$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft File: r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json) Hash identifier: /6XuGdZ/HTtnICCH+VZh4LvQgIb7sL8c+eMigpsBMnI= Subject key identifier: C9:CB:2A:E2:24:7E:3E:2C:DE:F5:AD:68:19:50:FA:7F:34:A4:2D:C7 Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E Certificate issuer: /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft Manifest number: 0191 Signing time: Tue 09 Sep 2025 03:32:51 +0000 Manifest this update: Tue 09 Sep 2025 03:32:51 +0000 Manifest next update: Tue 16 Sep 2025 03:32:51 +0000 Files and hashes: 1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: VSsb+D1bDYvPXZOoqsCa3KRTcBmAbaeQuOjo8MckpFc=) 2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: GyWEom6S3q07RtuEwFpriwJsgcHzGa54vXUp1K8wG2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Validity Not Before: Sep 9 03:32:51 2025 GMT Not After : Sep 16 03:32:51 2025 GMT Subject: CN=68bf9fe3-13f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:12:ea:c1:13:fd:6e:78:61:a3:d3:bb:8f: 57:e5:fb:06:a1:b6:2c:c1:f1:25:30:ae:75:d6:1a: 8d:9e:e4:02:69:28:e7:e1:03:15:6c:ef:9f:61:7a: cc:7c:09:10:d5:61:a4:8d:8a:ea:36:6b:64:b1:d2: 3d:3a:7b:c0:6c:b2:a2:48:d7:f9:ec:e3:27:62:73: b9:b2:7f:7e:f0:d6:13:70:a7:1d:2c:e0:e6:c3:7e: cb:90:b2:36:a4:bc:0c:12:2f:99:30:e6:a2:d6:a9: bc:1e:bf:1e:c4:b9:bb:74:c4:03:83:17:cd:70:56: 79:96:81:56:46:8d:d5:8f:e7:b4:4e:27:f8:aa:53: c1:ce:8d:0d:b4:28:12:47:d2:66:1f:f9:78:0a:6e: 5a:63:f3:32:04:10:0d:86:64:45:d7:a6:b4:be:83: de:3f:0a:d6:18:2c:27:35:f8:01:e1:ac:df:80:0a: 86:6c:1e:b5:f8:cc:fb:9c:5f:43:83:8f:5b:3f:7d: 3b:b6:db:f0:3f:f4:b1:6b:c3:a2:ba:8e:d1:8c:62: 7d:39:c5:b8:7e:71:9a:78:7e:bf:65:89:d4:57:a2: c5:d4:44:a3:dc:fc:58:9e:45:9c:c4:6b:96:00:61: 16:0a:14:4b:28:90:d5:42:6d:5b:6a:f0:a9:e7:e6: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CB:2A:E2:24:7E:3E:2C:DE:F5:AD:68:19:50:FA:7F:34:A4:2D:C7 X509v3 Authority Key Identifier: keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:30:6a:0e:81:ee:03:f7:2a:ff:7a:f6:77:a6:65:55:d9: ab:c5:f3:a9:36:2e:e1:a7:cf:d2:3b:b6:a0:7a:d9:00:8d:cb: 83:97:b5:f0:68:33:38:db:04:31:91:db:c2:33:57:6c:49:ee: 4c:f1:a5:6b:e8:9a:e0:25:16:3c:d4:ad:4c:39:4f:0e:ae:9c: 3e:5c:d8:0d:74:68:24:6e:3a:c3:71:d1:03:1a:69:40:4c:8e: 9d:f3:94:08:9b:20:e2:7e:40:0b:d3:ad:f5:a8:9c:5f:64:93: 4f:b1:8e:03:c6:9b:eb:6f:bb:0b:87:8c:8c:8f:9a:66:c2:cf: 04:ff:37:37:0b:6e:47:d8:93:de:84:4a:35:a0:a4:64:c6:77: bf:a9:40:84:60:76:f2:e4:6c:89:ed:50:de:25:ab:23:7f:14: 9d:a7:2b:ae:f1:c6:3c:56:a2:1e:72:40:44:c4:15:d9:46:27: 7e:53:30:43:27:c1:20:7b:52:6b:17:6d:11:16:10:c5:a2:da: e5:bb:1d:0c:17:ef:a4:eb:c5:66:86:36:93:6c:64:f2:e0:73: 6e:db:ad:5a:67:f1:58:46:d1:1f:a0:da:61:c9:89:fe:91:b1: 30:4b:32:90:c0:82:8d:e0:32:ea:1a:fb:ef:7b:3c:7a:33:63: f2:b1:0b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2NjMxMTAvBgNVBAUTKEFGQkE0REMxRkE0NTg5MjQ5MDIzMjMxQzZGRUVFM0Y3 QTcxREE0MEUwHhcNMjUwOTA5MDMzMjUxWhcNMjUwOTE2MDMzMjUxWjAYMRYwFAYD VQQDEw02OGJmOWZlMy0xM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbES6sET/W54YaPTu49X5fsGobYswfElMK511hqNnuQCaSjn4QMVbO+fYXrM fAkQ1WGkjYrqNmtksdI9OnvAbLKiSNf57OMnYnO5sn9+8NYTcKcdLODmw37LkLI2 pLwMEi+ZMOai1qm8Hr8exLm7dMQDgxfNcFZ5loFWRo3Vj+e0Tif4qlPBzo0NtCgS R9JmH/l4Cm5aY/MyBBANhmRF16a0voPePwrWGCwnNfgB4azfgAqGbB61+Mz7nF9D g49bP307ttvwP/Sxa8Oiuo7RjGJ9OcW4fnGaeH6/ZYnUV6LF1ESj3PxYnkWcxGuW AGEWChRLKJDVQm1bavCp5+YijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnLKuIk fj4s3vWtaBlQ+n80pC3HMB8GA1UdIwQYMBaAFK+6TcH6RYkkkCMjHG/u4/enHaQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjY2My80RUNGRUI5ODJD RTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlTU1FJeU1jYi03ajk2Y2Rw QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cE53ZnBGaVNTUUl5TWNiLTdqOTZjZHBBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjY2My80RUNGRUI5ODJDRTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlT U1FJeU1jYi03ajk2Y2RwQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+JTBqDoHuA/cq/3r2d6ZlVdmrxfOpNi7hp8/SO7agetkAjcuDl7Xw aDM42wQxkdvCM1dsSe5M8aVr6JrgJRY81K1MOU8Orpw+XNgNdGgkbjrDcdEDGmlA TI6d85QImyDifkAL0631qJxfZJNPsY4Dxpvrb7sLh4yMj5pmws8E/zc3C25H2JPe hEo1oKRkxne/qUCEYHby5GyJ7VDeJasjfxSdpyuu8cY8VqIeckBExBXZRid+UzBD J8Ege1JrF20RFhDFotrlux0MF++k68VmhjaTbGTy4HNu261aZ/FYRtEfoNphyYn+ kbEwSzKQwIKN4DLqGvvvezx6M2PysQum -----END CERTIFICATE-----Generated at Wed Sep 10 00:17:59 2025 by rpki-client