX3BF bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMVzdVd3B5cEFsV2lleTdGWThxNWVfcEVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUZCOS8yMTE0RDU2ODFEQTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBB bFdpZXk3Rlk4cTVlX3BFbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHJDye4Ux+i6W2XBNHqgrSfrG4RVrUD+JSGWrZDDkTOSSmOAXkDbrK 3GNY4aOHJi+Cs+WUsHEub+oM4b5n0gi1X8cIuUfzyHYrwKrmwv/U0NUFdjuCqT1H 799cpH5SDiuRJhVcHeZECVS/NXjH1/t/tuHU9F8xobFrnBzNMADtw9v2xfb/iZf9 JTKo+axuOpD1lyLjcW6wl43SNOPEJJG6vW9zu3a35S0oDqBy2Oodh5rphOMtGNrd 7eR8xvkWCrcmazHk8ckyrx2u4i1O5prfiinUAnoObJp2mivn/PxOmjjZsSsW/aQF f661pJZKdj8nJjie5KVUeYgAWpY6V18M -----END CERTIFICATE-----Generated at Thu Jun 19 02:08:18 2025 by rpki-client