$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: AZv9JSiXdC/3W5KlXNsjeRX1S0Vt5JlADGyhHROCYh4= Subject key identifier: D0:81:D7:B6:E1:CD:1A:C1:D6:80:F6:F2:A9:83:02:4E:00:CF:E1:7A Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 3494 Signing time: Wed 02 Jul 2025 14:37:27 +0000 Manifest this update: Wed 02 Jul 2025 14:37:27 +0000 Manifest next update: Wed 09 Jul 2025 14:37:27 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: UCK1wdtc1rUPUIemkUozz1MFpkZTgVQi641Wi7m9BJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: Jul 2 14:37:27 2025 GMT Not After : Jul 9 14:37:27 2025 GMT Subject: CN=68654427-bdad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:e0:f5:07:f8:6d:33:67:5b:6e:e3:48:0f: 7d:23:dd:e6:4d:a3:28:df:c7:c5:41:05:27:7d:d2: 01:0f:32:f1:fd:70:93:c4:65:3e:e8:ac:03:f5:f4: 4f:ae:8a:c0:63:15:59:5e:4c:7e:2a:47:99:c2:a7: 4a:4c:c7:26:54:95:ce:2a:88:40:9e:ce:0b:8c:11: e6:00:b7:66:d8:8a:14:7a:c3:bd:f9:8c:87:15:59: 8d:c0:22:2d:89:ca:c3:74:82:82:f6:9a:67:49:6c: ba:75:f3:73:f6:dc:19:61:3b:5a:0b:6a:91:8f:c6: ca:c5:e2:6d:2f:83:5f:33:e3:e1:73:4f:fd:54:22: 02:8c:cc:b4:b3:8d:18:1f:48:21:f9:f7:23:db:0c: ac:6e:36:6f:92:1e:80:68:b7:95:32:0a:9c:d8:49: e4:e9:33:f1:cf:43:42:e6:2c:d7:9f:00:d2:d5:4c: 86:b2:6d:48:4c:4f:14:ac:e6:8b:c0:ec:1a:4d:c3: 35:f2:43:bc:11:e0:b2:db:ab:e8:ab:1f:a2:a2:db: c8:ef:ff:6e:a0:78:5f:9b:88:c9:b2:48:a4:9b:2e: db:aa:84:c0:dc:c7:cb:7d:5f:58:4a:45:f7:15:99: d6:2e:4e:b0:a5:80:79:6c:cb:07:7e:75:8b:b7:76: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:81:D7:B6:E1:CD:1A:C1:D6:80:F6:F2:A9:83:02:4E:00:CF:E1:7A X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9f:80:a0:ac:c2:4b:d8:a1:ff:63:fd:a1:60:86:d8:9e:a8: bb:fb:b6:5d:2e:2c:f4:74:a1:4d:e6:fe:af:72:9a:47:c0:fd: c4:31:52:a2:4a:7c:9c:5c:dc:fa:e8:de:b2:24:22:d1:24:68: a1:2d:a3:94:c5:5d:a5:43:85:c5:16:54:31:31:84:38:4c:38: 04:58:75:6a:c5:a7:d6:bd:55:08:99:2d:c2:c2:ad:dc:c4:ea: ce:c9:2f:85:eb:77:2a:e2:24:b1:4b:2a:a0:36:c6:0b:92:72: 61:65:70:32:b5:73:f1:8b:0c:fb:b5:f8:eb:24:f9:5e:3a:e3: f3:9d:b6:58:e2:02:f0:df:2c:ab:f8:78:98:ed:ef:10:18:2f: f4:29:0d:80:f7:16:8f:8b:cd:9f:4f:5a:22:e0:1e:87:01:15: f4:a6:cf:c2:55:32:78:75:34:3a:ab:be:67:13:0e:88:b7:6a: ad:a3:03:3b:18:bd:9a:e8:a1:35:50:cc:ab:de:5f:d6:8b:77: 10:72:c8:95:13:67:d8:2e:58:84:5a:cf:4b:b2:71:7b:e8:cb: 9b:d3:47:41:84:ba:6e:2e:e1:59:64:a8:bd:fb:2d:01:46:a2: 7b:57:1b:18:31:a0:97:08:ac:31:98:fc:42:80:aa:b6:1f:82: 50:ac:93:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjUwNzAyMTQzNzI3WhcNMjUwNzA5MTQzNzI3WjAYMRYwFAYD VQQDEw02ODY1NDQyNy1iZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5jg9Qf4bTNnW27jSA99I93mTaMo38fFQQUnfdIBDzLx/XCTxGU+6KwD9fRP rorAYxVZXkx+KkeZwqdKTMcmVJXOKohAns4LjBHmALdm2IoUesO9+YyHFVmNwCIt icrDdIKC9ppnSWy6dfNz9twZYTtaC2qRj8bKxeJtL4NfM+Phc0/9VCICjMy0s40Y H0gh+fcj2wysbjZvkh6AaLeVMgqc2Enk6TPxz0NC5izXnwDS1UyGsm1ITE8UrOaL wOwaTcM18kO8EeCy26voqx+iotvI7/9uoHhfm4jJskikmy7bqoTA3MfLfV9YSkX3 FZnWLk6wpYB5bMsHfnWLt3bHKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCB17bh zRrB1oD28qmDAk4Az+F6MB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRn4CgrMJL2KH/Y/2hYIbYnqi7+7ZdLiz0dKFN5v6vcppHwP3EMVKi SnycXNz66N6yJCLRJGihLaOUxV2lQ4XFFlQxMYQ4TDgEWHVqxafWvVUImS3Cwq3c xOrOyS+F63cq4iSxSyqgNsYLknJhZXAytXPxiwz7tfjrJPleOuPznbZY4gLw3yyr +HiY7e8QGC/0KQ2A9xaPi82fT1oi4B6HARX0ps/CVTJ4dTQ6q75nEw6It2qtowM7 GL2a6KE1UMyr3l/Wi3cQcsiVE2fYLliEWs9LsnF76Mub00dBhLpuLuFZZKi9+y0B RqJ7VxsYMaCXCKwxmPxCgKq2H4JQrJOJ -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:09 2025 by rpki-client