$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: sZ7sbS+pYOoUuJb6vsq0rMlxA+1vhi5k7vK10Waceu8= Subject key identifier: 0B:0D:FF:FC:6C:31:03:AD:79:D0:88:C9:0A:92:EC:13:C1:23:6D:9E Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 34D5 Signing time: Sat 06 Sep 2025 14:16:47 +0000 Manifest this update: Sat 06 Sep 2025 14:16:46 +0000 Manifest next update: Sat 13 Sep 2025 14:16:46 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: sMGGKK4gp1b3nADUeeiwrmbiRWcBb3v84+GWdzRDQ0w=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Sep 6 14:16:46 2025 GMT Not After : Sep 13 14:16:46 2025 GMT Subject: CN=68bc424e-1963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:be:91:3e:02:dc:23:49:2a:94:e4:3a:0e: 0f:e5:2e:7c:5d:cb:2e:f4:ef:9f:73:fc:27:8f:40: 9c:bd:ab:59:53:0d:c1:35:ba:aa:dd:a1:b8:b0:4a: 9c:66:15:6f:ba:9a:b6:64:69:74:21:44:57:96:4f: 68:b2:34:ea:64:45:9d:c6:d6:3a:28:a5:84:b6:52: 13:2f:48:83:83:b2:a4:74:8a:e4:e2:9d:cd:b2:2d: c8:2c:3e:dc:c1:b9:91:64:d0:a8:15:0e:18:1b:34: a7:d4:4b:39:7b:13:54:03:9f:90:fe:53:af:82:86: 34:e0:a7:81:cb:bc:b7:a9:ae:fe:9b:60:73:fe:b6: 13:2f:66:de:2c:f8:d6:54:d6:74:df:dd:0e:c5:61: eb:db:30:76:c8:18:20:46:09:69:aa:bc:2d:40:00: 6b:6f:37:30:61:f3:21:c6:90:6c:3c:17:7c:0c:d0: 6d:45:58:24:c5:ea:58:e4:8e:75:3c:89:da:56:cf: ca:b2:42:49:e4:1b:64:7b:43:8b:32:64:ee:f5:90: ae:a2:a5:03:fa:f2:ee:f7:7a:93:9d:85:9a:b1:da: 2c:ff:09:32:7e:d1:2e:ab:90:da:e0:de:0d:1f:b7: 3d:bc:b1:f4:50:ad:7a:ab:69:6d:d3:35:60:a8:1d: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:FF:FC:6C:31:03:AD:79:D0:88:C9:0A:92:EC:13:C1:23:6D:9E X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fe:09:ba:ea:c0:65:1e:09:e6:bc:ed:55:2b:c5:7e:46:75: e6:02:bc:4b:f0:97:87:a1:31:73:ed:0c:c4:a3:49:ec:82:2f: 50:02:bb:4d:21:71:17:68:69:43:9d:27:e0:06:a8:67:8f:87: 6c:18:4d:a9:f4:c8:32:74:9a:6d:17:32:2d:a8:e9:56:48:8f: b8:8d:7d:cf:8b:24:79:a5:1a:4c:4f:df:bf:4b:26:ea:4a:2a: 1b:12:49:93:89:40:f4:41:65:fa:67:24:66:b4:26:72:bf:8f: 71:1c:ac:2d:13:06:bd:6b:31:01:77:ed:ad:b0:86:3a:e3:bd: d4:0a:fe:4c:2e:83:20:81:46:c1:57:53:8b:a8:93:4e:7b:a2: 09:37:ac:c9:56:71:89:bc:8d:fb:81:7c:49:ae:8c:e6:13:2a: 34:e0:a3:4e:79:d8:c8:ef:dc:50:3a:bb:91:41:cd:f7:97:d8: 27:7f:be:73:8d:af:96:e6:31:ae:49:cf:0c:a5:a8:3e:6c:00: 1f:59:43:9c:56:ab:8c:e3:1f:cb:ec:03:76:f1:5b:f3:bb:42: bf:a9:69:1f:db:c3:b3:23:12:56:e2:07:15:79:6b:06:d0:32: 3a:0b:ea:23:03:e3:61:5c:d2:8e:7b:10:63:38:8c:54:6c:ff: 43:e4:86:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwOTA2MTQxNjQ2WhcNMjUwOTEzMTQxNjQ2WjAYMRYwFAYD VQQDEw02OGJjNDI0ZS0xOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPm+kT4C3CNJKpTkOg4P5S58Xcsu9O+fc/wnj0CcvatZUw3BNbqq3aG4sEqc ZhVvupq2ZGl0IURXlk9osjTqZEWdxtY6KKWEtlITL0iDg7KkdIrk4p3Nsi3ILD7c wbmRZNCoFQ4YGzSn1Es5exNUA5+Q/lOvgoY04KeBy7y3qa7+m2Bz/rYTL2beLPjW VNZ0390OxWHr2zB2yBggRglpqrwtQABrbzcwYfMhxpBsPBd8DNBtRVgkxepY5I51 PInaVs/KskJJ5Btke0OLMmTu9ZCuoqUD+vLu93qTnYWasdos/wkyftEuq5Da4N4N H7c9vLH0UK16q2lt0zVgqB0n0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsN//xs MQOtedCIyQqS7BPBI22eMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt/gm66sBlHgnmvO1VK8V+RnXmArxL8JeHoTFz7QzEo0nsgi9QArtN IXEXaGlDnSfgBqhnj4dsGE2p9MgydJptFzItqOlWSI+4jX3PiyR5pRpMT9+/Sybq SiobEkmTiUD0QWX6ZyRmtCZyv49xHKwtEwa9azEBd+2tsIY6473UCv5MLoMggUbB V1OLqJNOe6IJN6zJVnGJvI37gXxJrozmEyo04KNOedjI79xQOruRQc33l9gnf75z ja+W5jGuSc8Mpag+bAAfWUOcVquM4x/L7AN28Vvzu0K/qWkf28OzIxJW4gcVeWsG 0DI6C+ojA+NhXNKOexBjOIxUbP9D5IYA -----END CERTIFICATE-----Generated at Sat Sep 6 21:11:00 2025 by rpki-client