$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: TA5WlVlZ6zssIiAU3FkK2kHUuJWD50eUhk1ySt8S7nM= Subject key identifier: 23:AE:D7:8F:5F:B2:1E:CE:54:30:C4:DD:8D:52:AB:24:06:A9:C8:69 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 99 Signing time: Mon 21 Jul 2025 06:34:36 +0000 Manifest this update: Mon 21 Jul 2025 06:34:36 +0000 Manifest next update: Mon 28 Jul 2025 06:34:36 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: k4biSZeUhTatDVnxBf0qQeK7U3BFSoFPD0CqS+ehA7Y=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: 4A6837A4CE0C11EF8EFFF140C4F9AE02.roa (hash: HwJfMTQ7jgg3uM77Aihq1iVX6drdh4vJBA8hbyppq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Jul 21 06:34:36 2025 GMT Not After : Jul 28 06:34:36 2025 GMT Subject: CN=687ddf7c-f75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:37:40:d2:51:4d:aa:89:fe:86:4a:c5:ff:a8: 53:c6:71:72:89:48:57:85:bb:47:f7:ab:e5:75:8b: 03:33:d5:19:76:f3:21:d5:83:7c:85:04:e9:fa:4a: 98:02:a4:fc:50:7b:4c:35:48:26:9b:1d:ef:9a:36: 9e:11:f6:6a:6e:1b:0a:86:33:86:e9:67:68:42:ae: 8d:fc:76:ee:94:40:fc:73:b1:8d:bd:64:4a:7a:de: 8f:d0:de:fb:12:57:a6:aa:23:fd:de:7a:50:b9:93: 6b:48:72:c6:8b:04:05:0f:43:fd:6c:ff:cc:c4:75: a2:c2:8e:b8:6f:85:8b:da:2c:90:d1:98:87:86:e6: 57:9e:89:c5:eb:77:0c:79:ee:fb:46:3c:72:73:2c: 7f:ae:a0:d9:ee:9c:07:5a:3a:7b:86:b6:ec:8c:4a: 72:cf:90:bd:b3:c6:65:2c:ac:55:54:00:ca:ca:2c: 10:af:bb:95:0b:77:68:29:b6:12:e6:44:88:e0:51: 7c:80:ff:31:be:a0:d1:69:ce:b9:91:f9:af:ed:9e: e3:da:22:c3:0b:be:7c:fd:ca:57:b1:db:0b:3c:e9: 8e:3a:8a:70:0b:60:4e:d7:75:d7:ea:55:b5:3e:4b: f5:b8:8b:0f:d9:53:f4:cf:c1:97:6b:38:be:40:f4: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AE:D7:8F:5F:B2:1E:CE:54:30:C4:DD:8D:52:AB:24:06:A9:C8:69 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0f:67:a3:c8:5d:4b:16:d6:ac:e5:95:09:86:5b:6d:6c:be: 59:6a:f4:08:7b:31:5f:c1:53:c8:ba:ca:88:6d:22:16:53:01: b3:b0:90:b4:28:46:8d:1d:b6:96:c3:e2:b2:38:6e:64:3b:1f: 8d:b9:c7:45:b8:2f:f5:ab:9e:2b:6c:cc:c6:81:52:2b:39:82: 36:d0:ec:e4:c6:bf:e2:09:e5:fe:0d:7c:b2:08:c8:e8:3d:74: 8e:87:d3:03:90:ad:f2:55:af:15:3d:9b:de:19:84:3d:78:e0: 8c:07:ed:44:94:61:c2:96:21:cd:40:ea:44:03:9a:78:b6:14: 89:79:89:a4:2b:f5:58:1d:53:e0:73:cb:da:98:29:84:b0:22: 61:fc:8c:d7:2e:71:6f:f8:64:f9:cc:b1:f5:04:e8:f8:92:7f: 57:81:2c:32:b8:46:e0:07:72:ec:2f:07:42:49:ee:dc:72:85: f5:95:b9:51:c7:c6:3a:fd:28:f9:a9:1e:c4:5a:83:bc:4c:97: 72:ce:3d:12:a1:98:73:a9:1d:ce:21:0a:41:80:c7:bb:c6:a0: 6d:5e:84:96:fb:60:49:48:99:de:db:7a:80:58:71:de:a5:9c: 94:7c:d7:d7:06:8a:23:23:4c:e5:47:cd:b0:1e:b8:39:49:19: eb:d3:f8:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUwNzIxMDYzNDM2WhcNMjUwNzI4MDYzNDM2WjAYMRYwFAYD VQQDEw02ODdkZGY3Yy1mNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TdA0lFNqon+hkrF/6hTxnFyiUhXhbtH96vldYsDM9UZdvMh1YN8hQTp+kqY AqT8UHtMNUgmmx3vmjaeEfZqbhsKhjOG6WdoQq6N/HbulED8c7GNvWRKet6P0N77 ElemqiP93npQuZNrSHLGiwQFD0P9bP/MxHWiwo64b4WL2iyQ0ZiHhuZXnonF63cM ee77Rjxycyx/rqDZ7pwHWjp7hrbsjEpyz5C9s8ZlLKxVVADKyiwQr7uVC3doKbYS 5kSI4FF8gP8xvqDRac65kfmv7Z7j2iLDC758/cpXsdsLPOmOOopwC2BO13XX6lW1 Pkv1uIsP2VP0z8GXazi+QPRLxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOu149f sh7OVDDE3Y1SqyQGqchpMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+D2ejyF1LFtas5ZUJhlttbL5ZavQIezFfwVPIusqIbSIWUwGzsJC0 KEaNHbaWw+KyOG5kOx+NucdFuC/1q54rbMzGgVIrOYI20Ozkxr/iCeX+DXyyCMjo PXSOh9MDkK3yVa8VPZveGYQ9eOCMB+1ElGHCliHNQOpEA5p4thSJeYmkK/VYHVPg c8vamCmEsCJh/IzXLnFv+GT5zLH1BOj4kn9XgSwyuEbgB3LsLwdCSe7ccoX1lblR x8Y6/Sj5qR7EWoO8TJdyzj0SoZhzqR3OIQpBgMe7xqBtXoSW+2BJSJne23qAWHHe pZyUfNfXBoojI0zlR82wHrg5SRnr0/iY -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:54 2025 by rpki-client