$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: 4Q6nWrpM2taWsEql3f13WuB9ajWp9PPZ67iLBBP6hpM= Subject key identifier: 68:CF:D7:D1:86:7D:1F:D3:2B:AB:B8:2D:01:FE:6F:50:AB:9B:29:A4 Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: AD Signing time: Sun 15 Jun 2025 05:10:17 +0000 Manifest this update: Sun 15 Jun 2025 05:10:16 +0000 Manifest next update: Sun 22 Jun 2025 05:10:16 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: 4MLyfaYS00QrlUYjFwMHEAc50jAqCuCnuUizS+D0Yx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: Jun 15 05:10:16 2025 GMT Not After : Jun 22 05:10:16 2025 GMT Subject: CN=684e55b8-a330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:8d:61:8b:b3:e2:d2:43:54:74:f4:4e:79: 04:a2:a8:43:e9:22:a3:c3:0f:e2:2d:9e:e3:cd:74: 11:27:eb:ad:c2:20:77:bf:43:4f:22:26:43:13:75: d1:33:85:50:a8:31:80:8a:43:b5:59:79:3b:a0:24: 92:5f:4f:7c:5b:be:4f:e8:dc:92:96:c1:f8:77:b0: 02:c1:3e:e4:b9:45:f6:28:17:bc:e0:e0:4f:2c:30: 75:a8:79:ce:99:07:26:76:4d:d3:e8:23:7b:b2:03: 34:d0:c9:db:3e:7b:3a:9e:c7:75:ce:2d:06:05:1b: d5:c7:17:ef:73:e5:93:0c:6c:b5:b9:81:a8:a7:89: 4b:a5:4f:99:d6:21:f9:66:c1:1d:b6:29:77:fe:2d: b9:6f:58:bd:ea:76:86:71:98:46:f6:71:5e:60:63: 9a:a0:7b:4b:7c:ad:d6:d3:4a:b2:12:d3:b8:2b:92: 94:26:8a:e9:59:16:b3:6a:57:d5:0d:81:cb:5c:69: 53:f8:5a:b1:ba:aa:80:fe:d4:90:f5:62:0d:a0:ba: 46:a0:a7:21:18:be:35:40:a7:bd:41:57:4d:28:78: d3:61:74:ab:e8:6d:7d:6c:d0:f7:4d:cf:0e:d6:1f: ac:b3:25:68:2e:b2:58:99:3e:2a:b1:83:81:0d:da: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:D7:D1:86:7D:1F:D3:2B:AB:B8:2D:01:FE:6F:50:AB:9B:29:A4 X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0a:8f:ad:4e:19:4f:b7:d6:fa:cc:75:e6:70:24:09:81:b8: 98:ba:21:f7:0c:d8:33:2d:cf:50:f3:c0:ee:9e:28:a0:01:8a: 65:c1:63:a2:d3:ff:ed:30:dc:9a:2c:eb:55:31:44:17:56:06: c3:c4:fa:17:e3:3b:8f:90:6d:b7:e7:cf:f7:5f:09:78:2b:0f: ae:ff:b1:9f:6e:ac:bd:ae:9c:ac:ea:32:01:8b:1e:c5:48:90: 78:3f:9f:21:bc:34:cd:5e:65:67:0c:ac:d1:63:77:fc:4b:65: 47:b8:76:df:db:3f:53:9c:b4:f5:fe:55:01:07:95:6e:45:3b: 48:32:5b:28:f6:82:10:d3:a9:cb:22:e5:b8:d6:13:86:8a:92: 71:e8:c7:4e:a9:28:b1:b2:20:e6:59:9b:90:99:70:65:37:fb: 5a:bf:ed:f5:72:86:15:ba:ba:6b:0c:a3:0f:03:1f:3b:37:7a: cc:f4:b7:c6:15:81:57:d2:9e:b1:41:22:b0:de:2b:5e:b7:57: 68:fe:03:f3:ea:2e:68:a5:bc:99:db:20:11:10:fe:1a:e5:6c: 60:d1:8f:50:27:c0:5e:f0:90:1c:bf:85:1e:2f:1b:b8:4a:02: a1:d5:d6:1a:aa:ff:b5:44:ed:4f:3f:7c:05:e7:af:e9:ba:6e: e2:d0:2f:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUwNjE1MDUxMDE2WhcNMjUwNjIyMDUxMDE2WjAYMRYwFAYD VQQDEw02ODRlNTViOC1hMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnviNYYuz4tJDVHT0TnkEoqhD6SKjww/iLZ7jzXQRJ+utwiB3v0NPIiZDE3XR M4VQqDGAikO1WXk7oCSSX098W75P6NySlsH4d7ACwT7kuUX2KBe84OBPLDB1qHnO mQcmdk3T6CN7sgM00MnbPns6nsd1zi0GBRvVxxfvc+WTDGy1uYGop4lLpU+Z1iH5 ZsEdtil3/i25b1i96naGcZhG9nFeYGOaoHtLfK3W00qyEtO4K5KUJorpWRazalfV DYHLXGlT+FqxuqqA/tSQ9WINoLpGoKchGL41QKe9QVdNKHjTYXSr6G19bND3Tc8O 1h+ssyVoLrJYmT4qsYOBDdq3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjP19GG fR/TK6u4LQH+b1CrmymkMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVCo+tThlPt9b6zHXmcCQJgbiYuiH3DNgzLc9Q88DuniigAYplwWOi 0//tMNyaLOtVMUQXVgbDxPoX4zuPkG2358/3Xwl4Kw+u/7Gfbqy9rpys6jIBix7F SJB4P58hvDTNXmVnDKzRY3f8S2VHuHbf2z9TnLT1/lUBB5VuRTtIMlso9oIQ06nL IuW41hOGipJx6MdOqSixsiDmWZuQmXBlN/tav+31coYVurprDKMPAx87N3rM9LfG FYFX0p6xQSKw3itet1do/gPz6i5opbyZ2yAREP4a5Wxg0Y9QJ8Be8JAcv4UeLxu4 SgKh1dYaqv+1RO1PP3wF56/pum7i0C9Q -----END CERTIFICATE-----Generated at Sun Jun 15 08:28:06 2025 by rpki-client