$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: KwkbDCvMt2jW6bCkGMwLzRzAw7Coyt1guRAt8akG/ho= Subject key identifier: 00:66:62:AE:8B:C8:5C:39:89:2F:AA:94:B3:15:05:00:95:81:02:88 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0BA2 Signing time: Tue 04 Nov 2025 19:04:47 +0000 Manifest this update: Tue 04 Nov 2025 19:04:46 +0000 Manifest next update: Tue 11 Nov 2025 19:04:46 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: moBTYbBqoG4RqF7JE/6OPU3oZeqWMEA850Ui3kFVYTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Nov 4 19:04:46 2025 GMT Not After : Nov 11 19:04:46 2025 GMT Subject: CN=690a4e4e-2e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:24:f6:84:67:a7:45:7d:9a:41:e0:6f:aa: bf:3f:88:39:c5:23:09:19:22:65:12:76:39:77:d9: 08:f2:a7:f1:2c:4b:d5:06:8b:15:aa:ee:d4:96:25: 9b:dc:2c:6a:4f:ca:f6:e8:64:12:6d:a2:83:d9:b8: 06:e7:73:5f:19:18:15:29:e9:13:92:4b:30:8a:49: 8f:9f:24:a0:62:6c:b7:b5:da:da:b6:0d:36:46:6e: ec:3d:a2:42:34:7b:cb:9f:fd:7c:ae:5d:71:2d:3b: fb:01:4c:8e:bb:09:68:a4:13:7c:ae:a7:df:c0:3e: 9b:4a:cd:61:bf:8a:d7:9a:d8:15:56:7f:d9:d7:2a: d2:cc:75:2e:de:f6:0b:c1:db:95:43:58:bf:21:22: 39:a4:e9:3e:78:5c:d0:4a:30:ca:0c:34:7b:ca:b9: ef:28:26:c4:2d:ec:ef:45:87:3b:35:16:b9:f5:d0: f9:1e:be:bc:e8:6f:b2:67:c6:55:98:d6:7f:4f:e0: 3f:13:99:4d:4b:f0:06:a6:57:bf:4d:6d:df:15:a8: b3:4e:14:a1:3b:7d:a9:03:5c:39:18:4b:79:44:9e: 43:37:b4:2b:76:54:69:26:ca:61:25:3f:16:91:62: 87:46:b9:bb:8d:9c:67:d3:5c:93:a9:b5:5f:a4:6d: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:62:AE:8B:C8:5C:39:89:2F:AA:94:B3:15:05:00:95:81:02:88 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:39:ab:4d:16:3d:03:bc:7e:b6:cc:6e:c3:ba:eb:24:db:ba: 9b:d9:ce:1f:8d:c2:9a:35:45:01:61:6a:57:8c:3e:3b:46:89: 2e:00:2a:30:b0:17:ad:4c:15:ca:7f:5b:0d:b0:23:f7:77:4b: e1:93:aa:74:fd:b8:c0:bb:54:67:28:0a:52:7e:a6:5d:8b:aa: fb:05:78:76:12:7c:c5:c3:e2:16:dc:16:ac:02:d7:07:c4:ed: 0d:e9:65:23:25:09:5e:60:5f:13:f0:61:86:71:f9:ce:6e:37: 79:0c:77:90:1d:85:76:61:6a:e2:b0:53:ee:b5:f9:4a:70:e6: c4:07:b0:26:99:d1:13:0b:9b:9b:05:c9:62:c5:41:8e:c0:3f: e9:3a:15:98:91:76:81:8b:61:79:9b:b5:8f:04:ae:ee:65:fa: 14:a4:a5:48:6f:1b:ba:f9:da:cf:c2:22:55:dd:db:6e:13:91: 1a:f5:ca:55:12:d5:07:64:c9:16:3a:3e:6b:35:71:04:83:4b: 8a:9c:c7:36:b7:7b:27:d5:87:c1:14:5e:90:b8:d6:29:e3:67: 81:cf:cd:57:90:b2:a4:7d:ec:e0:3f:13:84:ef:6b:65:f6:47: 37:cc:3d:3f:df:19:db:3a:a1:c5:95:2c:d2:4f:cd:58:57:64: bb:55:a3:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUxMTA0MTkwNDQ2WhcNMjUxMTExMTkwNDQ2WjAYMRYwFAYD VQQDEw02OTBhNGU0ZS0yZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Eok9oRnp0V9mkHgb6q/P4g5xSMJGSJlEnY5d9kI8qfxLEvVBosVqu7UliWb 3CxqT8r26GQSbaKD2bgG53NfGRgVKekTkkswikmPnySgYmy3tdratg02Rm7sPaJC NHvLn/18rl1xLTv7AUyOuwlopBN8rqffwD6bSs1hv4rXmtgVVn/Z1yrSzHUu3vYL wduVQ1i/ISI5pOk+eFzQSjDKDDR7yrnvKCbELezvRYc7NRa59dD5Hr686G+yZ8ZV mNZ/T+A/E5lNS/AGple/TW3fFaizThShO32pA1w5GEt5RJ5DN7QrdlRpJsphJT8W kWKHRrm7jZxn01yTqbVfpG07UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABmYq6L yFw5iS+qlLMVBQCVgQKIMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfOatNFj0DvH62zG7Duusk27qb2c4fjcKaNUUBYWpXjD47RokuACow sBetTBXKf1sNsCP3d0vhk6p0/bjAu1RnKApSfqZdi6r7BXh2EnzFw+IW3BasAtcH xO0N6WUjJQleYF8T8GGGcfnObjd5DHeQHYV2YWrisFPutflKcObEB7AmmdETC5ub BclixUGOwD/pOhWYkXaBi2F5m7WPBK7uZfoUpKVIbxu6+drPwiJV3dtuE5Ea9cpV EtUHZMkWOj5rNXEEg0uKnMc2t3sn1YfBFF6QuNYp42eBz81XkLKkfezgPxOE72tl 9kc3zD0/3xnbOqHFlSzST81YV2S7VaOy -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:41 2025 by rpki-client