$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: tnizt21Q4w0bN/aQyTj5lLsRWeS3FCe1YHfB1/EeHbE= Subject key identifier: 35:DE:87:C8:DB:B9:4B:4B:AF:F9:3D:B1:53:FB:77:8B:75:96:62:6F Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0B63 Signing time: Fri 04 Jul 2025 19:25:33 +0000 Manifest this update: Fri 04 Jul 2025 19:25:32 +0000 Manifest next update: Fri 11 Jul 2025 19:25:32 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: qVWGObXbq/ESUCQzLdZGbRFd+u1INk4ymm9PwD9cLYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Jul 4 19:25:32 2025 GMT Not After : Jul 11 19:25:32 2025 GMT Subject: CN=68682aad-43df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:41:98:91:6a:b4:75:95:e1:98:e5:99:75: 26:e3:e5:cf:b3:4f:60:62:47:23:c2:36:b3:04:6f: 3d:ac:24:3d:d9:a3:76:44:7a:55:b5:6b:8b:21:38: 48:6b:b5:38:79:b8:32:74:8f:20:6d:f6:61:d2:b6: 63:3b:18:5e:c0:c6:ff:fb:bc:78:53:cb:71:87:ae: cd:37:fa:45:14:57:77:e2:e6:5a:96:1f:80:5e:10: 8c:68:b5:d8:15:91:a0:d4:a9:b3:99:82:e5:1c:15: 84:15:48:de:14:0f:f8:ff:7a:17:ba:21:d5:c2:97: 81:e4:12:f5:6c:e5:bc:98:79:17:4e:00:9d:98:ff: e4:8e:58:e7:86:9a:00:70:ea:1b:41:14:de:ae:0d: 22:e6:81:15:1e:08:f7:f8:9f:a6:7b:e3:72:93:b3: 3e:1a:7e:a1:5e:7d:5f:c4:0d:91:7a:25:63:88:cd: 6b:60:d0:2e:15:84:3d:9d:32:9d:bb:42:0c:2e:fd: bd:80:c4:45:70:a8:f5:10:8e:32:a8:42:04:2f:4e: ec:2a:f3:49:70:14:bf:af:ec:c0:6b:6f:fd:cb:22: 79:f7:84:e0:49:9f:3b:9d:c3:e7:c2:d7:c5:37:e3: 61:49:da:bb:5f:30:c1:f3:e5:9a:c2:92:49:53:51: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:87:C8:DB:B9:4B:4B:AF:F9:3D:B1:53:FB:77:8B:75:96:62:6F X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ab:03:2d:15:7f:e8:92:2b:55:01:5e:07:8f:b6:d4:be:2d: e7:b2:76:ed:69:7e:6f:34:6f:83:59:5a:a6:bd:83:12:a3:bc: 4d:f8:fe:2c:5a:3b:58:c1:c1:3b:1c:9d:78:dc:07:c2:e1:c0: 49:7b:fa:50:d1:1f:f5:f5:a0:1f:64:45:8f:19:ea:d7:fe:89: 80:f2:89:00:8a:75:a8:7b:cb:dd:8f:83:03:1e:f0:fc:19:f5: 26:81:77:eb:8e:7a:c1:ff:c8:06:bd:5b:55:81:bb:8e:1f:b5: d1:81:a7:5f:7e:c9:35:6f:07:12:56:c6:8a:94:c0:1c:19:aa: 61:5e:40:87:e3:b9:0f:8f:92:a0:cb:3b:2e:84:d1:7b:99:50: 94:70:90:ff:fd:3b:e9:2f:fa:fd:40:51:a2:c4:0e:80:96:ad: 13:b7:07:fc:df:e2:28:a3:af:90:c6:46:90:ad:fb:26:07:2c: 2e:b0:e4:e2:93:ef:ec:61:d8:80:0f:d5:8a:04:bd:45:42:fa: 8f:1b:d7:74:1d:eb:4e:89:3e:13:4c:af:ec:55:37:62:aa:ac: 56:1c:d1:4d:b2:8a:26:e8:9b:2b:12:3b:13:68:31:4a:87:87: d9:41:1a:bb:6c:9c:fa:25:80:61:84:46:e2:fb:b0:c5:d9:4a: e3:59:69:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUwNzA0MTkyNTMyWhcNMjUwNzExMTkyNTMyWjAYMRYwFAYD VQQDEw02ODY4MmFhZC00M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2lBmJFqtHWV4ZjlmXUm4+XPs09gYkcjwjazBG89rCQ92aN2RHpVtWuLIThI a7U4ebgydI8gbfZh0rZjOxhewMb/+7x4U8txh67NN/pFFFd34uZalh+AXhCMaLXY FZGg1KmzmYLlHBWEFUjeFA/4/3oXuiHVwpeB5BL1bOW8mHkXTgCdmP/kjljnhpoA cOobQRTerg0i5oEVHgj3+J+me+Nyk7M+Gn6hXn1fxA2ReiVjiM1rYNAuFYQ9nTKd u0IMLv29gMRFcKj1EI4yqEIEL07sKvNJcBS/r+zAa2/9yyJ594TgSZ87ncPnwtfF N+NhSdq7XzDB8+WawpJJU1FNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXeh8jb uUtLr/k9sVP7d4t1lmJvMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiqwMtFX/okitVAV4Hj7bUvi3nsnbtaX5vNG+DWVqmvYMSo7xN+P4s WjtYwcE7HJ143AfC4cBJe/pQ0R/19aAfZEWPGerX/omA8okAinWoe8vdj4MDHvD8 GfUmgXfrjnrB/8gGvVtVgbuOH7XRgadffsk1bwcSVsaKlMAcGaphXkCH47kPj5Kg yzsuhNF7mVCUcJD//TvpL/r9QFGixA6Alq0Ttwf83+Ioo6+QxkaQrfsmBywusOTi k+/sYdiAD9WKBL1FQvqPG9d0HetOiT4TTK/sVTdiqqxWHNFNsoom6JsrEjsTaDFK h4fZQRq7bJz6JYBhhEbi+7DF2UrjWWkX -----END CERTIFICATE-----Generated at Sat Jul 5 22:16:22 2025 by rpki-client