$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: 5MxliIaH405IESOCr1TJ0qO2gbX6UWvHmKcxP/Ac/jw= Subject key identifier: 36:22:25:67:C3:0D:03:F6:0E:17:35:56:55:67:90:4B:A2:D8:66:DB Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 30C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 30C8 Signing time: Sun 02 Nov 2025 15:26:11 +0000 Manifest this update: Sun 02 Nov 2025 15:26:11 +0000 Manifest next update: Sun 09 Nov 2025 15:26:11 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: cv2JJen16YfjQVKgORB4jjlUJMHIYMIL8vcExr+RKG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12489 (0x30c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Nov 2 15:26:11 2025 GMT Not After : Nov 9 15:26:11 2025 GMT Subject: CN=69077813-634b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:94:0f:60:b2:f1:a9:ad:ca:86:be:d2:9c: 22:69:d9:12:d7:b7:5b:9e:ae:53:08:a7:5c:f0:90: 6d:27:81:c3:9f:80:96:54:28:03:1a:03:6d:9b:85: 40:40:45:d4:79:64:47:29:1f:a3:14:03:5d:04:83: 8a:20:91:8a:ff:d9:a9:ee:f8:cc:7a:36:54:01:4a: 78:75:0d:3f:15:5f:46:ee:12:6a:d2:7a:75:78:9a: ed:67:c5:bc:1a:ed:ae:ad:4b:be:bf:89:0f:b7:b7: ee:90:84:d1:fc:fc:68:ca:6f:3e:69:c7:6e:71:dc: fb:34:c5:a0:77:d6:65:fa:7e:28:ca:08:43:16:7b: f5:03:ee:4d:03:d4:43:4b:c2:5c:09:db:26:4a:e8: fe:fc:e7:cf:18:e6:74:fc:8d:24:b3:58:9a:27:75: 1e:48:51:aa:23:d1:88:f3:10:7b:06:3c:e6:71:3e: 23:d3:b2:53:80:6b:76:d9:9d:91:1f:ba:e2:7d:ae: d9:ca:e5:03:30:6e:d4:86:ba:b2:e2:28:1d:15:10: bc:29:a7:20:59:48:86:1c:9e:2a:ea:a2:9a:92:34: b6:e6:6f:36:58:fc:39:eb:51:6d:7d:a1:18:9d:ae: 7f:8c:00:06:5d:87:06:b5:45:f3:93:d8:49:08:6b: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:25:67:C3:0D:03:F6:0E:17:35:56:55:67:90:4B:A2:D8:66:DB X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:25:67:d6:8a:7b:a0:ca:15:fb:2f:b4:ba:dd:57:cb:79:cc: 06:16:e5:8c:c8:7a:0a:7e:f2:a3:28:1c:e5:0f:3b:27:e8:df: d5:a7:77:95:58:7c:c4:29:d7:a0:eb:3a:10:cd:e7:25:5d:54: 51:d4:7c:8a:7c:8a:72:92:96:5b:d4:65:44:8b:5b:57:2e:a8: 66:a0:0e:3d:84:d8:dd:b4:ed:30:b6:d0:fa:bf:3a:6e:6a:e2: 5a:55:75:67:0c:28:e1:b8:e1:55:b3:ac:29:9f:db:c3:21:b2: 36:b0:51:33:8a:76:23:0e:2d:ab:30:4f:15:f0:6a:4f:71:84: 41:1a:a8:cf:21:51:64:4b:f9:34:fd:be:b3:d5:89:0e:3b:d2: b6:79:c3:50:e2:9a:85:48:74:6e:b5:dc:49:69:d8:6d:92:01: 55:0a:5b:4e:34:72:7a:65:55:b9:ab:93:80:34:1f:00:1d:3b: 27:1d:a2:dd:40:23:46:19:30:2d:49:22:2c:a5:39:72:c7:17: ff:90:55:5e:ef:71:91:17:f0:30:38:59:38:7b:4b:25:d3:59: b5:8e:8c:21:06:44:f0:3c:d8:49:ea:50:b3:a6:3a:dd:88:8c: 31:20:a3:0f:75:9d:57:33:6f:e6:f2:a5:5e:c8:f4:a7:7a:20: 06:1a:7f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUxMTAyMTUyNjExWhcNMjUxMTA5MTUyNjExWjAYMRYwFAYD VQQDEw02OTA3NzgxMy02MzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAyUD2Cy8amtyoa+0pwiadkS17dbnq5TCKdc8JBtJ4HDn4CWVCgDGgNtm4VA QEXUeWRHKR+jFANdBIOKIJGK/9mp7vjMejZUAUp4dQ0/FV9G7hJq0np1eJrtZ8W8 Gu2urUu+v4kPt7fukITR/Pxoym8+acducdz7NMWgd9Zl+n4oyghDFnv1A+5NA9RD S8JcCdsmSuj+/OfPGOZ0/I0ks1iaJ3UeSFGqI9GI8xB7BjzmcT4j07JTgGt22Z2R H7rifa7ZyuUDMG7Uhrqy4igdFRC8KacgWUiGHJ4q6qKakjS25m82WPw561FtfaEY na5/jAAGXYcGtUXzk9hJCGvg7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYiJWfD DQP2Dhc1VlVnkEui2GbbMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJWfWinugyhX7L7S63VfLecwGFuWMyHoKfvKjKBzlDzsn6N/Vp3eV WHzEKdeg6zoQzeclXVRR1HyKfIpykpZb1GVEi1tXLqhmoA49hNjdtO0wttD6vzpu auJaVXVnDCjhuOFVs6wpn9vDIbI2sFEzinYjDi2rME8V8GpPcYRBGqjPIVFkS/k0 /b6z1YkOO9K2ecNQ4pqFSHRutdxJadhtkgFVCltONHJ6ZVW5q5OANB8AHTsnHaLd QCNGGTAtSSIspTlyxxf/kFVe73GRF/AwOFk4e0sl01m1jowhBkTwPNhJ6lCzpjrd iIwxIKMPdZ1XM2/m8qVeyPSneiAGGn+q -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:15 2025 by rpki-client