$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: UA1OXS3yeBp0yfj3ru59hfxZxRnpWf1b+SMf/AEYyAc= Subject key identifier: F2:88:64:FD:EF:57:52:FB:7A:C3:19:CF:83:5A:B4:21:8E:C4:27:FA Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 3089 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 3088 Signing time: Wed 02 Jul 2025 15:33:06 +0000 Manifest this update: Wed 02 Jul 2025 15:33:06 +0000 Manifest next update: Wed 09 Jul 2025 15:33:06 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: V4U02Eipb4OTVyr9xyyfs1o2R2I9c4ZRQFvyEAcASiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12425 (0x3089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Jul 2 15:33:06 2025 GMT Not After : Jul 9 15:33:06 2025 GMT Subject: CN=68655132-4770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6a:8d:43:e9:29:a9:32:19:7c:7b:ea:c2:b2: 91:fe:89:38:58:fc:5b:02:3f:33:9c:88:c2:d5:07: 74:b6:95:58:5c:64:23:e8:93:ab:19:b2:f3:89:c6: 26:20:bd:5e:a9:6a:f1:a1:1b:17:dc:ca:b4:48:9e: 08:fb:21:94:0b:be:b4:4c:59:d1:9b:c4:36:76:c2: f3:82:34:0a:17:c6:f9:24:2c:b8:58:bf:b6:4a:42: 77:89:8b:d2:1c:8e:62:57:77:9f:d4:50:73:62:34: ff:8a:0a:77:7e:a6:5e:57:6e:51:8b:ea:1f:1f:42: 1b:77:68:4f:98:d3:28:8d:d4:73:61:24:0d:3e:77: 5b:b2:31:44:7b:d3:8a:9a:99:22:94:29:40:15:2d: 58:76:eb:74:36:f0:ac:66:94:fd:9e:53:cb:7f:fe: 55:2a:a8:7f:d4:1f:c6:59:a5:ad:b4:e3:9e:38:93: 91:00:97:95:52:6c:04:8c:ff:e9:1a:c9:24:62:b8: d6:d5:51:99:e6:06:88:b9:cf:1c:42:0f:9a:0d:f5: d3:0b:77:4d:02:28:07:0f:8e:b5:ae:78:53:12:f9: f5:b4:5b:fc:ec:a1:d0:40:30:01:a8:8c:55:6d:3f: ad:bd:e9:96:6b:1b:c5:e1:fc:ec:a8:1d:c6:80:09: a4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:64:FD:EF:57:52:FB:7A:C3:19:CF:83:5A:B4:21:8E:C4:27:FA X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e9:5d:a8:65:6a:ba:d0:92:90:6f:06:ed:ad:19:01:5b:47: 59:0c:2c:18:f3:79:c9:63:6c:ab:4b:3f:ba:78:41:1b:01:28: e2:79:7a:f8:3c:be:e8:70:2d:d5:48:4a:75:27:17:79:a2:25: 6b:1c:d3:f0:9e:df:c0:8b:6b:5c:6a:dd:ee:4e:1e:e1:e2:fa: b9:f3:d1:94:9b:b6:ef:9b:94:43:a3:cb:a5:2d:f1:60:21:f4: d2:f3:7b:56:f2:00:7e:42:d4:e3:32:07:47:27:d9:c7:58:af: 51:3a:16:05:d9:40:dd:dd:65:1f:97:38:0b:07:e3:24:57:b4: f5:06:08:33:91:91:b9:85:39:6f:85:7f:eb:df:7f:41:c6:b1: eb:5e:07:91:35:cf:56:41:3d:35:94:b9:f5:15:6d:16:e4:2b: a7:61:8e:bc:37:e9:5d:70:04:05:79:90:30:c6:86:ca:96:a6: 8e:b5:24:ed:53:a0:ae:58:2a:c3:4f:2b:3d:70:2f:f5:4d:a5: bc:95:e9:26:08:d0:55:7f:8c:b9:18:27:d4:17:d1:0a:87:fa: ae:71:d5:6f:52:49:fb:23:5b:00:e1:90:4a:4b:96:b8:a2:2c: 9d:2d:96:d2:41:ba:4e:01:e4:8a:0e:95:6f:8d:13:f9:13:0f: 6e:c6:cb:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUwNzAyMTUzMzA2WhcNMjUwNzA5MTUzMzA2WjAYMRYwFAYD VQQDEw02ODY1NTEzMi00NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GqNQ+kpqTIZfHvqwrKR/ok4WPxbAj8znIjC1Qd0tpVYXGQj6JOrGbLzicYm IL1eqWrxoRsX3Mq0SJ4I+yGUC760TFnRm8Q2dsLzgjQKF8b5JCy4WL+2SkJ3iYvS HI5iV3ef1FBzYjT/igp3fqZeV25Ri+ofH0Ibd2hPmNMojdRzYSQNPndbsjFEe9OK mpkilClAFS1Ydut0NvCsZpT9nlPLf/5VKqh/1B/GWaWttOOeOJORAJeVUmwEjP/p GskkYrjW1VGZ5gaIuc8cQg+aDfXTC3dNAigHD461rnhTEvn1tFv87KHQQDABqIxV bT+tvemWaxvF4fzsqB3GgAmkDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKIZP3v V1L7esMZz4NatCGOxCf6MB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd6V2oZWq60JKQbwbtrRkBW0dZDCwY83nJY2yrSz+6eEEbASjieXr4 PL7ocC3VSEp1Jxd5oiVrHNPwnt/Ai2tcat3uTh7h4vq589GUm7bvm5RDo8ulLfFg IfTS83tW8gB+QtTjMgdHJ9nHWK9ROhYF2UDd3WUflzgLB+MkV7T1BggzkZG5hTlv hX/r339BxrHrXgeRNc9WQT01lLn1FW0W5CunYY68N+ldcAQFeZAwxobKlqaOtSTt U6CuWCrDTys9cC/1TaW8lekmCNBVf4y5GCfUF9EKh/qucdVvUkn7I1sA4ZBKS5a4 oiydLZbSQbpOAeSKDpVvjRP5Ew9uxsua -----END CERTIFICATE-----Generated at Thu Jul 3 11:30:10 2025 by rpki-client