$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: /xIpeZh9Cf9425Y6m0KkENEPrJDbBtbNeEHpe/KNSDI= Subject key identifier: 14:91:CE:5A:2D:49:9D:08:CC:89:F6:B5:A3:5B:88:81:F1:29:AE:77 Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 3071 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 3070 Signing time: Fri 16 May 2025 15:38:05 +0000 Manifest this update: Fri 16 May 2025 15:38:04 +0000 Manifest next update: Fri 23 May 2025 15:38:04 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: mQqZJkg/nr/bOkYPPoPiECKBv5drF9QG4ZJ4eHD4+HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12401 (0x3071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: May 16 15:38:04 2025 GMT Not After : May 23 15:38:04 2025 GMT Subject: CN=68275bdc-eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:8a:b3:c1:62:ad:b3:39:99:64:2e:a7:ba: bf:fd:d7:b0:d0:0c:ea:55:dc:1b:49:66:72:4a:c2: 88:a0:ef:7a:b8:45:77:18:50:7b:57:8f:ce:96:ed: 43:9a:f8:15:3c:dc:af:4d:d8:5d:3b:02:14:82:3d: 5c:ed:67:b4:18:13:95:a0:9f:67:a3:c3:91:fc:0a: fe:1b:63:8c:5b:a8:9a:a9:5b:48:6b:f9:a1:4a:44: c1:8b:19:67:75:39:ac:27:4a:56:1a:2b:ce:24:6f: 2d:46:0a:f7:44:35:d1:aa:43:e8:0e:94:37:54:b8: cf:8f:db:57:03:64:22:fb:80:75:f8:03:60:e9:87: e8:67:c9:09:6c:16:aa:7d:35:7a:a6:d6:d2:85:9a: 61:08:27:f8:ba:f6:d3:1f:e5:f0:1c:aa:d0:94:0d: 93:79:b3:ee:f5:a9:b2:10:49:68:38:53:54:ab:b7: 3b:ac:42:38:74:2b:11:b0:d9:dd:ca:8b:76:86:bf: 5b:5d:b1:0b:2b:92:77:d9:39:17:d7:dd:7e:d0:08: 79:21:44:16:b9:3a:32:44:23:ff:68:89:7d:71:ca: d6:4a:c1:2d:42:cf:ad:85:6f:fe:47:74:3d:41:16: 92:59:03:70:82:4b:65:9d:55:25:07:f2:58:60:46: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:91:CE:5A:2D:49:9D:08:CC:89:F6:B5:A3:5B:88:81:F1:29:AE:77 X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2b:97:44:e6:f8:09:44:d7:86:f9:a9:a9:03:90:44:ad:b0: 1a:16:19:fa:96:81:0a:ca:23:b7:3d:8e:89:22:13:3d:21:0b: 64:7f:d4:e1:90:f9:98:bc:a7:2b:ac:c1:2f:9f:2b:46:bb:f5: 2a:2d:c0:84:98:da:f8:5f:88:7d:cd:ce:ca:71:7f:ab:66:ad: 3b:2e:e0:42:37:22:bd:b3:0e:02:4f:6e:ab:81:41:b8:a4:1d: 7f:69:c3:0c:66:b6:8f:46:2c:f6:e6:83:d4:ca:50:0b:7f:8b: 6e:4c:f1:ba:74:eb:74:67:30:66:8a:3f:dc:0a:60:c0:fd:01: d2:c4:70:05:3f:2b:80:33:e6:61:ce:61:45:0f:2d:53:b1:29: f2:90:a6:f8:4f:14:a9:e0:f2:b9:2e:6c:52:88:24:35:ff:8b: 32:5e:30:37:ed:3d:68:49:18:77:0e:36:86:e7:2d:66:8b:14: cb:71:29:a5:50:33:a5:2d:2f:fd:f5:53:62:c5:fb:f0:c7:fc: aa:d5:59:91:76:a4:aa:3c:cb:55:1d:f6:80:7d:f5:3c:46:c7: e2:08:7a:d2:d1:ff:96:b7:a1:19:46:76:70:a3:47:eb:d1:50: 7b:1f:fb:dc:e7:5b:3f:45:43:41:6f:87:82:ba:7a:ff:ae:86: 16:44:62:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUwNTE2MTUzODA0WhcNMjUwNTIzMTUzODA0WjAYMRYwFAYD VQQDEw02ODI3NWJkYy1lYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KKKs8FirbM5mWQup7q//dew0AzqVdwbSWZySsKIoO96uEV3GFB7V4/Olu1D mvgVPNyvTdhdOwIUgj1c7We0GBOVoJ9no8OR/Ar+G2OMW6iaqVtIa/mhSkTBixln dTmsJ0pWGivOJG8tRgr3RDXRqkPoDpQ3VLjPj9tXA2Qi+4B1+ANg6YfoZ8kJbBaq fTV6ptbShZphCCf4uvbTH+XwHKrQlA2TebPu9amyEEloOFNUq7c7rEI4dCsRsNnd yot2hr9bXbELK5J32TkX191+0Ah5IUQWuToyRCP/aIl9ccrWSsEtQs+thW/+R3Q9 QRaSWQNwgktlnVUlB/JYYEaaZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSRzlot SZ0IzIn2taNbiIHxKa53MB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsK5dE5vgJRNeG+ampA5BErbAaFhn6loEKyiO3PY6JIhM9IQtkf9Th kPmYvKcrrMEvnytGu/UqLcCEmNr4X4h9zc7KcX+rZq07LuBCNyK9sw4CT26rgUG4 pB1/acMMZraPRiz25oPUylALf4tuTPG6dOt0ZzBmij/cCmDA/QHSxHAFPyuAM+Zh zmFFDy1TsSnykKb4TxSp4PK5LmxSiCQ1/4syXjA37T1oSRh3DjaG5y1mixTLcSml UDOlLS/99VNixfvwx/yq1VmRdqSqPMtVHfaAffU8RsfiCHrS0f+Wt6EZRnZwo0fr 0VB7H/vc51s/RUNBb4eCunr/roYWRGJS -----END CERTIFICATE-----Generated at Sat May 17 03:43:01 2025 by rpki-client