$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: 89vYKBZ82lUEJtRzvDyzmLMTfSRb+JR6PBD3djVNgjY= Subject key identifier: 8E:9B:14:7C:7F:64:05:35:98:11:D2:E2:58:22:27:39:D8:57:1F:7B Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 06C6 Signing time: Fri 22 Aug 2025 22:14:29 +0000 Manifest this update: Fri 22 Aug 2025 22:14:29 +0000 Manifest next update: Fri 29 Aug 2025 22:14:29 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: qxefEGOAZEP5pdcZrwc1ruhqVNwMjmRksf4BVxcZoRY=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: 3P7zE+Wtx98FiHeFJ5MpJ+Mdyi0A3n8ttsX2hYFO/Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Aug 22 22:14:29 2025 GMT Not After : Aug 29 22:14:29 2025 GMT Subject: CN=68a8ebc5-6654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:1b:73:7b:cd:99:6b:db:bb:ef:4f:b3:74: 20:33:01:fa:95:d3:ab:9f:b3:de:23:ad:3e:6b:e4: 18:74:92:df:cf:e6:82:9e:74:2b:83:0b:41:73:8d: 7c:1f:da:ab:6c:14:31:e2:7e:64:58:94:d9:87:6e: 94:de:59:6a:1d:f6:08:5b:be:97:e8:d3:f2:47:7a: 3d:18:42:1f:eb:81:77:c8:4b:95:82:f1:18:12:8e: 23:e2:4b:e2:a8:61:82:f6:27:84:d2:d9:b9:7c:25: 53:17:db:c6:5e:ce:61:9a:35:f9:85:1c:ad:5a:b3: 3d:32:b5:4e:11:b3:f7:83:09:b2:26:5a:d6:18:e0: f1:4b:47:9c:b9:7b:42:02:9e:d3:ac:42:2e:d9:30: 62:70:fb:5d:32:7a:80:fc:b9:2e:8e:4f:ef:73:55: c7:b5:2a:72:f2:a1:a6:6f:e3:d6:ea:d3:53:12:31: f4:ba:d7:16:63:67:3c:2b:7f:3a:b1:a2:e1:8c:5d: 9f:4d:fc:b3:de:7f:62:ec:73:18:80:67:14:0e:cb: 44:59:9b:69:db:85:64:bc:da:40:fa:7f:98:85:94: 7c:36:88:e2:6f:7f:bf:78:66:7e:84:25:6f:42:46: 41:92:3d:b4:d5:2a:91:f3:66:b4:ea:4a:5d:1c:8a: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:14:7C:7F:64:05:35:98:11:D2:E2:58:22:27:39:D8:57:1F:7B X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3d:61:20:e3:14:9f:a1:9b:6f:af:97:81:09:77:30:53:74: 0b:56:64:c9:9c:8f:28:43:e3:fd:90:41:a6:4a:31:d6:2d:27: 3b:d8:f7:6b:db:cd:51:6a:4b:03:9a:9e:f7:57:98:3d:62:3a: 01:6d:18:85:c1:ba:83:35:70:0f:77:f4:05:a9:b0:53:31:b7: 47:e2:6c:82:ec:d3:c8:d6:ba:8f:d3:99:4b:9d:b1:f0:28:9f: 11:e7:d1:27:4a:5b:72:75:d8:69:04:15:22:23:85:34:d1:ff: f3:d8:6f:6c:97:6d:0a:58:a7:2a:88:14:3c:48:16:7e:b4:6f: ce:db:98:69:50:56:1c:a1:3e:2f:4c:db:82:f7:52:9c:e3:4c: e4:4c:7d:1b:4c:8f:7f:2e:92:4f:29:af:47:f5:81:d6:22:21: 5c:52:b6:dc:38:98:dc:90:46:f8:44:e0:2e:1b:ed:25:49:72: 87:b7:33:ac:7a:b0:ee:c4:73:8d:98:14:dc:a9:39:81:18:9c: 01:0e:95:95:1b:50:47:b4:c4:e9:9d:cc:cf:f2:44:bc:d1:fe: 00:2f:e1:7a:ac:74:d2:b4:6c:b1:2e:25:f1:3e:ed:e5:42:8e: 2a:8f:cb:ba:80:9b:63:17:a8:ea:9d:34:3c:55:44:34:1d:53: 64:af:e5:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUwODIyMjIxNDI5WhcNMjUwODI5MjIxNDI5WjAYMRYwFAYD VQQDEw02OGE4ZWJjNS02NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypUbc3vNmWvbu+9Ps3QgMwH6ldOrn7PeI60+a+QYdJLfz+aCnnQrgwtBc418 H9qrbBQx4n5kWJTZh26U3llqHfYIW76X6NPyR3o9GEIf64F3yEuVgvEYEo4j4kvi qGGC9ieE0tm5fCVTF9vGXs5hmjX5hRytWrM9MrVOEbP3gwmyJlrWGODxS0ecuXtC Ap7TrEIu2TBicPtdMnqA/Lkujk/vc1XHtSpy8qGmb+PW6tNTEjH0utcWY2c8K386 saLhjF2fTfyz3n9i7HMYgGcUDstEWZtp24VkvNpA+n+YhZR8Nojib3+/eGZ+hCVv QkZBkj201SqR82a06kpdHIoedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6bFHx/ ZAU1mBHS4lgiJznYVx97MB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiPWEg4xSfoZtvr5eBCXcwU3QLVmTJnI8oQ+P9kEGmSjHWLSc72Pdr 281RaksDmp73V5g9YjoBbRiFwbqDNXAPd/QFqbBTMbdH4myC7NPI1rqP05lLnbHw KJ8R59EnSltyddhpBBUiI4U00f/z2G9sl20KWKcqiBQ8SBZ+tG/O25hpUFYcoT4v TNuC91Kc40zkTH0bTI9/LpJPKa9H9YHWIiFcUrbcOJjckEb4ROAuG+0lSXKHtzOs erDuxHONmBTcqTmBGJwBDpWVG1BHtMTpnczP8kS80f4AL+F6rHTStGyxLiXxPu3l Qo4qj8u6gJtjF6jqnTQ8VUQ0HVNkr+UO -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:37 2025 by rpki-client