$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: X8U0FWbQIEU2oa1tEawtC2mpxykp8ZB7zQJLhiBOSe0= Subject key identifier: DE:F6:FB:F9:AC:A0:B4:F3:59:7E:9C:DE:09:5C:A4:D4:1F:07:EF:D6 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0B7D Signing time: Sun 24 Aug 2025 19:02:00 +0000 Manifest this update: Sun 24 Aug 2025 19:01:59 +0000 Manifest next update: Sun 31 Aug 2025 19:01:59 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: Mi0YkcR1SpESCxwO6Hj+2zVyZGPTOSj6KbxTmRXtkOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Aug 24 19:01:59 2025 GMT Not After : Aug 31 19:01:59 2025 GMT Subject: CN=68ab61a8-81ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:6e:65:60:c3:4e:8b:48:8c:cc:67:e9:e4: 2b:20:d3:dc:fe:de:66:df:2a:48:7c:77:7d:78:ea: 0a:f1:da:f8:f6:4a:bd:2f:61:11:72:2b:76:ab:68: 72:1f:aa:b8:b6:7c:d6:cb:7c:7f:c5:dc:40:46:33: 7c:29:48:b7:47:38:0a:75:ea:da:68:58:66:36:d6: 58:df:0f:ec:bb:88:c0:e1:30:b8:e5:45:e3:85:2a: 58:44:57:5d:45:01:ef:7c:87:99:6f:f8:77:7c:f8: af:2a:41:b5:d8:c0:a0:12:d6:60:03:2e:ee:f3:72: cb:2d:c5:aa:31:ef:3c:95:76:53:d6:cd:c2:44:f5: ad:42:53:63:29:95:23:84:56:cd:a9:16:e5:ac:07: fd:fc:1f:57:33:89:b6:f9:8d:7e:81:f9:d0:95:22: 0d:6a:3a:43:18:4e:f9:29:ab:2b:62:39:0b:a6:f0: 2a:8c:59:d7:8e:a2:05:09:e7:04:c3:57:c5:a9:df: f7:5c:e9:ad:7a:83:28:b6:82:2b:82:26:4a:d1:a2: 6a:a8:c7:d2:09:c1:d1:34:1d:ab:44:74:77:b1:de: f3:3a:ef:8a:a8:5e:79:33:45:de:32:4a:aa:ae:b5: d4:23:59:f0:52:61:59:ce:15:b0:8a:61:e7:41:c6: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:FB:F9:AC:A0:B4:F3:59:7E:9C:DE:09:5C:A4:D4:1F:07:EF:D6 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:3b:d2:46:67:a0:9a:0f:75:05:3e:8f:40:8b:b4:5d:95:49: 93:e5:bf:88:14:01:b9:d2:fd:7e:1d:bc:65:cd:f5:67:94:17: 4d:e2:e9:f4:1a:cb:c8:2f:f2:db:a7:0d:b2:e1:d3:e1:44:e5: 69:d1:dc:30:75:69:f2:85:ed:b3:90:45:12:c6:bc:f6:ee:1d: 0b:5d:06:10:39:21:d2:ec:5a:89:2d:16:df:eb:f3:04:bd:62: e5:17:c9:8b:78:1e:a2:fe:5f:04:5a:3b:d4:d7:ff:50:30:43: cc:31:95:ca:90:4e:59:a5:40:7e:44:38:f6:3f:1b:16:92:46: 8d:ad:61:c5:4c:cf:69:93:7d:f4:2a:b3:87:4b:15:65:9c:7c: eb:b6:0b:4a:3a:8b:59:76:40:56:8e:b6:6a:3c:92:8c:a1:dc: 2c:8f:fe:9e:7c:06:5f:a4:9c:f5:ef:f3:22:1b:49:a8:57:20: 2b:6a:89:51:29:48:a8:76:d4:20:8d:0b:37:32:e0:c8:35:7c: 04:5b:15:9c:fc:25:6e:df:ca:1c:9b:6c:7b:51:f3:92:51:2c: 8a:04:5e:90:4b:af:9d:d0:c4:6e:d7:8a:42:e5:fe:40:a6:a1: 06:fa:08:b2:22:4f:fd:0c:05:ce:81:2b:60:fa:c6:12:18:2e: a8:a6:61:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUwODI0MTkwMTU5WhcNMjUwODMxMTkwMTU5WjAYMRYwFAYD VQQDEw02OGFiNjFhOC04MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oduZWDDTotIjMxn6eQrINPc/t5m3ypIfHd9eOoK8dr49kq9L2ERcit2q2hy H6q4tnzWy3x/xdxARjN8KUi3RzgKderaaFhmNtZY3w/su4jA4TC45UXjhSpYRFdd RQHvfIeZb/h3fPivKkG12MCgEtZgAy7u83LLLcWqMe88lXZT1s3CRPWtQlNjKZUj hFbNqRblrAf9/B9XM4m2+Y1+gfnQlSINajpDGE75KasrYjkLpvAqjFnXjqIFCecE w1fFqd/3XOmteoMotoIrgiZK0aJqqMfSCcHRNB2rRHR3sd7zOu+KqF55M0XeMkqq rrXUI1nwUmFZzhWwimHnQcZ2NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN72+/ms oLTzWX6c3glcpNQfB+/WMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDiO9JGZ6CaD3UFPo9Ai7RdlUmT5b+IFAG50v1+HbxlzfVnlBdN4un0 GsvIL/Lbpw2y4dPhROVp0dwwdWnyhe2zkEUSxrz27h0LXQYQOSHS7FqJLRbf6/ME vWLlF8mLeB6i/l8EWjvU1/9QMEPMMZXKkE5ZpUB+RDj2PxsWkkaNrWHFTM9pk330 KrOHSxVlnHzrtgtKOotZdkBWjrZqPJKModwsj/6efAZfpJz17/MiG0moVyAraolR KUiodtQgjQs3MuDINXwEWxWc/CVu38ocm2x7UfOSUSyKBF6QS6+d0MRu14pC5f5A pqEG+giyIk/9DAXOgStg+sYSGC6opmHQ -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:04 2025 by rpki-client