$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: ebB3CG3SvUj95XJsRNGSPz3xx5U8wEGPNQsfqbhiMs4= Subject key identifier: 69:A5:72:51:CF:FB:F4:F8:9B:FE:0E:A7:E7:47:9C:F8:DA:F7:DB:C0 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: 0170 Signing time: Sun 07 Sep 2025 04:18:15 +0000 Manifest this update: Sun 07 Sep 2025 04:18:15 +0000 Manifest next update: Sun 14 Sep 2025 04:18:15 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: SzTO64Q6dtkwYqN3jxZjgAJjlB0Y6lOQRO43AGOw7C4=) 2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: tkC94LIcazFbktBOOWxjViOTNkAmC8Zs4gf9iesOvuI=) 3: 81D3CB186B7D11F0A482004CC4F9AE02.roa (hash: UKKopt0iwOreSp0uNtTtDqHFVLkM2EYVL8idxsWUjB0=) 4: ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (hash: OcNbuxa2ZSSG1bMP1PQ4GkM3WfcX4kd/s4GUQn4/jaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Sep 7 04:18:15 2025 GMT Not After : Sep 14 04:18:15 2025 GMT Subject: CN=68bd0787-d46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:fd:fb:c9:fa:75:f4:96:9b:3f:cf:8c:08: 5c:61:ad:84:d9:d6:da:e4:f1:ad:63:7f:69:6d:97: 64:2a:31:70:d7:ba:d6:cb:ce:1b:36:fc:10:9e:21: 32:63:c0:3a:5e:eb:17:4c:8d:23:07:99:ef:8b:2f: 0b:f5:1b:9a:bb:ff:07:7c:da:9a:47:4c:cc:33:cb: 62:f6:1e:6c:63:0f:03:be:d9:89:44:e3:7a:60:3d: 45:29:e3:58:d7:5b:6f:99:60:93:14:fb:5e:69:4f: c0:cd:b7:4b:07:d0:14:ad:98:78:b5:aa:47:98:2b: 17:32:53:1f:2d:bc:1a:15:48:f6:65:65:21:d1:c2: 47:bc:87:7c:c1:2c:80:d9:ab:47:13:a5:ac:43:1b: 7f:7c:7a:5b:36:e9:46:ae:7e:1a:a9:04:15:89:4f: f5:ed:0d:fb:5d:89:76:8d:73:d1:84:d2:f0:13:bf: fe:96:e3:86:2f:85:96:bf:bb:86:0f:56:4b:36:a7: 0c:cc:b8:42:07:23:cc:d2:83:b3:84:3a:f7:96:49: 72:79:ae:bb:7a:db:8b:ce:81:6a:8a:83:c8:ca:25: 52:fd:0d:4b:f1:60:72:2f:14:55:e0:3e:98:ff:49: 71:02:78:eb:34:a7:ff:40:9f:4a:4d:49:0e:5e:b1: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A5:72:51:CF:FB:F4:F8:9B:FE:0E:A7:E7:47:9C:F8:DA:F7:DB:C0 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b4:61:d8:a8:7e:11:96:fb:b2:0f:c7:6d:ad:18:ee:b6:9c: 15:e3:c4:f2:5b:03:6b:0c:3e:55:10:83:f3:bd:67:62:12:43: 6d:cf:c0:e0:09:c7:cf:f6:8a:dc:1d:41:21:1a:d1:cd:60:3f: d5:43:5f:cf:65:72:4c:f5:a0:33:da:c2:48:21:73:46:56:57: 86:35:e8:05:db:b5:c1:9f:12:92:a1:cb:d7:22:85:c3:62:41: ef:31:2a:5b:ef:f7:b9:ec:02:bb:a8:e9:49:47:2c:01:12:b7: 2c:2e:b4:e9:a4:1d:88:42:ed:ef:b1:c2:d6:85:f7:db:66:a3: 8c:07:4c:07:a0:21:2b:04:a4:c5:45:fe:15:71:48:a1:d6:24: fa:8f:c6:22:c3:07:aa:51:9d:92:af:27:59:6e:cc:5c:92:32: d1:06:68:8b:7d:e3:ab:3e:3b:b7:0b:77:1c:97:f3:04:67:25: 80:d9:51:b1:bd:6d:0c:43:93:64:c6:f5:97:90:fa:b6:d6:f1: 4e:10:20:1c:fe:33:8b:79:9b:6a:e0:3c:0e:fb:a0:d9:b0:ea: 75:d5:74:45:0d:27:4c:be:16:6a:ad:fa:d7:04:cd:38:42:41: 66:87:b4:07:f6:e1:f5:1e:46:ac:7c:6e:a6:5d:d5:78:21:f0: 04:1a:37:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUwOTA3MDQxODE1WhcNMjUwOTE0MDQxODE1WjAYMRYwFAYD VQQDEw02OGJkMDc4Ny1kNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy439+8n6dfSWmz/PjAhcYa2E2dba5PGtY39pbZdkKjFw17rWy84bNvwQniEy Y8A6XusXTI0jB5nviy8L9Ruau/8HfNqaR0zMM8ti9h5sYw8DvtmJRON6YD1FKeNY 11tvmWCTFPteaU/AzbdLB9AUrZh4tapHmCsXMlMfLbwaFUj2ZWUh0cJHvId8wSyA 2atHE6WsQxt/fHpbNulGrn4aqQQViU/17Q37XYl2jXPRhNLwE7/+luOGL4WWv7uG D1ZLNqcMzLhCByPM0oOzhDr3lklyea67etuLzoFqioPIyiVS/Q1L8WByLxRV4D6Y /0lxAnjrNKf/QJ9KTUkOXrHLJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmlclHP +/T4m/4Op+dHnPja99vAMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJtGHYqH4RlvuyD8dtrRjutpwV48TyWwNrDD5VEIPzvWdiEkNtz8Dg CcfP9orcHUEhGtHNYD/VQ1/PZXJM9aAz2sJIIXNGVleGNegF27XBnxKSocvXIoXD YkHvMSpb7/e57AK7qOlJRywBErcsLrTppB2IQu3vscLWhffbZqOMB0wHoCErBKTF Rf4VcUih1iT6j8YiwweqUZ2SrydZbsxckjLRBmiLfeOrPju3C3ccl/MEZyWA2VGx vW0MQ5NkxvWXkPq21vFOECAc/jOLeZtq4DwO+6DZsOp11XRFDSdMvhZqrfrXBM04 QkFmh7QH9uH1HkasfG6mXdV4IfAEGjdu -----END CERTIFICATE-----Generated at Tue Sep 9 02:17:32 2025 by rpki-client