$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: fG4qMSGwc9S16lW//ztjh5ql1BIXVJmcmxJ/Fqak+Hg= Subject key identifier: 7E:4A:1A:BE:E6:B3:26:3F:E4:D4:2F:11:A5:5E:0B:B6:D4:5B:11:72 Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 30C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 30C0 Signing time: Sat 18 Oct 2025 15:37:17 +0000 Manifest this update: Sat 18 Oct 2025 15:37:16 +0000 Manifest next update: Sat 25 Oct 2025 15:37:16 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: 8A4KXFQimnp43uHNR1Lkvsd/AfTrz+QZ7csBjvPwsxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12481 (0x30c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Oct 18 15:37:16 2025 GMT Not After : Oct 25 15:37:16 2025 GMT Subject: CN=68f3b42d-97c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:13:c6:d6:40:b8:ce:fc:a8:4e:c9:8c:12: 7c:a5:f9:a6:57:20:7e:a0:72:f1:d8:44:ac:4e:4f: 57:4e:7f:ba:53:41:5d:30:e7:67:e0:c2:fc:55:5d: 82:f8:29:a7:60:7f:fe:84:26:df:78:12:bd:3d:d3: 0b:cd:df:64:da:d8:26:68:e5:9e:d9:bf:3f:e1:ae: 2a:6f:5d:70:86:38:ac:82:3a:79:3d:be:cf:2e:79: e6:15:47:1a:20:62:12:bf:e5:8a:46:b0:47:05:a0: 23:ab:4c:89:28:10:a8:53:d6:89:ff:c9:ec:0f:f6: cd:9e:e4:43:40:b9:e7:1f:89:b4:61:02:c9:a7:fd: ec:48:6e:ff:8e:80:ff:df:44:4f:51:33:fa:64:79: f0:ba:df:5a:5e:be:77:cd:b8:77:ba:64:64:a7:a7: e3:ec:14:a9:c2:da:7b:32:ec:04:9b:44:4d:f2:d4: 29:05:b7:6f:fc:28:58:40:16:c8:05:58:e9:f7:59: 8b:15:62:29:62:38:8e:50:4d:4f:98:3b:07:2f:53: 9d:cf:14:77:71:06:4f:4c:23:fe:99:d0:96:60:a5: 2a:f9:3c:ab:ea:49:1c:a3:c1:b9:e3:e6:51:d6:f8: e6:14:77:f4:fd:80:44:13:da:63:28:cb:f1:c9:0f: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:1A:BE:E6:B3:26:3F:E4:D4:2F:11:A5:5E:0B:B6:D4:5B:11:72 X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:df:ef:f2:e5:b7:7b:ba:ff:36:63:cf:28:52:e7:3a:a5:04: 61:8e:27:9c:01:42:50:92:50:00:0c:8d:e8:e1:59:dc:02:66: dd:5b:84:dd:14:90:75:4e:ab:a4:f4:5e:17:be:a7:57:ca:c3: 05:8c:a2:75:2b:94:4e:57:0e:cc:51:86:da:05:ba:06:c1:20: 72:81:0c:57:7a:bc:00:40:0e:80:ec:26:86:92:bc:87:ff:6b: 2d:e0:25:37:da:31:04:ae:58:6e:2b:c9:e2:9c:41:27:ba:9a: bb:82:9e:07:0d:2b:f9:2d:f1:6d:79:17:15:e5:2b:d6:ce:7a: c9:53:d2:f2:7f:cd:7b:98:4e:a1:37:6d:78:4b:da:e2:36:ee: ec:95:18:bd:47:a8:0f:13:6d:c7:6e:03:57:a6:a5:b8:03:a4: 25:e2:a2:7d:3a:67:fa:8d:f1:56:21:67:22:18:76:c3:a3:3c: 9c:bf:f0:0a:a2:6f:0d:91:62:44:71:ae:88:8d:97:af:6b:9e: c8:24:78:8c:6b:ed:f5:b1:e5:ec:ed:4a:3d:99:e4:f8:29:8a: 8b:df:12:e8:da:c7:64:e9:54:85:f4:b6:f6:22:58:e3:e2:cd: c8:4d:1d:4c:f2:23:7a:17:1e:57:21:ab:6c:bb:bd:a6:f8:a9: bf:78:47:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUxMDE4MTUzNzE2WhcNMjUxMDI1MTUzNzE2WjAYMRYwFAYD VQQDEw02OGYzYjQyZC05N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuMTxtZAuM78qE7JjBJ8pfmmVyB+oHLx2ESsTk9XTn+6U0FdMOdn4ML8VV2C +CmnYH/+hCbfeBK9PdMLzd9k2tgmaOWe2b8/4a4qb11whjisgjp5Pb7PLnnmFUca IGISv+WKRrBHBaAjq0yJKBCoU9aJ/8nsD/bNnuRDQLnnH4m0YQLJp/3sSG7/joD/ 30RPUTP6ZHnwut9aXr53zbh3umRkp6fj7BSpwtp7MuwEm0RN8tQpBbdv/ChYQBbI BVjp91mLFWIpYjiOUE1PmDsHL1OdzxR3cQZPTCP+mdCWYKUq+Tyr6kkco8G54+ZR 1vjmFHf0/YBEE9pjKMvxyQ8c2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5KGr7m syY/5NQvEaVeC7bUWxFyMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT3+/y5bd7uv82Y88oUuc6pQRhjiecAUJQklAADI3o4VncAmbdW4Td FJB1Tquk9F4XvqdXysMFjKJ1K5ROVw7MUYbaBboGwSBygQxXerwAQA6A7CaGkryH /2st4CU32jEErlhuK8ninEEnupq7gp4HDSv5LfFteRcV5SvWznrJU9Lyf817mE6h N214S9riNu7slRi9R6gPE23HbgNXpqW4A6Ql4qJ9Omf6jfFWIWciGHbDozycv/AK om8NkWJEca6IjZeva57IJHiMa+31seXs7Uo9meT4KYqL3xLo2sdk6VSF9Lb2Iljj 4s3ITR1M8iN6Fx5XIatsu72m+Km/eEd6 -----END CERTIFICATE-----Generated at Mon Oct 20 14:03:38 2025 by rpki-client