$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: DTbE6w5pXSMs8LKJtHr7ebUr71elTYfj2TN2lVMOx50= Subject key identifier: A5:35:5D:58:BA:4D:3F:4F:B8:E9:9E:D1:86:46:17:EA:CD:5D:96:B1 Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: 9D Signing time: Tue 13 May 2025 05:26:09 +0000 Manifest this update: Tue 13 May 2025 05:26:08 +0000 Manifest next update: Tue 20 May 2025 05:26:08 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: VeBv6s6NyM/mMWz9r9cXpMBdsJfQ4YLLXy65BW4daxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: May 13 05:26:08 2025 GMT Not After : May 20 05:26:08 2025 GMT Subject: CN=6822d7f0-ad91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:2d:e9:94:50:ba:7a:cd:8f:b6:9c:bb:c1: 8f:e1:23:f4:dc:fe:be:53:54:0c:f6:ae:b9:6a:c1: ca:37:c3:ca:2b:cd:40:b4:53:ce:2d:9a:df:7e:2e: 49:b4:28:2b:10:d7:7a:4c:d1:10:82:26:5d:bb:bf: 2e:3a:2c:7a:fe:ca:34:89:67:39:df:5c:f2:0a:e3: ee:2d:cd:fe:df:d4:99:ae:fd:b7:14:29:a6:e1:e1: d8:d9:41:b6:c5:ce:cd:78:6e:5f:c9:03:5a:38:50: 2d:24:5e:3d:ea:14:9e:08:22:67:2a:61:2d:c9:26: 09:f9:b0:b3:4b:e2:c6:1a:0d:3b:f3:57:58:d0:1b: 17:65:3f:36:35:62:88:7f:c5:f4:c3:25:a0:02:3c: 0c:29:38:a1:9a:1a:68:a0:56:c6:42:be:9b:8d:cf: c3:21:88:81:13:30:25:b0:ff:8c:05:8e:82:6f:16: 48:fe:2d:11:43:fd:32:33:57:5e:9a:9d:31:4c:b0: 49:42:72:8d:19:d0:38:e8:18:b3:5e:ac:34:76:2a: 65:2a:63:33:e8:ee:b5:4a:f7:c0:4a:08:cd:43:f3: 5a:5f:1c:2f:d8:a4:9b:49:52:e2:32:cd:d2:61:fc: 70:78:a9:96:cf:3b:5d:d0:e6:da:5d:fe:80:0b:eb: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:5D:58:BA:4D:3F:4F:B8:E9:9E:D1:86:46:17:EA:CD:5D:96:B1 X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9c:93:a0:43:05:08:51:5f:51:48:c0:4b:05:58:2e:da:59: dc:ae:98:dc:76:9c:64:68:59:08:d3:fd:f5:55:43:d4:b3:3c: 78:fd:c4:dc:d9:84:61:f2:eb:86:a0:eb:1c:03:e8:b8:31:15: 7e:51:bb:87:17:7e:24:55:f6:71:11:fc:fc:20:fd:c9:d3:a2: 3c:80:44:37:a3:fe:6b:f9:47:aa:c4:23:56:fb:1f:66:d3:53: 3c:26:1b:a5:f9:4d:63:72:17:7a:a7:be:16:82:1c:f2:d2:5d: 1f:63:fd:5d:d7:a0:12:6c:f0:21:3f:25:2f:ae:d4:ad:b4:a7: 04:f5:51:93:80:6f:36:a8:41:19:86:5b:5d:11:ec:ae:0e:ec: 0f:14:3e:8f:99:bc:23:3d:38:ba:b2:d4:6c:c4:70:b4:31:c0: bd:5c:a9:ce:5e:45:8c:1e:c4:10:a7:fc:c5:b8:27:1a:ee:4d: d9:c4:e6:0d:5f:ab:ea:87:41:c9:2f:2f:9a:00:3e:15:b2:10: a3:7d:15:48:2e:fd:c3:8e:0d:ac:11:fe:71:01:fd:65:6f:08: 66:d2:30:78:59:b7:1b:e6:08:81:a1:10:e0:52:b0:17:47:ed: 4e:cf:76:95:7b:d6:c4:90:0d:0b:0b:47:a5:ad:78:58:c2:fb: 48:56:b1:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUwNTEzMDUyNjA4WhcNMjUwNTIwMDUyNjA4WjAYMRYwFAYD VQQDEw02ODIyZDdmMC1hZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYQt6ZRQunrNj7acu8GP4SP03P6+U1QM9q65asHKN8PKK81AtFPOLZrffi5J tCgrENd6TNEQgiZdu78uOix6/so0iWc531zyCuPuLc3+39SZrv23FCmm4eHY2UG2 xc7NeG5fyQNaOFAtJF496hSeCCJnKmEtySYJ+bCzS+LGGg0781dY0BsXZT82NWKI f8X0wyWgAjwMKTihmhpooFbGQr6bjc/DIYiBEzAlsP+MBY6CbxZI/i0RQ/0yM1de mp0xTLBJQnKNGdA46BizXqw0diplKmMz6O61SvfASgjNQ/NaXxwv2KSbSVLiMs3S YfxweKmWzztd0ObaXf6AC+uuKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU1XVi6 TT9PuOme0YZGF+rNXZaxMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXnJOgQwUIUV9RSMBLBVgu2lncrpjcdpxkaFkI0/31VUPUszx4/cTc 2YRh8uuGoOscA+i4MRV+UbuHF34kVfZxEfz8IP3J06I8gEQ3o/5r+UeqxCNW+x9m 01M8Jhul+U1jchd6p74Wghzy0l0fY/1d16ASbPAhPyUvrtSttKcE9VGTgG82qEEZ hltdEeyuDuwPFD6PmbwjPTi6stRsxHC0McC9XKnOXkWMHsQQp/zFuCca7k3ZxOYN X6vqh0HJLy+aAD4VshCjfRVILv3Djg2sEf5xAf1lbwhm0jB4Wbcb5giBoRDgUrAX R+1Oz3aVe9bEkA0LC0elrXhYwvtIVrEj -----END CERTIFICATE-----Generated at Tue May 13 08:21:14 2025 by rpki-client