$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: 7BpLVhtndAwNTgm/cks4p3oxCy6WIusBjuZAE65huEg= Subject key identifier: EC:8D:BC:55:27:50:1E:68:33:71:8B:26:46:15:A0:27:34:81:3B:B2 Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 125E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 124E Signing time: Thu 18 Sep 2025 17:16:01 +0000 Manifest this update: Thu 18 Sep 2025 17:16:00 +0000 Manifest next update: Thu 25 Sep 2025 17:16:00 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: /AdHVZ5M7dMxNAnEU0bmd3vEgAU6GmR8ep+5jsB7G+s=) 2: 5EF78FE650FF11F0B4CEA331C4F9AE02.roa (hash: Z62B0jnHVvY2jzsG/dfRq87dnZ8pUku0hBYOhlqYi64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4702 (0x125e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Sep 18 17:16:00 2025 GMT Not After : Sep 25 17:16:00 2025 GMT Subject: CN=68cc3e51-2c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:25:a3:a0:10:99:52:2b:63:eb:3b:2b:ce: 25:e5:c1:26:04:07:f6:6b:28:c7:46:0e:3f:30:e3: be:2b:80:5a:da:27:67:94:df:7e:3a:a7:c8:1d:57: 68:62:c7:45:da:57:28:d7:67:32:8d:db:81:b3:63: 12:92:cf:a0:72:64:22:79:17:f1:4a:30:f2:ac:52: 0e:0d:62:1f:18:a7:8a:d1:35:bb:8a:44:cd:32:0f: 5a:a6:6c:c0:a2:31:4c:bf:0f:39:ca:bf:ba:78:bf: 42:d7:01:c0:51:23:53:04:b3:ee:28:8d:49:31:e7: 2b:3a:69:7c:d4:c7:e2:5e:af:34:00:08:0f:21:92: 23:f1:ec:4f:a6:c8:01:87:68:c4:06:7d:c4:10:cd: c9:b8:2b:90:5a:67:42:ca:aa:37:87:3d:8f:6b:bb: c9:11:cc:9d:8f:1b:f0:27:ac:92:07:ed:7f:58:52: 8e:28:ab:56:3e:88:a6:c9:f6:e3:bb:bc:b2:02:bd: 71:62:97:d0:50:1a:7a:d6:ab:c2:6b:8f:0b:27:3d: 36:1c:e9:8e:64:17:72:63:57:75:3a:0d:b8:fe:a1: 0e:77:2b:ac:1b:60:0d:b1:d9:07:75:40:2c:3f:9e: 6d:c1:ff:b9:4e:9d:7d:f7:7a:55:4d:7e:69:df:c3: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:BC:55:27:50:1E:68:33:71:8B:26:46:15:A0:27:34:81:3B:B2 X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f1:09:66:cc:a4:d2:fb:48:dd:b1:04:e6:f1:7a:3a:e7:42: 8c:6b:c8:f9:1e:ee:a0:34:b1:4f:f7:77:a6:52:2b:5c:f8:74: 42:14:3a:da:82:92:4c:9b:b4:d6:ce:31:c1:88:78:a6:0a:e8: 79:12:71:56:ec:17:01:be:48:b9:c6:52:33:eb:0a:2d:c6:3e: 57:b2:a4:00:c5:d1:9a:00:62:8a:24:88:d3:7f:86:0d:86:da: f3:15:d9:68:e2:f5:a5:6e:59:5d:38:07:7a:aa:70:d7:a3:72: 36:5a:bd:52:bd:56:64:c2:58:65:74:22:83:3a:64:1f:00:0f: 3a:79:0a:5f:a8:14:e2:b9:54:0c:ee:f0:40:74:18:ac:99:76: 22:17:c8:5a:f9:68:c7:d3:ee:05:0c:74:90:34:70:b7:cf:cb: d6:16:d1:57:23:c7:9c:6d:d8:e8:51:6d:23:66:9d:da:99:64: ec:e8:92:a9:96:b3:98:61:cc:44:95:96:d9:c7:e4:91:f0:52: c6:95:0e:2c:8a:a2:6e:2c:c2:44:b6:e7:2b:b1:b9:a2:f4:91: f7:84:6d:13:85:6d:2a:74:e0:f1:ee:fa:b4:68:90:4a:d3:85: 06:f1:12:c4:e3:96:91:f0:3a:e7:b9:cb:4a:da:2b:73:50:7b: 5c:26:dc:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUwOTE4MTcxNjAwWhcNMjUwOTI1MTcxNjAwWjAYMRYwFAYD VQQDEw02OGNjM2U1MS0yYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03klo6AQmVIrY+s7K84l5cEmBAf2ayjHRg4/MOO+K4Ba2idnlN9+OqfIHVdo YsdF2lco12cyjduBs2MSks+gcmQieRfxSjDyrFIODWIfGKeK0TW7ikTNMg9apmzA ojFMvw85yr+6eL9C1wHAUSNTBLPuKI1JMecrOml81MfiXq80AAgPIZIj8exPpsgB h2jEBn3EEM3JuCuQWmdCyqo3hz2Pa7vJEcydjxvwJ6ySB+1/WFKOKKtWPoimyfbj u7yyAr1xYpfQUBp61qvCa48LJz02HOmOZBdyY1d1Og24/qEOdyusG2ANsdkHdUAs P55twf+5Tp1993pVTX5p38PfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyNvFUn UB5oM3GLJkYVoCc0gTuyMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv8QlmzKTS+0jdsQTm8Xo650KMa8j5Hu6gNLFP93emUitc+HRCFDra gpJMm7TWzjHBiHimCuh5EnFW7BcBvki5xlIz6wotxj5XsqQAxdGaAGKKJIjTf4YN htrzFdlo4vWlblldOAd6qnDXo3I2Wr1SvVZkwlhldCKDOmQfAA86eQpfqBTiuVQM 7vBAdBismXYiF8ha+WjH0+4FDHSQNHC3z8vWFtFXI8ecbdjoUW0jZp3amWTs6JKp lrOYYcxElZbZx+SR8FLGlQ4siqJuLMJEtucrsbmi9JH3hG0ThW0qdODx7vq0aJBK 04UG8RLE45aR8DrnuctK2itzUHtcJtzi -----END CERTIFICATE-----Generated at Thu Sep 18 20:36:10 2025 by rpki-client