$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: uHEkKr0loXvSN3YwcgA1oksCtlg9aKdL5bFQkSjoFL4= Subject key identifier: 78:13:3B:FC:78:3B:21:94:32:E6:4A:47:93:92:DE:84:29:9C:50:AF Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: 0138 Signing time: Tue 13 May 2025 03:36:31 +0000 Manifest this update: Tue 13 May 2025 03:36:30 +0000 Manifest next update: Tue 20 May 2025 03:36:30 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: qsrrCz5MXw8ESQHTksAlFID7oMMkh6kDry66L/k7Ftw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: May 13 03:36:30 2025 GMT Not After : May 20 03:36:30 2025 GMT Subject: CN=6822be3e-261f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:b2:67:66:9a:2f:35:ec:56:fe:3c:d2:67: 86:ac:7a:8c:85:d5:4b:75:92:42:b4:1e:8a:6a:da: af:93:b4:a7:0c:f6:c5:dd:e3:1b:24:5f:63:8e:ae: 37:77:a4:ab:43:71:41:d0:a3:dd:51:2a:cc:2f:8a: e2:25:18:e7:49:e4:ac:e0:9b:84:55:f1:a6:75:34: ae:36:62:d8:65:fd:6c:23:10:97:90:f6:24:d9:e1: f8:de:a8:b9:53:e6:fd:a2:92:53:7e:d1:88:89:d2: 4b:c6:80:ca:07:50:7f:4d:87:09:64:ad:d5:18:a6: a8:fb:53:ff:8b:8a:f8:06:9b:a7:1b:7f:16:f0:a6: eb:93:2a:94:00:a0:0e:f8:58:89:7c:a9:25:8d:de: 2d:cc:11:2c:84:f2:2f:a0:da:90:09:dc:b2:5d:a4: ea:e1:47:8d:a3:96:41:10:5f:8c:9c:ac:7e:74:a5: 9f:a1:d9:a1:ec:3f:f7:01:33:0a:e0:a7:ca:57:0c: 29:e9:23:a9:80:e3:13:2a:9e:b5:5e:77:fc:4b:f7: 2e:d4:9e:5c:31:da:0f:21:12:52:75:e3:8c:05:bd: 4d:f5:a1:e2:5e:ab:dc:28:e1:c7:f3:4c:af:29:85: 40:a7:3d:20:b0:e0:8e:85:19:5e:aa:77:90:97:2e: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:13:3B:FC:78:3B:21:94:32:E6:4A:47:93:92:DE:84:29:9C:50:AF X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:74:93:15:1d:c2:a5:ad:e0:e5:dd:0e:9c:63:ce:40:7d:19: 72:4f:18:f7:bf:8b:4c:b2:22:69:6e:2f:74:5a:95:a3:8f:16: aa:db:15:af:f1:ca:74:76:94:ca:8c:a5:e5:05:a3:2b:a1:b2: 1a:b1:06:ee:88:08:ea:cf:cd:e7:42:b2:8b:f1:0f:95:b3:24: 18:87:57:61:23:20:7d:e7:83:0e:c2:77:bd:30:47:67:5b:3e: 3f:54:9a:7b:7a:f0:da:46:cf:b9:61:f6:09:34:4d:c4:c6:c1: d9:44:48:24:de:30:a6:9a:d0:65:29:e3:29:0f:9e:5f:91:e1: 73:8c:51:d0:83:0d:f2:1f:f2:68:e1:34:e6:91:f5:d2:ce:ca: e1:08:95:49:d5:ab:99:61:c4:7f:8b:32:c1:04:09:b9:14:e0: 24:91:43:7e:ca:21:df:ef:67:e8:17:75:9f:6c:ea:1c:d2:dd: 93:be:9f:8b:df:a6:4d:aa:c8:02:30:eb:5b:2f:ce:14:1e:5d: 64:33:16:d8:36:5e:b2:c5:7f:ca:cf:9e:8a:ed:40:17:55:e8: 3b:33:f6:95:5a:84:5b:2e:78:45:a0:1b:52:92:f8:97:d1:b4: 95:dd:45:1a:01:36:4d:69:1e:67:d5:5e:6d:74:de:c3:c9:d1: ab:64:b3:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAxMDVGNTA5REYy MTBCQzA5MUMwHhcNMjUwNTEzMDMzNjMwWhcNMjUwNTIwMDMzNjMwWjAYMRYwFAYD VQQDEw02ODIyYmUzZS0yNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JWyZ2aaLzXsVv480meGrHqMhdVLdZJCtB6Katqvk7SnDPbF3eMbJF9jjq43 d6SrQ3FB0KPdUSrML4riJRjnSeSs4JuEVfGmdTSuNmLYZf1sIxCXkPYk2eH43qi5 U+b9opJTftGIidJLxoDKB1B/TYcJZK3VGKao+1P/i4r4BpunG38W8KbrkyqUAKAO +FiJfKkljd4tzBEshPIvoNqQCdyyXaTq4UeNo5ZBEF+MnKx+dKWfodmh7D/3ATMK 4KfKVwwp6SOpgOMTKp61Xnf8S/cu1J5cMdoPIRJSdeOMBb1N9aHiXqvcKOHH80yv KYVApz0gsOCOhRleqneQly77/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgTO/x4 OyGUMuZKR5OS3oQpnFCvMB8GA1UdIwQYMBaAFO6uUpI7C65yyYPQEF9QnfIQvAkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM2OS9BNTFDNENBQTRF RkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJuTEpnOUFRWDFDZDhoQzhD UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJu TEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2dJMVHcKlreDl3Q6cY85AfRlyTxj3v4tMsiJpbi90WpWjjxaq2xWv 8cp0dpTKjKXlBaMrobIasQbuiAjqz83nQrKL8Q+VsyQYh1dhIyB954MOwne9MEdn Wz4/VJp7evDaRs+5YfYJNE3ExsHZREgk3jCmmtBlKeMpD55fkeFzjFHQgw3yH/Jo 4TTmkfXSzsrhCJVJ1auZYcR/izLBBAm5FOAkkUN+yiHf72foF3WfbOoc0t2Tvp+L 36ZNqsgCMOtbL84UHl1kMxbYNl6yxX/Kz56K7UAXVeg7M/aVWoRbLnhFoBtSkviX 0bSV3UUaATZNaR5n1V5tdN7DydGrZLMa -----END CERTIFICATE-----Generated at Wed May 14 17:54:01 2025 by rpki-client