$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: WUDJh9SHes34gAaUDvmqW9hIZbvHqxqDb5nkXPblbaM= Subject key identifier: DF:10:2A:5E:3D:08:19:48:F3:A9:43:04:13:29:AD:76:1F:9B:D2:24 Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 96 Signing time: Tue 09 Sep 2025 06:32:33 +0000 Manifest this update: Tue 09 Sep 2025 06:32:32 +0000 Manifest next update: Tue 16 Sep 2025 06:32:32 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: 8Un2O7WBopB8TWz8kIVdIdc2XSxQVkCjyKvfiYPawjs=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Sep 9 06:32:32 2025 GMT Not After : Sep 16 06:32:32 2025 GMT Subject: CN=68bfca00-2a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:79:cf:8c:3a:e3:72:fd:d5:b7:13:1a:49: f8:ff:05:99:b1:4c:a8:df:88:b9:73:a8:e3:20:36: 6e:1f:22:7f:a5:53:0b:4d:db:9b:b8:a8:98:6a:4f: 15:25:b9:2f:94:06:fe:b7:f8:4f:3c:80:91:9c:c0: 21:6b:4e:97:d7:b7:56:f3:8c:e4:08:f4:11:46:7e: c1:5c:75:57:ee:b5:08:42:2e:15:c5:c5:5d:19:9a: 25:6e:3b:6e:cc:16:2a:48:4a:5e:75:8a:1f:51:f7: d0:87:2a:bb:e4:f7:87:5b:74:a9:9f:9c:7e:96:e1: b5:e5:77:9e:bd:e0:f4:e8:a5:6c:c3:6a:3f:db:1c: 7d:b4:aa:97:38:0f:8f:6e:49:c6:69:f1:d1:02:5f: f9:8b:b6:70:71:54:e7:f0:21:ff:7c:0e:dc:9c:22: ef:24:58:c6:47:7a:a6:48:55:58:cf:f1:1d:fb:fb: 8a:ba:44:93:14:90:1a:02:84:38:b4:02:7f:c1:db: 5e:29:19:08:14:88:5e:a9:4f:d7:ba:64:00:53:93: 0e:0c:7e:bf:8a:d1:e7:55:40:ca:93:b6:da:bc:78: ee:2d:21:fb:8c:70:fa:2f:2c:bd:e3:b8:08:56:b5: 8d:e9:c5:df:f2:83:3f:d4:56:b8:00:1d:5b:7a:08: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:2A:5E:3D:08:19:48:F3:A9:43:04:13:29:AD:76:1F:9B:D2:24 X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0f:69:bd:86:29:fc:33:04:91:60:95:12:ca:45:a4:2a:ca: 24:de:3d:1f:f6:f7:44:3e:e1:e0:d0:04:b1:57:51:45:7b:54: a5:c1:19:67:d1:ee:62:1f:97:54:00:fe:7f:d9:73:d4:4a:64: 9b:a1:2c:2d:f2:d2:b9:84:95:a0:f5:81:68:90:ab:3d:93:98: 3a:92:dd:fd:0c:71:be:39:24:7d:57:fb:33:76:32:f3:d3:ca: 7e:a3:b2:5a:76:3d:5a:6b:8d:26:e5:54:01:d1:a5:dd:a7:f9: 6b:fe:e4:56:c5:98:02:6e:63:fa:6d:51:4f:c6:92:a1:54:56: 03:64:27:5f:65:c3:26:45:82:1a:f7:31:3d:1d:9c:c0:e5:55: 06:82:69:fd:c2:0e:bf:e1:10:83:67:68:88:4a:6c:60:94:ce: bd:a3:55:48:6d:66:bf:1d:85:ce:10:49:19:01:bf:63:38:8a: 30:61:f0:9d:2f:23:a3:64:19:3a:08:4d:9b:e0:00:ab:f3:73: 13:5b:f9:9f:19:49:03:22:05:bd:2a:d1:30:9e:d2:58:77:d0: 03:dc:29:66:bd:31:c5:5c:13:cc:bb:fa:e2:b0:bb:9c:d8:49: 39:92:cb:08:e9:9e:47:5c:0c:08:57:e5:5c:3b:dc:81:e7:db: 5a:70:71:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4 OUM1ODcyQTQwHhcNMjUwOTA5MDYzMjMyWhcNMjUwOTE2MDYzMjMyWjAYMRYwFAYD VQQDEw02OGJmY2EwMC0yYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHt5z4w643L91bcTGkn4/wWZsUyo34i5c6jjIDZuHyJ/pVMLTdubuKiYak8V JbkvlAb+t/hPPICRnMAha06X17dW84zkCPQRRn7BXHVX7rUIQi4VxcVdGZolbjtu zBYqSEpedYofUffQhyq75PeHW3Spn5x+luG15XeeveD06KVsw2o/2xx9tKqXOA+P bknGafHRAl/5i7ZwcVTn8CH/fA7cnCLvJFjGR3qmSFVYz/Ed+/uKukSTFJAaAoQ4 tAJ/wdteKRkIFIheqU/XumQAU5MODH6/itHnVUDKk7bavHjuLSH7jHD6Lyy947gI VrWN6cXf8oM/1Fa4AB1beggHZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8QKl49 CBlI86lDBBMprXYfm9IkMB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha Rk1mbUtGM3B4V2FKeFljcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADD2m9hin8MwSRYJUSykWkKsok3j0f9vdEPuHg0ASxV1FFe1SlwRln 0e5iH5dUAP5/2XPUSmSboSwt8tK5hJWg9YFokKs9k5g6kt39DHG+OSR9V/szdjLz 08p+o7Jadj1aa40m5VQB0aXdp/lr/uRWxZgCbmP6bVFPxpKhVFYDZCdfZcMmRYIa 9zE9HZzA5VUGgmn9wg6/4RCDZ2iISmxglM69o1VIbWa/HYXOEEkZAb9jOIowYfCd LyOjZBk6CE2b4ACr83MTW/mfGUkDIgW9KtEwntJYd9AD3ClmvTHFXBPMu/risLuc 2Ek5kssI6Z5HXAwIV+VcO9yB59tacHGT -----END CERTIFICATE-----Generated at Tue Sep 9 20:25:54 2025 by rpki-client