$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: Y54+K0wNVxFzRbRWPM/iXZkRqKvsqnWyGzQLKTKTHQE= Subject key identifier: 4E:0F:19:B4:56:DA:23:74:3C:C0:E4:A4:00:DA:5F:91:D5:EF:5B:76 Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: B7 Signing time: Thu 03 Jul 2025 06:07:31 +0000 Manifest this update: Thu 03 Jul 2025 06:07:30 +0000 Manifest next update: Thu 10 Jul 2025 06:07:30 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: cfr6blrQJqTZWe9h4fuGq+CIx4CHDC9tNzTdb3Q6lQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: Jul 3 06:07:30 2025 GMT Not After : Jul 10 06:07:30 2025 GMT Subject: CN=68661e23-491c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:c4:d9:de:d3:5c:5c:db:da:86:21:9c:e9: 4c:ff:3d:50:b6:9d:9a:79:79:5a:d3:68:46:86:a3: 3a:93:b8:bb:3a:c8:54:10:23:b8:54:ad:9f:30:f0: f3:9e:e3:cb:d2:59:b2:65:ac:ab:f7:7b:ec:40:da: 4c:81:ec:a1:a9:d6:84:68:73:40:6e:3e:79:3e:84: 7a:0f:e6:dd:ec:70:44:ed:ac:35:9a:ef:51:fc:ea: e5:84:ce:75:65:d4:a1:b4:a8:e1:ac:46:6a:e3:c4: 7d:09:f8:f5:ee:01:eb:93:e5:ce:07:f8:9f:39:ee: 64:5b:ca:f0:9a:80:80:dc:28:fc:09:78:8a:35:e2: cb:24:79:46:b4:1b:7b:bf:f2:a5:e8:21:6f:2d:9c: af:4f:1d:90:a8:49:3f:f1:b7:71:bf:24:71:b5:f9: b8:d7:e7:00:52:69:54:75:dc:60:6a:c8:e1:ab:c8: db:12:01:79:42:96:de:ff:13:b5:57:0e:ed:66:e4: 16:42:10:57:d7:32:90:1b:be:59:83:39:c0:9a:70: 0d:d3:78:6e:74:df:da:ab:0e:f7:d0:01:57:30:65: ad:af:04:bc:d3:be:37:75:d7:60:d5:cd:a5:24:66: 74:30:f2:64:0d:2c:fb:34:5f:51:08:22:37:27:16: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0F:19:B4:56:DA:23:74:3C:C0:E4:A4:00:DA:5F:91:D5:EF:5B:76 X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:6c:f5:71:fe:77:6f:93:e9:cf:5f:60:a8:3e:9a:6f:ea: 42:19:98:d1:d7:0a:cc:4d:cc:17:dc:2d:37:3f:db:e9:0f:fa: 35:82:8b:4a:0f:7a:d5:5b:8e:50:db:c2:a6:8a:2b:5e:f5:06: 52:c2:1e:5f:e3:73:b4:0b:cf:ba:27:39:30:00:3a:3b:e3:51: 83:e4:9d:1c:fc:f5:ce:7b:d2:4c:21:6d:49:27:a8:e9:18:27: ef:5f:a2:b5:27:ad:f6:f6:c8:82:81:10:68:f3:2c:0f:d7:a7: 40:d9:e6:41:c0:7c:39:49:f0:8e:6d:9c:83:0f:33:48:16:ec: de:cf:4e:6f:3f:2f:df:fa:f4:87:46:29:96:86:11:be:e6:40: bd:f4:5e:a1:cf:ac:6a:e2:31:95:55:46:d1:41:e0:4b:33:22: 02:fd:1a:d4:a6:5c:df:10:85:a4:16:98:a3:3e:31:30:c4:51: e2:46:10:45:17:9f:a9:1d:fb:fb:a5:4f:ee:b2:41:8c:13:4d: 49:d1:c2:86:ca:c5:b6:bc:e6:5a:e4:c1:48:67:45:ca:73:31: f4:fc:62:e6:ac:28:f2:4a:7f:ab:e6:c7:bd:a4:5b:6b:01:22: af:4f:79:3d:1e:98:d6:04:f7:18:6e:ad:01:65:59:d4:17:08: 61:fe:d3:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUwNzAzMDYwNzMwWhcNMjUwNzEwMDYwNzMwWjAYMRYwFAYD VQQDEw02ODY2MWUyMy00OTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjjE2d7TXFzb2oYhnOlM/z1Qtp2aeXla02hGhqM6k7i7OshUECO4VK2fMPDz nuPL0lmyZayr93vsQNpMgeyhqdaEaHNAbj55PoR6D+bd7HBE7aw1mu9R/OrlhM51 ZdShtKjhrEZq48R9Cfj17gHrk+XOB/ifOe5kW8rwmoCA3Cj8CXiKNeLLJHlGtBt7 v/Kl6CFvLZyvTx2QqEk/8bdxvyRxtfm41+cAUmlUddxgasjhq8jbEgF5Qpbe/xO1 Vw7tZuQWQhBX1zKQG75ZgznAmnAN03hudN/aqw730AFXMGWtrwS80743dddg1c2l JGZ0MPJkDSz7NF9RCCI3JxYZ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4PGbRW 2iN0PMDkpADaX5HV71t2MB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgYmz1cf53b5Ppz19gqD6ab+pCGZjR1wrMTcwX3C03P9vpD/o1gotK D3rVW45Q28Kmiite9QZSwh5f43O0C8+6JzkwADo741GD5J0c/PXOe9JMIW1JJ6jp GCfvX6K1J6329siCgRBo8ywP16dA2eZBwHw5SfCObZyDDzNIFuzez05vPy/f+vSH RimWhhG+5kC99F6hz6xq4jGVVUbRQeBLMyIC/RrUplzfEIWkFpijPjEwxFHiRhBF F5+pHfv7pU/uskGME01J0cKGysW2vOZa5MFIZ0XKczH0/GLmrCjySn+r5se9pFtr ASKvT3k9HpjWBPcYbq0BZVnUFwhh/tPm -----END CERTIFICATE-----Generated at Thu Jul 3 16:53:36 2025 by rpki-client