$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: jYhrtTevB4mrZ9HTPjzCryZU73kg4fABJ7bMdRgP3J4= Subject key identifier: B7:5B:EC:56:98:93:F4:E7:DF:53:A0:C9:C1:BB:63:BB:0E:E3:49:0C Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 01C2 Signing time: Tue 09 Sep 2025 03:03:08 +0000 Manifest this update: Tue 09 Sep 2025 03:03:07 +0000 Manifest next update: Tue 16 Sep 2025 03:03:07 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: 4PsDyKZG6jipKIad+Y5sdBRcQ4t7WMFnBgLux+h8oAA=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: hjXWWNVk9qeFLg+JXu1VxvXREeEeEZlGLduNQ3cBxlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Sep 9 03:03:07 2025 GMT Not After : Sep 16 03:03:07 2025 GMT Subject: CN=68bf98eb-b461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:80:ec:5d:ac:3b:85:da:5a:a0:6b:c8:eb: 64:08:02:ae:b1:3f:46:9e:54:c2:e0:27:00:fa:b1: a8:1f:20:23:97:bd:8f:d8:eb:66:1c:21:6e:4d:24: 3e:5b:ce:5b:6a:3f:0b:fc:a9:ec:2e:ee:3f:0f:1e: 5b:db:35:f5:c4:82:13:f0:38:57:40:01:c5:a9:47: f7:c8:bd:2c:21:ed:a5:8e:c9:f3:35:17:7c:e8:8f: 7b:c8:fc:2e:aa:f3:4e:e5:1f:bb:30:41:3d:3b:98: 03:50:8b:9c:80:26:c9:0e:8e:a8:06:17:dd:b5:a7: 71:89:91:eb:39:af:bc:c8:41:17:21:9c:e4:6c:79: 90:45:1b:53:e9:6f:58:32:fb:d4:fb:3e:b1:4f:e7: de:50:14:24:8b:cc:49:a6:79:20:ba:1e:d0:d6:70: 3e:06:f5:e2:71:37:b4:64:7c:da:ff:d8:f5:7b:d2: 72:6e:cb:93:39:ea:23:31:10:9a:52:89:d6:b3:b9: f3:08:83:81:40:d0:26:98:ed:a1:51:a2:1c:ed:9a: e3:06:9b:9a:d7:3a:ce:13:8b:79:9b:d7:01:7f:a2: f7:61:e1:c2:92:8a:31:a1:93:4a:5d:63:b1:c1:d6: c4:e8:50:f1:98:35:90:e9:5f:64:e0:ce:3d:f0:22: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5B:EC:56:98:93:F4:E7:DF:53:A0:C9:C1:BB:63:BB:0E:E3:49:0C X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c1:e2:3f:a6:e2:e5:5c:26:3e:c9:fd:e0:bb:d0:90:7a:84: 28:33:90:52:a5:ad:15:cf:ab:25:e5:0b:96:5a:9c:71:78:c6: ab:48:61:fc:3f:cc:f6:e3:68:14:67:e9:a2:5b:52:fa:5e:f1: 3b:bb:ea:d7:2e:a9:39:ad:56:02:59:c8:ab:42:71:4a:d7:fb: 3f:3a:8b:30:cf:e1:c9:3a:4e:85:ed:ba:ad:2c:ae:7c:35:ec: d6:3c:23:1d:dc:77:39:b0:87:1e:e6:95:c4:ac:8e:9f:36:05: 14:9d:2d:84:b2:c3:63:92:47:7c:96:c7:1c:80:26:cc:a5:ce: c6:aa:46:de:46:ac:e9:1b:22:8b:c1:ea:eb:90:8c:61:aa:b2: e1:4f:2f:25:07:79:e3:2b:1b:0d:ce:f1:e8:57:2e:dc:29:8a: a0:b8:85:5a:3d:f0:7d:1f:44:c8:e7:c2:5f:63:d5:59:c5:6b: 98:e7:9e:a2:61:e2:b6:74:f5:db:17:28:c4:59:45:d6:9d:e9: c7:ad:a5:7f:95:b7:f5:83:1e:cd:f6:59:30:ad:aa:da:ca:7c: cb:7f:f5:47:a7:a3:45:5a:fa:3e:bb:22:61:f3:6b:2d:bd:77: 7b:00:c1:22:85:e4:3c:a1:76:70:4f:8b:a4:fd:ba:95:db:a2: de:74:5f:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwOTA5MDMwMzA3WhcNMjUwOTE2MDMwMzA3WjAYMRYwFAYD VQQDEw02OGJmOThlYi1iNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVaA7F2sO4XaWqBryOtkCAKusT9GnlTC4CcA+rGoHyAjl72P2OtmHCFuTSQ+ W85baj8L/KnsLu4/Dx5b2zX1xIIT8DhXQAHFqUf3yL0sIe2ljsnzNRd86I97yPwu qvNO5R+7MEE9O5gDUIucgCbJDo6oBhfdtadxiZHrOa+8yEEXIZzkbHmQRRtT6W9Y MvvU+z6xT+feUBQki8xJpnkguh7Q1nA+BvXicTe0ZHza/9j1e9JybsuTOeojMRCa UonWs7nzCIOBQNAmmO2hUaIc7ZrjBpua1zrOE4t5m9cBf6L3YeHCkooxoZNKXWOx wdbE6FDxmDWQ6V9k4M498CIg/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdb7FaY k/Tn31OgycG7Y7sO40kMMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASweI/puLlXCY+yf3gu9CQeoQoM5BSpa0Vz6sl5QuWWpxxeMarSGH8 P8z242gUZ+miW1L6XvE7u+rXLqk5rVYCWcirQnFK1/s/Ooswz+HJOk6F7bqtLK58 NezWPCMd3Hc5sIce5pXErI6fNgUUnS2EssNjkkd8lsccgCbMpc7GqkbeRqzpGyKL werrkIxhqrLhTy8lB3njKxsNzvHoVy7cKYqguIVaPfB9H0TI58JfY9VZxWuY556i YeK2dPXbFyjEWUXWnenHraV/lbf1gx7N9lkwraraynzLf/VHp6NFWvo+uyJh82st vXd7AMEiheQ8oXZwT4uk/bqV26LedF8v -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:28 2025 by rpki-client