$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: AscABRF1HLwXD/9VHQuJKclOwj43B3855iFtt/xgKiU= Subject key identifier: 61:D2:D6:7E:A6:97:7E:83:55:0B:DF:34:2E:1E:11:39:7A:EF:32:C8 Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 06E3 Signing time: Sat 18 Oct 2025 23:26:18 +0000 Manifest this update: Sat 18 Oct 2025 23:26:17 +0000 Manifest next update: Sat 25 Oct 2025 23:26:17 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: mIRkpft8ol/LSAobluIcBdJVWapi+1STOlIPFAp8Szc=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: 3P7zE+Wtx98FiHeFJ5MpJ+Mdyi0A3n8ttsX2hYFO/Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Oct 18 23:26:17 2025 GMT Not After : Oct 25 23:26:17 2025 GMT Subject: CN=68f42219-a3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:3a:1d:6f:b1:05:f0:fc:04:ee:a9:e0:09: 3b:38:49:23:b3:75:3e:2e:48:af:cd:fa:0d:36:ee: 7d:a4:1a:9b:e4:2b:97:97:19:47:76:4a:f0:69:2a: 90:9c:08:2d:26:55:bc:94:89:cb:48:0f:b4:74:51: 52:f9:a3:90:dd:93:ca:04:74:7e:c9:2b:40:63:ba: 01:a7:ce:59:9a:e9:00:d5:2f:da:5d:47:16:00:92: c4:a5:a0:c2:65:5a:59:33:0f:ea:2b:f8:bb:65:ee: 79:07:8a:19:09:de:32:db:c9:ab:65:8d:e8:d7:46: d1:75:e1:bf:73:7f:bb:99:72:fe:be:34:24:60:f5: 28:d5:11:3f:c5:c0:48:73:a6:53:a0:6c:49:40:fe: a2:14:b8:a4:a7:19:a2:57:1a:2a:55:25:9b:c7:de: b1:be:0c:19:de:9c:f1:6a:cb:86:86:cb:37:85:39: dc:cc:83:33:75:c4:bd:cd:30:b9:66:9f:bd:d8:78: 41:23:e7:5f:84:b4:bc:9f:5a:c2:95:77:12:db:28: 03:b0:df:8a:f0:71:87:22:0c:d3:f0:70:a0:85:cc: 8c:06:bb:ae:2e:a5:f7:01:3c:eb:7b:9d:73:bf:b8: 24:ba:1f:fb:96:24:99:cb:55:c6:96:f6:ae:de:2a: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D2:D6:7E:A6:97:7E:83:55:0B:DF:34:2E:1E:11:39:7A:EF:32:C8 X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ca:f3:5e:4e:9a:f3:d9:c8:5c:6a:8d:72:20:1e:f0:d5:f0: 9f:f7:73:ec:88:cd:dd:12:8e:14:03:05:64:cc:16:81:d5:54: d2:13:53:b9:a2:3d:58:c9:c4:79:86:2b:cc:c1:7c:ed:48:b6: 09:e7:28:8f:41:ae:4f:f4:b7:ee:04:86:ff:cb:bc:ab:59:eb: 30:06:48:d7:25:a0:bd:43:fa:5f:ce:98:39:0e:6f:c6:24:b3: 47:6e:5a:18:d9:0c:23:a9:61:4e:3d:a0:5d:96:58:a5:c9:71: af:42:c7:e4:61:98:b8:fa:3a:4c:99:8b:43:fe:83:6e:4a:85: 33:6f:bf:b9:c8:e2:c9:c7:34:0b:e7:e8:ac:0d:48:c3:48:29: 47:15:e0:87:5a:11:ce:a1:e7:74:00:9c:cd:b5:cc:38:24:91: 6a:95:f6:f8:5a:e8:22:3f:76:3b:a8:1d:02:09:40:a2:5e:d0: d4:c5:59:13:0f:1c:27:2d:1b:f4:11:7d:0d:ff:07:cf:ba:50: 69:9c:c9:2a:ac:c8:16:36:2c:b6:0c:22:91:1b:e0:57:1f:6e: ce:3e:78:51:42:9f:3c:63:75:57:6a:6f:f0:e5:c6:3c:9c:75: 0a:67:f8:af:f2:4a:2e:3d:ad:72:d8:d5:90:ae:fe:fe:ea:a0: ea:6a:dd:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUxMDE4MjMyNjE3WhcNMjUxMDI1MjMyNjE3WjAYMRYwFAYD VQQDEw02OGY0MjIxOS1hM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzs6HW+xBfD8BO6p4Ak7OEkjs3U+LkivzfoNNu59pBqb5CuXlxlHdkrwaSqQ nAgtJlW8lInLSA+0dFFS+aOQ3ZPKBHR+yStAY7oBp85ZmukA1S/aXUcWAJLEpaDC ZVpZMw/qK/i7Ze55B4oZCd4y28mrZY3o10bRdeG/c3+7mXL+vjQkYPUo1RE/xcBI c6ZToGxJQP6iFLikpxmiVxoqVSWbx96xvgwZ3pzxasuGhss3hTnczIMzdcS9zTC5 Zp+92HhBI+dfhLS8n1rClXcS2ygDsN+K8HGHIgzT8HCghcyMBruuLqX3ATzre51z v7gkuh/7liSZy1XGlvau3ipbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHS1n6m l36DVQvfNC4eETl67zLIMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdyvNeTprz2chcao1yIB7w1fCf93PsiM3dEo4UAwVkzBaB1VTSE1O5 oj1YycR5hivMwXztSLYJ5yiPQa5P9LfuBIb/y7yrWeswBkjXJaC9Q/pfzpg5Dm/G JLNHbloY2QwjqWFOPaBdllilyXGvQsfkYZi4+jpMmYtD/oNuSoUzb7+5yOLJxzQL 5+isDUjDSClHFeCHWhHOoed0AJzNtcw4JJFqlfb4WugiP3Y7qB0CCUCiXtDUxVkT DxwnLRv0EX0N/wfPulBpnMkqrMgWNiy2DCKRG+BXH27OPnhRQp88Y3VXam/w5cY8 nHUKZ/iv8kouPa1y2NWQrv7+6qDqat34 -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:06 2025 by rpki-client