$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: AX9aQPW6WZ1YZ6haqaoVvIV4Egh5OjvsV/wE5o1T4cI= Subject key identifier: A7:F8:BE:76:08:12:FA:9C:EA:2A:0C:62:CD:0D:6C:CD:D5:8D:AA:D4 Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0973 Signing time: Sat 14 Jun 2025 20:27:08 +0000 Manifest this update: Sat 14 Jun 2025 20:27:08 +0000 Manifest next update: Sat 21 Jun 2025 20:27:08 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: S9W2p1MbgwGYrocVz1C5BYrfDk7shFqtnhbeLqornBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Jun 14 20:27:08 2025 GMT Not After : Jun 21 20:27:08 2025 GMT Subject: CN=684ddb1c-8c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:74:22:bf:09:a7:44:b1:c1:fe:1a:1c:5f: f4:e3:b7:67:55:16:73:30:94:77:48:8d:83:49:6f: 56:26:12:6d:b6:25:3e:e1:4e:79:ce:6c:93:06:8a: 27:ee:44:df:f0:f4:39:25:de:e2:ae:2a:cb:ab:2b: c6:2a:7e:f2:dd:b6:cb:f4:36:48:3b:50:a0:3c:b1: 4d:fe:a5:aa:48:a9:ee:ea:72:be:00:ad:d9:17:34: cf:4c:08:ac:3b:f6:b2:71:cc:1d:40:4a:13:50:28: 55:42:ca:f1:81:b9:2a:71:ce:44:84:10:ab:63:5b: 8b:a1:c1:c7:e1:45:84:75:29:55:67:a8:b6:95:96: 5c:6d:cc:ec:59:64:a9:6a:c8:d6:00:b4:47:dc:c2: a3:90:95:8c:ae:32:f0:72:4e:ab:69:5b:9c:f2:92: 8f:b4:bd:e6:67:8f:4d:65:6f:db:a9:99:81:c6:1c: 7f:e5:81:e3:2d:71:10:29:0b:fd:c9:b6:b8:3d:e9: 22:97:2d:63:ea:ef:b3:0b:c5:a0:52:9d:4e:24:42: 43:6b:e6:58:25:e1:6b:33:8d:16:76:fe:c3:3d:d2: cf:51:a9:82:23:a2:78:51:58:01:04:f7:18:ce:5f: c7:ab:21:9c:40:e7:78:99:59:cb:af:d7:51:68:7d: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F8:BE:76:08:12:FA:9C:EA:2A:0C:62:CD:0D:6C:CD:D5:8D:AA:D4 X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:63:35:6a:38:60:de:52:77:6d:52:f2:0e:93:bb:a8:c3:e0: 97:c4:b3:83:06:74:2d:04:3b:64:26:ff:8e:a0:56:5a:55:b3: bb:85:c6:19:15:e4:6c:7e:80:85:65:ea:5b:88:a7:1c:6b:a8: be:f8:0f:5f:59:aa:a7:27:4f:8e:8e:e3:03:4d:87:c9:f3:84: b7:95:fb:6e:e4:fb:40:ec:c7:bf:c0:db:79:76:90:27:9a:25: 34:75:c7:4c:34:75:b4:17:54:fa:ce:b6:45:29:85:d4:9b:d3: 60:61:e5:a5:2a:5e:45:4f:d5:03:2b:cd:a9:07:6f:21:96:e3: 5f:c3:51:bc:90:a9:38:ed:84:96:0a:cb:56:59:d2:00:78:8a: 12:47:e1:0c:da:ba:94:d7:3f:a2:18:7f:b4:98:54:87:23:2d: 30:8d:3c:5c:39:e3:8e:57:33:f9:28:4d:2d:82:55:99:9e:ba: aa:fb:52:16:4c:6b:b0:bb:99:ed:1f:af:06:9f:3b:a0:dc:88: 05:ce:3b:21:14:62:5e:5e:03:18:2d:82:90:e0:51:6d:ba:d8: 4f:8b:29:75:f0:cc:94:87:16:63:f9:7d:4a:16:a2:2c:7b:fd: f0:08:a9:08:d5:06:9e:aa:ee:97:4c:e4:67:17:21:9a:be:c3: 8e:ca:16:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwNjE0MjAyNzA4WhcNMjUwNjIxMjAyNzA4WjAYMRYwFAYD VQQDEw02ODRkZGIxYy04YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoT10Ir8Jp0Sxwf4aHF/047dnVRZzMJR3SI2DSW9WJhJttiU+4U55zmyTBoon 7kTf8PQ5Jd7irirLqyvGKn7y3bbL9DZIO1CgPLFN/qWqSKnu6nK+AK3ZFzTPTAis O/ayccwdQEoTUChVQsrxgbkqcc5EhBCrY1uLocHH4UWEdSlVZ6i2lZZcbczsWWSp asjWALRH3MKjkJWMrjLwck6raVuc8pKPtL3mZ49NZW/bqZmBxhx/5YHjLXEQKQv9 yba4Pekily1j6u+zC8WgUp1OJEJDa+ZYJeFrM40Wdv7DPdLPUamCI6J4UVgBBPcY zl/HqyGcQOd4mVnLr9dRaH2EjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf4vnYI Evqc6ioMYs0NbM3VjarUMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7YzVqOGDeUndtUvIOk7uow+CXxLODBnQtBDtkJv+OoFZaVbO7hcYZ FeRsfoCFZepbiKcca6i++A9fWaqnJ0+OjuMDTYfJ84S3lftu5PtA7Me/wNt5dpAn miU0dcdMNHW0F1T6zrZFKYXUm9NgYeWlKl5FT9UDK82pB28hluNfw1G8kKk47YSW CstWWdIAeIoSR+EM2rqU1z+iGH+0mFSHIy0wjTxcOeOOVzP5KE0tglWZnrqq+1IW TGuwu5ntH68Gnzug3IgFzjshFGJeXgMYLYKQ4FFtuthPiyl18MyUhxZj+X1KFqIs e/3wCKkI1Qaequ6XTORnFyGavsOOyhaG -----END CERTIFICATE-----Generated at Sun Jun 15 08:05:23 2025 by rpki-client