$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: Pp8T1pgNBz3OT8NPadS2FUFZDZ0ADpw6MOsvGrDCMNQ= Subject key identifier: 43:D7:8A:FA:98:40:51:CA:73:7E:2E:FC:B7:11:4C:D7:B4:94:F6:20 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: CA Signing time: Sun 19 Oct 2025 08:57:32 +0000 Manifest this update: Sun 19 Oct 2025 08:57:31 +0000 Manifest next update: Sun 26 Oct 2025 08:57:31 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: FFiLhaGOyR/HjQ22uOhmVS7zJRsNBNkFJYQN1qFADZ8=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: Axdu2K4689qVzRAgDjbBJHLOdW6HGq6jJhlmKdC7fSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Oct 19 08:57:31 2025 GMT Not After : Oct 26 08:57:31 2025 GMT Subject: CN=68f4a7fc-bebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:c4:29:1e:ae:8b:47:9a:f1:2d:37:d1:49: 66:68:04:56:32:b3:91:f8:c8:8d:c3:e6:a4:11:8c: e8:eb:7c:f8:72:e1:08:68:5e:70:b6:20:3f:0c:9f: 80:a0:70:15:de:43:64:36:ba:f8:1e:0d:4d:a6:22: 9f:56:3d:95:a3:34:6a:6d:c5:8a:be:3b:52:8a:fb: be:81:e2:b1:38:b3:30:e3:d4:cb:36:01:9d:c5:d5: 6a:57:a6:03:78:1f:f3:3f:2c:42:b5:24:11:5d:0a: 1d:58:ba:c5:37:47:16:a7:68:23:59:2a:eb:c5:0d: b0:68:28:37:02:37:d5:db:a3:e0:6c:23:ed:51:e5: 48:2b:8f:9c:55:a5:7e:02:a9:24:b9:fb:cb:cc:ed: bd:f8:3e:56:40:3b:e9:14:19:ae:f2:46:53:46:0a: b4:24:66:7d:85:db:c0:e0:fd:3b:ed:06:cd:73:68: 18:1f:29:f2:22:57:43:29:2d:b7:ad:d5:d7:7f:23: 17:4a:95:8d:34:fa:2a:82:ae:bd:d9:37:73:cc:80: d4:83:76:e2:f4:d1:bb:bf:d5:7b:61:4e:87:68:0e: e1:55:9b:c4:71:06:e8:6c:9f:21:92:32:40:07:c8: b9:63:e8:a6:81:e3:8e:6e:9b:31:fd:b4:8f:12:4a: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:8A:FA:98:40:51:CA:73:7E:2E:FC:B7:11:4C:D7:B4:94:F6:20 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ee:54:f5:da:8a:b3:dc:19:0b:18:60:1f:c6:4f:93:2f:b9: bb:a3:86:aa:1a:f6:6c:d0:49:28:60:ff:50:b2:13:e5:1d:4f: e6:a7:6d:26:7f:da:21:ce:62:dc:6e:47:db:25:e3:13:2b:83: 06:9c:10:c6:3e:34:f8:a1:e7:b8:80:c5:83:2d:aa:a5:ff:5b: ac:a7:ac:ad:c1:a1:0f:28:ed:a0:01:cf:6c:9d:8b:af:f1:b7: fa:2b:0b:f8:60:3c:2c:df:0f:87:bc:48:1d:b1:4e:17:48:a6: 95:e4:ef:8d:2e:8b:83:49:09:c6:c6:d9:76:26:00:04:cb:28: c6:80:d8:9d:71:9b:1b:79:f3:d8:5c:1f:49:33:05:6f:af:13: 0d:c4:7f:70:33:b0:68:08:7d:56:cb:b0:e3:22:f8:29:76:95: 0c:6e:67:13:d2:dc:8c:82:0b:ea:db:09:d8:0b:21:a6:d6:0f: 35:ac:1b:ca:66:1d:2e:a5:e6:ad:8d:7c:c0:77:3b:dc:b7:2c: ab:eb:8a:6f:9b:c7:c2:35:06:a6:fa:4d:41:a0:14:bf:44:b4: db:28:ba:fa:b6:8c:8c:8d:50:d8:ab:9f:4b:53:66:90:05:d2: 39:98:03:6a:32:0f:01:9b:be:32:ab:fb:2f:15:85:8c:ee:1c: 8d:73:67:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUxMDE5MDg1NzMxWhcNMjUxMDI2MDg1NzMxWjAYMRYwFAYD VQQDEw02OGY0YTdmYy1iZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfTEKR6ui0ea8S030UlmaARWMrOR+MiNw+akEYzo63z4cuEIaF5wtiA/DJ+A oHAV3kNkNrr4Hg1NpiKfVj2VozRqbcWKvjtSivu+geKxOLMw49TLNgGdxdVqV6YD eB/zPyxCtSQRXQodWLrFN0cWp2gjWSrrxQ2waCg3AjfV26PgbCPtUeVIK4+cVaV+ AqkkufvLzO29+D5WQDvpFBmu8kZTRgq0JGZ9hdvA4P077QbNc2gYHynyIldDKS23 rdXXfyMXSpWNNPoqgq692TdzzIDUg3bi9NG7v9V7YU6HaA7hVZvEcQbobJ8hkjJA B8i5Y+imgeOObpsx/bSPEkqjDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPXivqY QFHKc34u/LcRTNe0lPYgMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC7lT12oqz3BkLGGAfxk+TL7m7o4aqGvZs0EkoYP9QshPlHU/mp20m f9ohzmLcbkfbJeMTK4MGnBDGPjT4oee4gMWDLaql/1usp6ytwaEPKO2gAc9snYuv 8bf6Kwv4YDws3w+HvEgdsU4XSKaV5O+NLouDSQnGxtl2JgAEyyjGgNidcZsbefPY XB9JMwVvrxMNxH9wM7BoCH1Wy7DjIvgpdpUMbmcT0tyMggvq2wnYCyGm1g81rBvK Zh0upeatjXzAdzvctyyr64pvm8fCNQam+k1BoBS/RLTbKLr6toyMjVDYq59LU2aQ BdI5mANqMg8Bm74yq/svFYWM7hyNc2fb -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:17 2025 by rpki-client