$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: 6mC6H1yOeJncEaKdFYD3rT2axnUKGny42qHFD6zo5zw= Subject key identifier: 3A:49:AA:1C:33:47:A7:29:E6:7C:4D:D7:B8:85:FE:74:9A:18:FE:BE Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0B99 Signing time: Sat 18 Oct 2025 19:50:41 +0000 Manifest this update: Sat 18 Oct 2025 19:50:40 +0000 Manifest next update: Sat 25 Oct 2025 19:50:40 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: gOsONvWcVRKcI9oJjjwc7J5+jS/gepn3CpnurYf4y2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Oct 18 19:50:40 2025 GMT Not After : Oct 25 19:50:40 2025 GMT Subject: CN=68f3ef91-1891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:0d:e6:35:a6:41:96:f1:5f:1e:66:16:fb: c4:d4:dd:35:ff:2a:7d:50:b2:48:02:25:fb:e7:0a: c9:de:c8:cd:f7:a9:cd:03:7b:18:aa:da:54:d3:92: 80:2e:c4:b0:96:5a:b6:3d:88:6a:0a:aa:94:ef:9f: 3d:ba:1c:06:1e:ee:64:d7:2a:db:34:58:0c:d7:2b: 3c:83:fe:e9:72:74:55:50:5d:d3:17:16:5c:9f:79: 36:f8:b0:b9:ba:3e:33:08:04:92:9f:c3:73:f7:70: fd:56:f6:65:92:87:cf:50:20:5a:c9:f0:56:07:ce: 90:cb:c8:01:f3:97:8a:40:e2:ad:05:56:1e:4d:ba: 15:ed:8b:e8:cc:99:e3:d5:aa:65:f8:e3:19:97:22: 38:54:5a:5b:39:62:32:4d:d0:95:96:30:8b:dd:e0: 1e:4c:6b:8a:5d:5e:d8:2f:e6:ba:2f:f0:b0:2b:4e: b1:e5:70:f7:de:58:a8:23:66:1c:5c:eb:4f:4c:83: 62:46:75:94:db:89:b8:29:20:3f:86:fa:31:91:1e: 82:3b:ef:7b:9c:9d:41:48:4d:63:20:02:d3:21:03: 5c:d0:ed:46:d4:0c:b5:29:4f:84:5d:a8:1f:9b:b0: d5:6d:20:eb:b1:e3:3f:57:f0:ba:fb:4c:29:89:7c: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:49:AA:1C:33:47:A7:29:E6:7C:4D:D7:B8:85:FE:74:9A:18:FE:BE X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:8d:2b:40:48:d8:af:a8:9a:1e:a3:2d:ee:d2:eb:91:83:05: 15:6b:a0:1b:9a:fa:9b:23:f1:72:21:d0:fb:63:55:39:e7:90: 0f:2e:34:db:9f:76:ab:0e:44:7c:ea:5a:33:20:87:c9:a9:75: 2c:3d:5e:71:17:48:f7:1c:a8:52:13:b6:10:e2:2d:58:5b:c3: 0d:88:a0:b2:5e:69:00:6e:64:f2:1f:3e:72:5b:f4:4a:08:38: 90:60:a9:93:d9:98:fb:77:d1:2e:cf:ed:dc:41:f4:d3:ff:ad: 16:12:82:cf:a6:4e:1b:5c:80:58:2c:40:c3:00:f2:cb:ed:4a: 92:9c:c2:aa:cf:79:42:4f:ce:39:9b:3c:78:a4:89:ba:55:94: 3c:d2:6d:33:6e:96:f9:57:af:e4:f3:23:75:8e:e9:a2:da:56: 69:84:41:b7:d8:dd:71:2d:5f:46:f3:43:8a:bc:f7:5b:8e:96: 91:e9:54:70:cf:35:3e:05:44:a3:ec:fc:97:d6:d0:a4:31:b4: e1:ef:4c:75:95:e8:4f:a2:ea:3a:43:ca:81:a5:f0:6a:1e:6c: ae:00:b5:92:a8:8a:1f:ee:d6:83:cb:4a:dd:3d:17:17:46:2b: c3:08:16:c2:6f:ce:a0:06:a8:20:e6:a1:05:87:6a:6e:48:ac: e6:12:1f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUxMDE4MTk1MDQwWhcNMjUxMDI1MTk1MDQwWjAYMRYwFAYD VQQDEw02OGYzZWY5MS0xODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfIN5jWmQZbxXx5mFvvE1N01/yp9ULJIAiX75wrJ3sjN96nNA3sYqtpU05KA LsSwllq2PYhqCqqU7589uhwGHu5k1yrbNFgM1ys8g/7pcnRVUF3TFxZcn3k2+LC5 uj4zCASSn8Nz93D9VvZlkofPUCBayfBWB86Qy8gB85eKQOKtBVYeTboV7YvozJnj 1apl+OMZlyI4VFpbOWIyTdCVljCL3eAeTGuKXV7YL+a6L/CwK06x5XD33lioI2Yc XOtPTINiRnWU24m4KSA/hvoxkR6CO+97nJ1BSE1jIALTIQNc0O1G1Ay1KU+EXagf m7DVbSDrseM/V/C6+0wpiXx2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpJqhwz R6cp5nxN17iF/nSaGP6+MB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZjStASNivqJoeoy3u0uuRgwUVa6AbmvqbI/FyIdD7Y1U555APLjTb n3arDkR86lozIIfJqXUsPV5xF0j3HKhSE7YQ4i1YW8MNiKCyXmkAbmTyHz5yW/RK CDiQYKmT2Zj7d9Euz+3cQfTT/60WEoLPpk4bXIBYLEDDAPLL7UqSnMKqz3lCT845 mzx4pIm6VZQ80m0zbpb5V6/k8yN1jumi2lZphEG32N1xLV9G80OKvPdbjpaR6VRw zzU+BUSj7PyX1tCkMbTh70x1lehPouo6Q8qBpfBqHmyuALWSqIof7taDy0rdPRcX RivDCBbCb86gBqgg5qEFh2puSKzmEh/d -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:26 2025 by rpki-client