$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: y5SiVwZY4HBgMGLKsKph1kyFmz7PQ5p+5yw+c3M4JME= Subject key identifier: 7B:68:36:AE:D3:68:FE:EA:33:B1:0C:50:0F:46:04:4B:15:70:58:8A Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 1482 Signing time: Thu 18 Sep 2025 18:35:50 +0000 Manifest this update: Thu 18 Sep 2025 18:35:50 +0000 Manifest next update: Thu 25 Sep 2025 18:35:50 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: VPU1Fk+++feO1tKlh3kN2FGgmr7yOHny+m0N3oHyAQ0=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: Wy656K9y8HRrMZ3s/WXbZct5wLSLzkShWRKdtdLgnAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Sep 18 18:35:50 2025 GMT Not After : Sep 25 18:35:50 2025 GMT Subject: CN=68cc5106-4475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:87:8c:ab:c5:90:95:dc:64:4e:82:87:96: 0a:82:fc:ea:2e:6a:c1:13:eb:2e:38:0f:0f:db:d6: 3b:40:51:7a:1f:b1:5b:bb:aa:f2:ab:23:78:09:d9: 62:b4:15:e6:32:d6:80:77:6a:f0:5a:d6:fa:15:32: 1b:f9:5b:30:df:49:74:b1:54:24:1a:4b:f0:bb:f1: 3c:9f:5f:2e:f8:5e:d5:f3:32:82:cf:a8:a9:8b:bb: ba:e4:e6:f0:1e:9d:17:16:81:62:fc:d7:d6:3b:f4: 8e:87:fe:c9:3f:4b:89:d7:31:d3:b6:bc:ee:ac:56: 60:e2:6b:3b:2d:5f:bd:89:39:f8:0d:72:7d:4a:a8: 5f:47:f6:40:08:96:28:3a:e4:8d:27:87:da:63:3e: c4:8b:9d:83:eb:7d:3e:f3:54:1c:8a:45:56:e9:4d: 69:36:4f:73:04:5e:84:be:52:0b:2d:18:d6:87:25: 77:a5:24:5f:36:0f:38:03:3d:d9:aa:d5:aa:c8:5f: e3:42:36:41:b9:31:2a:56:8f:30:b1:f8:e5:88:b6: 55:29:f4:9a:b8:0a:7f:07:53:4d:7b:19:73:cf:c4: d2:00:31:89:4c:19:62:ad:44:d8:b1:2b:94:74:04: e7:94:26:ec:ec:78:69:a6:29:df:f7:6f:8c:cd:ba: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:68:36:AE:D3:68:FE:EA:33:B1:0C:50:0F:46:04:4B:15:70:58:8A X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:93:34:cc:72:f5:64:f6:ef:3b:78:48:6d:be:86:74:3b:c4: bb:f8:8b:09:af:dc:59:cc:4a:ab:ce:1e:eb:6e:53:7c:40:2a: 79:02:9f:44:f0:eb:04:35:b0:a1:66:fe:b4:56:5b:34:52:9e: 30:95:03:2a:09:fd:8f:6f:2c:cf:63:8b:10:39:c7:b9:fb:3d: 5a:00:8f:be:be:35:c4:29:f2:92:b8:cf:9f:a9:8e:7b:bd:7f: 82:ca:21:7c:45:fb:e7:3b:e9:98:eb:1b:9d:49:d2:90:fa:f8: ca:b8:79:5e:b6:a2:0a:72:b2:85:74:4e:dd:16:0c:7d:89:2b: 12:5d:d3:26:55:3f:97:79:78:4e:97:5d:8b:6b:b9:f8:76:f2: 7c:b3:1a:a0:09:5f:33:90:c5:01:5a:ef:ba:ea:73:89:0f:c1: 51:88:97:43:80:61:15:e8:7e:72:36:7a:6e:f8:42:76:16:d7: ac:fc:80:ba:7a:22:e5:6e:2a:91:b0:54:ab:34:0a:c7:21:24: 6e:8e:c1:cc:7a:4c:bf:da:9d:22:e7:39:40:e6:32:b5:22:a8: 95:b8:8b:01:51:da:4f:22:97:ab:ec:8b:42:5d:a4:f7:2e:9e: 42:ea:c7:d8:f3:30:38:c3:c9:23:19:79:84:22:e7:f1:cd:96: 66:6f:39:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUwOTE4MTgzNTUwWhcNMjUwOTI1MTgzNTUwWjAYMRYwFAYD VQQDEw02OGNjNTEwNi00NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NqHjKvFkJXcZE6Ch5YKgvzqLmrBE+suOA8P29Y7QFF6H7Fbu6ryqyN4Cdli tBXmMtaAd2rwWtb6FTIb+Vsw30l0sVQkGkvwu/E8n18u+F7V8zKCz6ipi7u65Obw Hp0XFoFi/NfWO/SOh/7JP0uJ1zHTtrzurFZg4ms7LV+9iTn4DXJ9SqhfR/ZACJYo OuSNJ4faYz7Ei52D630+81QcikVW6U1pNk9zBF6EvlILLRjWhyV3pSRfNg84Az3Z qtWqyF/jQjZBuTEqVo8wsfjliLZVKfSauAp/B1NNexlzz8TSADGJTBlirUTYsSuU dATnlCbs7Hhppinf92+MzbqNxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtoNq7T aP7qM7EMUA9GBEsVcFiKMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNkzTMcvVk9u87eEhtvoZ0O8S7+IsJr9xZzEqrzh7rblN8QCp5Ap9E 8OsENbChZv60Vls0Up4wlQMqCf2PbyzPY4sQOce5+z1aAI++vjXEKfKSuM+fqY57 vX+CyiF8RfvnO+mY6xudSdKQ+vjKuHletqIKcrKFdE7dFgx9iSsSXdMmVT+XeXhO l12La7n4dvJ8sxqgCV8zkMUBWu+66nOJD8FRiJdDgGEV6H5yNnpu+EJ2Ftes/IC6 eiLlbiqRsFSrNArHISRujsHMeky/2p0i5zlA5jK1IqiVuIsBUdpPIper7ItCXaT3 Lp5C6sfY8zA4w8kjGXmEIufxzZZmbzkH -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:51 2025 by rpki-client