$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: 8iYZ2XhUWO0b0N4RXYbq71x7gk5NOdTJ8NqsU524zmM= Subject key identifier: 13:43:4A:F2:EB:EC:61:F4:70:A9:EF:C2:ED:85:83:AE:3A:8A:C0:AE Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0987 Signing time: Fri 04 Jul 2025 20:58:53 +0000 Manifest this update: Fri 04 Jul 2025 20:58:52 +0000 Manifest next update: Fri 11 Jul 2025 20:58:52 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: KOExWLUCZgrc7IhCB59HC3wx2iOnKcZee30v3krrQH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Jul 4 20:58:52 2025 GMT Not After : Jul 11 20:58:52 2025 GMT Subject: CN=6868408c-0846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:2d:8e:c9:b9:46:2c:b2:15:ec:3d:94:74: 8d:70:12:98:d2:07:df:dd:64:af:97:74:f0:e7:f3: 0f:14:1b:f6:8c:e1:58:eb:ea:53:11:ff:b6:56:18: 40:e6:5d:27:3c:e7:fa:29:7b:da:2b:ad:e0:f4:97: da:7b:04:64:5a:df:99:7b:b2:86:4b:ee:49:36:da: 1f:b7:00:dc:44:9a:1f:29:4e:de:71:06:8b:06:2e: df:06:e2:e2:1a:33:e5:5a:35:5d:22:ae:c1:20:d0: a4:2b:73:34:85:3a:a4:e2:8e:5f:8e:c7:db:f4:83: 5e:dd:04:1c:bc:b2:47:f6:01:5f:ae:d6:bf:12:25: 77:98:3d:8c:f7:f5:50:99:c2:21:bd:ae:26:cd:ba: fe:a6:45:6e:9c:69:f1:e6:0c:38:46:f6:4f:d8:08: dc:2e:d2:75:ea:2f:5b:0a:76:94:1f:4a:14:13:a0: 10:e8:2e:ae:a1:36:1e:bb:c0:3a:c1:b9:bd:fb:df: 31:ac:a7:62:2d:5c:86:16:87:04:fb:64:0d:12:10: 7c:a3:5c:76:f0:dc:79:ef:9f:b1:06:d6:5e:12:8b: cd:82:19:a2:70:88:18:08:88:ca:12:37:99:bc:e4: 8f:ab:b9:2d:20:f6:a3:92:46:9f:b7:f1:03:41:c0: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:43:4A:F2:EB:EC:61:F4:70:A9:EF:C2:ED:85:83:AE:3A:8A:C0:AE X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:00:df:04:50:20:97:aa:81:0b:82:16:fb:ca:18:22:74: 50:f6:80:52:77:9b:f2:fa:4b:9a:7c:65:15:65:84:05:6a:be: 88:af:d6:72:16:e2:13:6d:86:4f:00:d6:ee:2c:30:44:fa:e6: 75:f9:3c:c5:a6:2e:98:e2:00:96:5c:27:39:16:aa:f9:6b:5f: 2f:4f:dc:04:9c:4d:a4:c7:d6:bc:54:35:e2:4e:63:00:d1:19: 4d:9e:ba:fa:59:75:2a:9e:81:88:f3:d5:e4:a0:85:3c:22:1e: 57:47:fd:d4:b2:fd:54:45:47:ee:08:4c:af:f5:58:2b:14:fe: 3d:6e:5b:81:6d:d2:4c:39:79:b9:cf:47:7a:5a:78:b6:cb:42: ab:f1:e6:19:27:b0:3e:aa:39:c9:81:22:fe:5d:28:d4:5b:35: 09:04:bd:5f:e6:bc:4d:dd:72:56:24:ea:2a:ef:71:54:c1:95: 94:9a:89:33:bc:a8:89:5e:8c:ce:40:28:20:dd:be:43:d4:15: 2b:35:1c:49:6d:5a:ca:c7:78:a6:0c:19:e3:3d:e2:d3:21:97: 6e:e5:c5:11:17:a1:97:32:a0:b7:97:c9:b7:a3:7c:54:56:66: 89:c5:e7:20:91:c4:90:70:22:9d:10:6f:23:17:09:85:33:90: ac:9d:5d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjUwNzA0MjA1ODUyWhcNMjUwNzExMjA1ODUyWjAYMRYwFAYD VQQDEw02ODY4NDA4Yy0wODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqstjsm5RiyyFew9lHSNcBKY0gff3WSvl3Tw5/MPFBv2jOFY6+pTEf+2VhhA 5l0nPOf6KXvaK63g9JfaewRkWt+Ze7KGS+5JNtoftwDcRJofKU7ecQaLBi7fBuLi GjPlWjVdIq7BINCkK3M0hTqk4o5fjsfb9INe3QQcvLJH9gFfrta/EiV3mD2M9/VQ mcIhva4mzbr+pkVunGnx5gw4RvZP2AjcLtJ16i9bCnaUH0oUE6AQ6C6uoTYeu8A6 wbm9+98xrKdiLVyGFocE+2QNEhB8o1x28Nx575+xBtZeEovNghmicIgYCIjKEjeZ vOSPq7ktIPajkkaft/EDQcAqLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNDSvLr 7GH0cKnvwu2Fg646isCuMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT9ADfBFAgl6qBC4IW+8oYInRQ9oBSd5vy+kuafGUVZYQFar6Ir9Zy FuITbYZPANbuLDBE+uZ1+TzFpi6Y4gCWXCc5Fqr5a18vT9wEnE2kx9a8VDXiTmMA 0RlNnrr6WXUqnoGI89XkoIU8Ih5XR/3Usv1URUfuCEyv9VgrFP49bluBbdJMOXm5 z0d6Wni2y0Kr8eYZJ7A+qjnJgSL+XSjUWzUJBL1f5rxN3XJWJOoq73FUwZWUmokz vKiJXozOQCgg3b5D1BUrNRxJbVrKx3imDBnjPeLTIZdu5cURF6GXMqC3l8m3o3xU VmaJxecgkcSQcCKdEG8jFwmFM5CsnV2T -----END CERTIFICATE-----Generated at Sat Jul 5 05:11:10 2025 by rpki-client