$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: dD/pwHojtA6jce94JDCwXcqy+IkKMHcomwFoJuMwIbk= Subject key identifier: 9F:16:42:23:34:4A:FD:E5:3E:5C:73:E6:01:E0:70:1D:FB:2B:0D:B2 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 016B Signing time: Fri 05 Sep 2025 04:12:15 +0000 Manifest this update: Fri 05 Sep 2025 04:12:15 +0000 Manifest next update: Fri 12 Sep 2025 04:12:15 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: 4GSbrfcQ96kMKaHAG++H+pz5p0v033IvYnOXwARrNjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Sep 5 04:12:15 2025 GMT Not After : Sep 12 04:12:15 2025 GMT Subject: CN=68ba631f-61bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:98:92:94:f0:6d:23:6c:ac:70:4c:05:26:e0: 2c:4b:11:f7:6a:48:72:26:b5:32:5d:30:60:7c:5a: 74:ef:7f:a2:ae:42:47:2f:bd:b2:56:c6:28:f0:53: 39:7d:7d:a7:8f:ae:3c:dc:ef:c3:11:f9:7f:74:5a: 53:53:c5:36:a6:fe:e3:5d:f7:0b:5e:0a:ac:cc:8b: 01:d1:36:3c:10:f8:34:00:2f:bb:3c:0e:09:cc:57: ea:40:bc:63:b6:bf:db:36:d6:25:1b:8d:3a:e8:a7: af:46:9d:a9:f4:bf:35:28:d0:08:86:67:43:a9:79: 27:5a:57:b1:65:b8:df:d2:79:92:1b:5b:fe:48:97: 84:3e:e7:bd:41:c9:7b:5c:b3:b0:09:4e:24:6c:8a: 8e:24:4e:cd:4b:5b:a0:ca:35:64:2f:93:f4:dc:8b: c8:2a:12:aa:48:0c:81:68:a9:ec:17:3e:0a:27:0d: ea:18:3f:e1:d2:27:36:e5:f9:4e:fd:74:d2:a1:01: 7f:e2:2b:7e:bb:88:9c:88:b2:4b:ed:cf:d2:bd:4a: 98:ba:2c:cd:ad:65:f1:81:f0:85:6d:82:92:16:71: 58:dd:71:18:85:00:e5:9d:53:f3:91:b6:30:d1:59: 20:ff:fa:f0:38:9f:34:38:51:cb:7d:a8:2f:49:b9: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:16:42:23:34:4A:FD:E5:3E:5C:73:E6:01:E0:70:1D:FB:2B:0D:B2 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a0:b3:0a:7c:3c:17:72:2c:63:76:b7:50:68:fc:32:21:fe: ac:44:62:5c:95:e9:94:f0:03:a6:25:5f:59:a8:d2:3c:31:3a: 42:0c:38:d1:9a:7e:fb:64:18:e5:28:93:9e:a2:6e:4c:9b:9c: ad:a7:de:8d:88:4b:95:5b:c7:a3:99:25:4a:ec:ce:e1:58:7e: 65:5c:8b:c5:73:b7:d4:d3:cc:7a:76:d4:8b:2b:c0:99:34:f1: b2:ac:10:50:5a:a4:f9:f2:ca:3c:58:76:ff:79:29:0d:4c:3a: ff:80:a6:fa:31:78:40:2d:7a:b5:d2:8b:fc:60:7c:90:14:60: ad:08:a0:44:46:dd:89:e9:7f:32:a0:2e:1b:83:3d:3c:2b:88: 00:df:eb:0f:28:0a:4b:7e:5b:84:14:f5:ac:be:c1:a8:23:b1: 7c:69:2e:ac:00:f8:4f:33:38:9b:0c:0b:a6:b5:c3:78:4d:98: e6:bb:3f:c6:80:a7:37:b4:2f:0a:30:26:0a:99:7d:8f:7e:43: 5e:a1:b1:0a:1d:d6:3f:0d:c5:c2:88:8c:0d:fd:48:c9:4b:9b: e6:a4:89:d5:f0:d3:be:3b:1a:38:30:e0:66:79:b5:a8:0c:fb: c2:07:76:83:5c:62:53:75:b2:dd:6c:6a:7e:44:b2:75:bd:f4: 71:82:92:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUwOTA1MDQxMjE1WhcNMjUwOTEyMDQxMjE1WjAYMRYwFAYD VQQDEw02OGJhNjMxZi02MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95iSlPBtI2yscEwFJuAsSxH3akhyJrUyXTBgfFp073+irkJHL72yVsYo8FM5 fX2nj6483O/DEfl/dFpTU8U2pv7jXfcLXgqszIsB0TY8EPg0AC+7PA4JzFfqQLxj tr/bNtYlG4066KevRp2p9L81KNAIhmdDqXknWlexZbjf0nmSG1v+SJeEPue9Qcl7 XLOwCU4kbIqOJE7NS1ugyjVkL5P03IvIKhKqSAyBaKnsFz4KJw3qGD/h0ic25flO /XTSoQF/4it+u4iciLJL7c/SvUqYuizNrWXxgfCFbYKSFnFY3XEYhQDlnVPzkbYw 0Vkg//rwOJ80OFHLfagvSblo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8WQiM0 Sv3lPlxz5gHgcB37Kw2yMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhoLMKfDwXcixjdrdQaPwyIf6sRGJclemU8AOmJV9ZqNI8MTpCDDjR mn77ZBjlKJOeom5Mm5ytp96NiEuVW8ejmSVK7M7hWH5lXIvFc7fU08x6dtSLK8CZ NPGyrBBQWqT58so8WHb/eSkNTDr/gKb6MXhALXq10ov8YHyQFGCtCKBERt2J6X8y oC4bgz08K4gA3+sPKApLfluEFPWsvsGoI7F8aS6sAPhPMzibDAumtcN4TZjmuz/G gKc3tC8KMCYKmX2PfkNeobEKHdY/DcXCiIwN/UjJS5vmpInV8NO+Oxo4MOBmebWo DPvCB3aDXGJTdbLdbGp+RLJ1vfRxgpLw -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:30 2025 by rpki-client