$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: lWDqrNT3kCkJrPi6Jbdo9ddAxr0gdTEoQlnIVgvbs/A= Subject key identifier: 3A:D3:7B:4E:45:E8:07:50:E8:45:4E:04:DF:B6:DF:19:7C:91:82:A9 Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 06D4 Signing time: Thu 18 Sep 2025 22:19:08 +0000 Manifest this update: Thu 18 Sep 2025 22:19:08 +0000 Manifest next update: Thu 25 Sep 2025 22:19:08 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: 0y4bubvm62BvdtKGzCyJFwv9KB4VsUOZ1yffwKS2Wmg=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: 3P7zE+Wtx98FiHeFJ5MpJ+Mdyi0A3n8ttsX2hYFO/Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Sep 18 22:19:08 2025 GMT Not After : Sep 25 22:19:08 2025 GMT Subject: CN=68cc855c-257f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:5e:0d:11:85:e9:3d:5e:a7:d2:1d:a3:15: eb:b1:4a:2e:c6:b2:33:c1:1e:cd:3a:a8:ca:29:98: 26:4f:f3:d0:a8:85:13:a1:53:6c:f9:b5:35:c6:9e: 07:ce:ae:9c:05:4d:b3:e8:5d:53:3c:74:f1:a4:00: 2c:f6:75:a0:f2:b2:7f:f5:28:7d:2a:56:e9:6a:e1: 75:a6:91:90:78:f0:6a:78:ba:a6:8b:af:8a:39:0a: fa:4a:56:34:c8:fb:30:9d:5d:ae:24:7e:90:5b:3c: ff:cd:18:a6:c1:34:61:69:6c:7c:4c:d6:52:26:ba: 89:62:ac:f0:03:1e:fb:e4:7b:a1:f3:cc:29:b1:7e: 64:e7:6e:3c:5e:97:f4:19:ca:de:b1:0c:d3:c1:c1: 14:b8:b7:7d:96:38:db:1e:20:e6:0c:71:62:b9:a9: 26:d8:a1:fb:74:21:ea:f0:7b:0d:79:6d:f9:01:46: 6c:57:68:57:bb:10:bc:36:89:ad:7e:75:8d:02:06: a7:b7:ec:cd:b3:11:28:11:b6:fc:09:0c:5c:05:fa: 08:d5:41:d4:91:42:7d:a8:78:6c:77:2f:0d:f4:66: 5a:b3:fd:e1:f8:48:d6:dd:87:55:b9:4b:75:6e:6a: e4:14:be:0f:e8:2c:99:8b:07:d7:fe:95:d2:3a:cf: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:7B:4E:45:E8:07:50:E8:45:4E:04:DF:B6:DF:19:7C:91:82:A9 X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3f:0c:91:f1:d5:be:39:06:74:25:7e:5d:e1:90:94:f7:5c: fe:13:0c:49:10:9e:b6:e0:a5:2e:32:6c:80:34:3f:aa:6c:26: ea:67:8f:95:25:31:62:0e:6d:e8:24:87:79:92:fb:c7:0b:b8: 1f:8f:32:4b:b3:c4:8d:e0:6e:88:ae:66:b4:63:81:37:17:44: 6b:93:6a:da:7f:6e:1d:6f:94:17:98:3b:bb:80:75:1d:04:4d: aa:7a:32:13:39:e7:e7:16:21:ec:d2:4b:7c:c2:5b:50:aa:b3: 20:fe:22:a7:7f:ec:f0:08:e7:d7:07:59:ce:8d:63:e4:53:2c: 84:b7:91:00:fb:22:2f:bc:82:71:0a:4f:8e:8b:6d:a1:44:3d: c2:1c:91:52:5f:44:4a:c9:55:1c:31:e9:cd:cb:11:1a:96:b4: 7a:9c:80:13:89:b6:8f:71:fa:b2:5a:85:c6:96:4b:83:05:fd: d3:30:b4:b6:de:6e:3d:7f:42:7f:16:f0:d3:c9:3f:03:54:a8: c7:91:2c:1b:12:61:15:fa:a5:58:ea:0a:fc:ce:ae:b1:f4:0b: b3:d9:62:33:63:3d:c2:e9:1a:c8:ea:e3:6d:28:f3:63:6d:d1: 86:64:06:6c:68:90:50:ce:17:c8:4a:92:a0:3e:61:e1:e1:bc: 34:a4:12:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUwOTE4MjIxOTA4WhcNMjUwOTI1MjIxOTA4WjAYMRYwFAYD VQQDEw02OGNjODU1Yy0yNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nteDRGF6T1ep9IdoxXrsUouxrIzwR7NOqjKKZgmT/PQqIUToVNs+bU1xp4H zq6cBU2z6F1TPHTxpAAs9nWg8rJ/9Sh9KlbpauF1ppGQePBqeLqmi6+KOQr6SlY0 yPswnV2uJH6QWzz/zRimwTRhaWx8TNZSJrqJYqzwAx775Huh88wpsX5k5248Xpf0 GcresQzTwcEUuLd9ljjbHiDmDHFiuakm2KH7dCHq8HsNeW35AUZsV2hXuxC8Nomt fnWNAgant+zNsxEoEbb8CQxcBfoI1UHUkUJ9qHhsdy8N9GZas/3h+EjW3YdVuUt1 bmrkFL4P6CyZiwfX/pXSOs9atwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrTe05F 6AdQ6EVOBN+23xl8kYKpMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTPwyR8dW+OQZ0JX5d4ZCU91z+EwxJEJ624KUuMmyAND+qbCbqZ4+V JTFiDm3oJId5kvvHC7gfjzJLs8SN4G6Irma0Y4E3F0Rrk2raf24db5QXmDu7gHUd BE2qejITOefnFiHs0kt8wltQqrMg/iKnf+zwCOfXB1nOjWPkUyyEt5EA+yIvvIJx Ck+Oi22hRD3CHJFSX0RKyVUcMenNyxEalrR6nIATibaPcfqyWoXGlkuDBf3TMLS2 3m49f0J/FvDTyT8DVKjHkSwbEmEV+qVY6gr8zq6x9Auz2WIzYz3C6RrI6uNtKPNj bdGGZAZsaJBQzhfISpKgPmHh4bw0pBIS -----END CERTIFICATE-----Generated at Fri Sep 19 16:38:35 2025 by rpki-client