$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: SqvCeTsI75Tx/ksRGGznvvouQDLyOl5J+qC2Jo62YFY= Subject key identifier: B0:5E:41:FD:E5:69:24:EB:BE:13:78:CD:9B:AD:E7:AE:33:FC:D6:43 Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: 94 Signing time: Fri 25 Apr 2025 05:21:56 +0000 Manifest this update: Fri 25 Apr 2025 05:21:55 +0000 Manifest next update: Fri 02 May 2025 05:21:55 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: WppaMqlQRPFn6puHxwYVDZcTfdWP3tO+Fgl+Hd7Xmps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: Apr 25 05:21:55 2025 GMT Not After : May 2 05:21:55 2025 GMT Subject: CN=680b1bf3-1fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:6c:7b:d2:25:b4:07:41:0f:b7:ce:4b:5e: a3:f9:18:56:44:ef:38:91:98:76:13:88:00:02:41: fa:c7:cb:eb:fa:aa:93:5f:15:1f:a2:53:02:a9:70: 7d:95:b5:ad:08:b4:4a:bf:95:55:b4:2a:7d:df:1f: 7b:32:4b:24:dc:e4:0c:77:c0:0d:ce:84:c8:d5:5d: 3b:2a:d3:1c:8b:1f:1a:90:24:5e:d8:91:e3:eb:54: 1a:27:69:8a:b6:46:e8:ae:f8:ee:bf:b4:35:a5:43: 88:c9:34:59:75:3a:a1:c8:0c:e8:03:bf:36:30:09: 30:0e:d6:a5:63:e6:28:1f:31:65:2e:f0:ed:e2:f0: 4b:7b:93:b5:2c:75:84:36:cf:48:76:3c:b6:fb:4d: 2f:e1:0a:e0:f7:cb:39:da:12:d6:d9:59:5a:63:d4: d4:b9:0b:eb:c0:44:fa:8d:e1:34:7d:e6:8e:45:95: 52:14:02:71:da:ff:52:c0:08:fc:d3:e4:03:58:45: 1b:56:cb:4a:d2:e6:c9:bb:80:97:28:8d:38:85:55: 6a:37:9a:ae:0f:1c:16:cd:c0:2a:14:bd:e6:a5:59: de:ff:d3:96:b4:b9:07:61:1b:8c:d5:db:a0:93:45: f6:d9:30:7b:62:80:cd:2d:50:67:bc:38:33:c5:db: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5E:41:FD:E5:69:24:EB:BE:13:78:CD:9B:AD:E7:AE:33:FC:D6:43 X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:90:88:c7:fc:e2:fe:20:14:3e:f6:61:c2:09:2a:70:a3:23: c9:42:08:cd:8c:78:a5:9f:c3:1f:0b:d1:9d:e5:9f:bf:4a:cc: 53:d5:5a:0d:6a:74:e5:ef:14:d4:b3:3e:85:21:04:56:07:d5: ac:98:25:0e:6f:f0:94:db:0d:bf:02:78:54:04:72:ec:a4:e1: f7:b5:a7:33:6c:62:b5:56:e5:4b:d3:34:5c:4a:6a:6c:17:f7: 72:7d:b6:a2:4d:88:ec:d9:ad:c9:21:7e:ce:64:4d:c6:cb:09: c8:9f:2c:40:9a:c2:91:5a:08:81:d9:48:c9:7b:7f:48:f4:e7: 07:8f:ea:1a:cf:b8:52:be:e2:e7:57:88:df:58:0e:f6:1a:22: b8:bc:78:9a:75:25:be:c4:19:3a:35:15:09:e8:8d:2a:e7:59: 22:8f:56:50:83:bb:10:a2:f2:2e:10:94:52:47:95:a7:5b:38: f7:b2:eb:18:a6:71:ce:75:8a:6e:2a:81:06:0f:76:97:7d:dd: ca:83:33:8e:3d:cf:f8:e3:f5:50:5c:c8:30:a3:57:77:9a:ce: 7b:03:6a:ca:aa:df:33:30:8d:76:a6:c9:d8:03:dd:9e:18:f7: fa:45:43:b6:b3:14:24:c5:32:64:3b:55:6a:4f:67:db:4b:41: 29:64:f3:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUwNDI1MDUyMTU1WhcNMjUwNTAyMDUyMTU1WjAYMRYwFAYD VQQDEw02ODBiMWJmMy0xZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEFse9IltAdBD7fOS16j+RhWRO84kZh2E4gAAkH6x8vr+qqTXxUfolMCqXB9 lbWtCLRKv5VVtCp93x97Mksk3OQMd8ANzoTI1V07KtMcix8akCRe2JHj61QaJ2mK tkborvjuv7Q1pUOIyTRZdTqhyAzoA782MAkwDtalY+YoHzFlLvDt4vBLe5O1LHWE Ns9Idjy2+00v4Qrg98s52hLW2VlaY9TUuQvrwET6jeE0feaORZVSFAJx2v9SwAj8 0+QDWEUbVstK0ubJu4CXKI04hVVqN5quDxwWzcAqFL3mpVne/9OWtLkHYRuM1dug k0X22TB7YoDNLVBnvDgzxdvqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBeQf3l aSTrvhN4zZut564z/NZDMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAekIjH/OL+IBQ+9mHCCSpwoyPJQgjNjHiln8MfC9Gd5Z+/SsxT1VoN anTl7xTUsz6FIQRWB9WsmCUOb/CU2w2/AnhUBHLspOH3taczbGK1VuVL0zRcSmps F/dyfbaiTYjs2a3JIX7OZE3GywnInyxAmsKRWgiB2UjJe39I9OcHj+oaz7hSvuLn V4jfWA72GiK4vHiadSW+xBk6NRUJ6I0q51kij1ZQg7sQovIuEJRSR5WnWzj3susY pnHOdYpuKoEGD3aXfd3KgzOOPc/44/VQXMgwo1d3ms57A2rKqt8zMI12psnYA92e GPf6RUO2sxQkxTJkO1VqT2fbS0EpZPNl -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:24 2025 by rpki-client