$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: 0fK4lKmNs1O83nBRT62F7nteNbHFAHFl7W/lFlOibZc= Subject key identifier: 90:E4:04:81:A6:FD:95:21:D9:9E:72:23:B8:A1:E9:2B:D8:82:8E:C6 Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: 0150 Signing time: Tue 01 Jul 2025 04:35:21 +0000 Manifest this update: Tue 01 Jul 2025 04:35:20 +0000 Manifest next update: Tue 08 Jul 2025 04:35:20 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: pGUUXqzW4D9JtihgiQPLuuKqWi87BPk11hvkYHvTIZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: Jul 1 04:35:20 2025 GMT Not After : Jul 8 04:35:20 2025 GMT Subject: CN=68636589-55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:2f:27:20:d3:04:5c:08:f0:ef:46:02:08: 73:47:92:a2:48:f3:21:54:31:c8:1e:20:87:c7:9e: 60:ba:4e:0a:5e:1a:7f:09:5b:ee:93:ca:58:c2:78: b6:57:80:2d:ed:37:f8:59:cd:4b:6f:dd:49:e5:e9: b8:db:13:c1:b9:66:87:e1:ae:c8:c1:29:6e:e5:20: 1d:46:32:99:8c:3b:34:82:79:f7:d0:ba:2c:ed:0a: 01:84:5d:a2:14:9a:4c:ae:71:cc:2c:d5:e2:62:cf: 46:99:ac:aa:52:c2:5b:d6:8d:e9:17:63:70:9b:63: d3:a7:9c:0c:3b:09:f1:b0:3b:c5:9b:e9:8c:f6:a4: 36:75:95:d8:19:13:51:29:cb:8e:f5:28:6e:c7:8d: 88:6b:9d:9f:b7:2f:65:bf:1d:de:32:fb:ed:a2:89: 63:bd:bc:ef:6a:b4:35:57:25:b0:04:0f:8f:71:b7: b6:57:ff:fb:ce:62:36:74:24:55:1e:51:a4:b7:9a: 45:1e:f1:42:80:4f:2c:cd:f9:85:d7:51:09:b5:7a: 76:6e:c0:01:da:5e:e1:ac:c9:1f:39:10:93:46:df: 80:75:7e:db:cd:60:00:b7:36:25:11:81:bd:b1:be: bb:a6:51:8f:81:52:05:7b:60:77:f1:cc:5f:a4:56: f8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:04:81:A6:FD:95:21:D9:9E:72:23:B8:A1:E9:2B:D8:82:8E:C6 X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:aa:df:5d:d2:15:71:5d:ef:d6:ee:ce:e4:07:41:c6:fb:32: bf:fd:6c:2f:65:4e:98:0b:cb:b7:85:5f:cd:f1:91:48:e3:a8: 91:97:50:08:b7:bf:b5:b1:60:75:25:f8:4a:bc:90:b9:c1:1c: f2:de:a7:00:dc:ff:9c:b2:97:cf:e8:c1:9f:bd:45:39:d9:d6: 46:2e:84:c0:05:22:b3:ad:ea:7a:c5:0b:88:46:aa:13:37:68: 41:6c:9e:8c:78:a8:53:84:cf:a2:bb:f5:fc:57:83:92:c6:f9: 14:81:75:ab:85:9b:d6:32:6a:3c:43:97:fe:40:c7:dd:f6:c7: 7c:9e:5e:0b:56:e3:0c:cd:03:5c:78:26:20:b8:01:10:1c:42: dd:96:35:f3:60:2a:b4:76:8c:9f:5f:58:ce:fe:d5:ed:f4:15: da:f7:22:60:19:ee:e5:ce:91:7a:36:b7:94:1c:55:96:86:56: 07:2a:3e:ec:38:3c:28:28:48:c1:8e:c5:7a:61:e9:a8:21:b2: 82:cc:82:cb:da:31:5e:8c:0f:8f:4f:9f:28:b2:2b:9a:70:36: 68:73:0c:67:c2:ef:31:79:aa:f1:bc:d6:a4:f3:a7:a3:f8:00: ba:5c:17:b4:6f:0f:3f:ef:11:13:04:34:8e:60:a3:ee:3f:85: 9e:2e:07:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAxMDVGNTA5REYy MTBCQzA5MUMwHhcNMjUwNzAxMDQzNTIwWhcNMjUwNzA4MDQzNTIwWjAYMRYwFAYD VQQDEw02ODYzNjU4OS01NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrcvJyDTBFwI8O9GAghzR5KiSPMhVDHIHiCHx55guk4KXhp/CVvuk8pYwni2 V4At7Tf4Wc1Lb91J5em42xPBuWaH4a7IwSlu5SAdRjKZjDs0gnn30Los7QoBhF2i FJpMrnHMLNXiYs9GmayqUsJb1o3pF2Nwm2PTp5wMOwnxsDvFm+mM9qQ2dZXYGRNR KcuO9Shux42Ia52fty9lvx3eMvvtooljvbzvarQ1VyWwBA+Pcbe2V//7zmI2dCRV HlGkt5pFHvFCgE8szfmF11EJtXp2bsAB2l7hrMkfORCTRt+AdX7bzWAAtzYlEYG9 sb67plGPgVIFe2B38cxfpFb4bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDkBIGm /ZUh2Z5yI7ih6SvYgo7GMB8GA1UdIwQYMBaAFO6uUpI7C65yyYPQEF9QnfIQvAkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM2OS9BNTFDNENBQTRF RkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJuTEpnOUFRWDFDZDhoQzhD UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJu TEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqt9d0hVxXe/W7s7kB0HG+zK//WwvZU6YC8u3hV/N8ZFI46iRl1AI t7+1sWB1JfhKvJC5wRzy3qcA3P+cspfP6MGfvUU52dZGLoTABSKzrep6xQuIRqoT N2hBbJ6MeKhThM+iu/X8V4OSxvkUgXWrhZvWMmo8Q5f+QMfd9sd8nl4LVuMMzQNc eCYguAEQHELdljXzYCq0doyfX1jO/tXt9BXa9yJgGe7lzpF6NreUHFWWhlYHKj7s ODwoKEjBjsV6YemoIbKCzILL2jFejA+PT58osiuacDZocwxnwu8xearxvNak86ej +AC6XBe0bw8/7xETBDSOYKPuP4WeLgcJ -----END CERTIFICATE-----Generated at Thu Jul 3 00:29:35 2025 by rpki-client