$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: CVv7Ye6s0n8xsLF5U3+kTYPq3s6vDL7bxkKeHyGkKdY= Subject key identifier: B0:73:F8:E9:83:D3:40:52:61:B9:A2:A2:96:89:F6:0D:5C:4D:98:22 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 072B Signing time: Tue 16 Sep 2025 22:05:37 +0000 Manifest this update: Tue 16 Sep 2025 22:05:37 +0000 Manifest next update: Tue 23 Sep 2025 22:05:37 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: M0DoRiH/zcb9lH0Ca4Fj891TLvLj5zUoCGRv+bdIq54=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: Sep 16 22:05:37 2025 GMT Not After : Sep 23 22:05:37 2025 GMT Subject: CN=68c9df31-8c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:a1:36:63:55:da:47:7d:13:6f:70:88:c6: 33:8e:34:31:ce:03:c6:be:d1:94:ef:a8:ef:ed:bb: 2a:bb:72:be:86:88:7b:b4:b5:db:f1:d2:ed:e8:a6: 51:3c:76:a7:4e:89:03:b6:69:97:38:e2:1e:9c:08: 52:99:3d:b0:57:10:86:00:40:a6:cd:07:31:7f:17: a7:0a:11:d3:0a:6e:8e:a0:2e:cf:be:87:11:ff:90: 12:48:26:01:4f:5c:fe:bd:6f:0c:61:ce:53:c7:69: 1c:ed:80:7a:46:ec:10:55:1b:1b:4d:3b:a9:c2:50: db:d7:a9:bb:e4:6f:86:d0:a2:97:6c:84:40:9a:c3: 31:17:28:ea:15:0f:d0:25:f0:af:d7:9d:95:65:68: 2c:45:ad:26:48:4e:ae:b2:2a:93:01:74:a3:09:71: b1:8e:2a:4b:90:78:ec:d1:e4:4f:4b:74:e2:84:c6: 0d:e2:73:f3:2e:b7:3b:54:6f:0b:7c:9b:40:ff:4a: 56:73:9d:cd:7b:ca:39:0c:08:81:13:a3:c1:65:28: 85:eb:a0:70:9d:8d:eb:85:ca:8e:86:da:7b:4e:7a: 83:dd:f4:bc:79:15:99:fc:f1:4d:d9:e5:53:61:e9: fc:92:b2:29:43:3c:99:9d:cd:e8:55:8b:a9:a0:02: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:73:F8:E9:83:D3:40:52:61:B9:A2:A2:96:89:F6:0D:5C:4D:98:22 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c8:04:8e:16:16:09:f8:0f:a5:77:81:b3:d6:14:7a:43:5a: b2:b6:82:40:c3:fb:11:dc:7c:68:28:fb:5b:74:d4:ac:31:2a: c0:b4:0c:b8:26:36:c2:2b:b4:da:85:8f:d6:b9:c0:c7:01:e9: 5f:9d:98:20:0f:7d:32:e9:c0:8c:64:f0:f4:26:2c:b5:e0:3f: 5b:82:e3:2e:bb:dd:bb:6f:17:fb:96:30:b9:13:71:ef:3e:4b: 1c:3e:98:74:ca:58:7f:00:42:84:e8:46:d4:34:74:e8:03:70: 99:04:59:54:d4:8c:58:bb:b8:97:d1:5f:2e:6e:f6:13:9f:e7: bf:54:86:79:1c:88:ae:f9:1c:77:28:ac:77:20:5a:7f:27:e2: 37:67:80:9b:3e:a4:a7:09:50:8f:0b:00:64:25:41:2c:3f:a0: 75:03:8f:02:3e:10:f4:ad:1b:b0:24:83:7f:de:36:93:94:85: 7e:1f:4a:a1:81:43:46:d7:84:46:0f:26:a0:1f:a4:e9:72:03: fa:e8:64:a0:0e:ae:c9:9c:9c:df:d6:4b:a9:93:51:d9:2b:89: 45:10:3c:48:14:1d:a2:b7:8a:66:88:cc:85:5a:87:b7:3b:00: fd:c8:63:d0:b7:2a:c2:4c:e7:d7:fa:8c:95:30:61:b3:14:9c: e2:65:38:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUwOTE2MjIwNTM3WhcNMjUwOTIzMjIwNTM3WjAYMRYwFAYD VQQDEw02OGM5ZGYzMS04YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuChNmNV2kd9E29wiMYzjjQxzgPGvtGU76jv7bsqu3K+hoh7tLXb8dLt6KZR PHanTokDtmmXOOIenAhSmT2wVxCGAECmzQcxfxenChHTCm6OoC7PvocR/5ASSCYB T1z+vW8MYc5Tx2kc7YB6RuwQVRsbTTupwlDb16m75G+G0KKXbIRAmsMxFyjqFQ/Q JfCv152VZWgsRa0mSE6usiqTAXSjCXGxjipLkHjs0eRPS3TihMYN4nPzLrc7VG8L fJtA/0pWc53Ne8o5DAiBE6PBZSiF66BwnY3rhcqOhtp7TnqD3fS8eRWZ/PFN2eVT Yen8krIpQzyZnc3oVYupoALOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBz+OmD 00BSYbmiopaJ9g1cTZgiMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPyASOFhYJ+A+ld4Gz1hR6Q1qytoJAw/sR3HxoKPtbdNSsMSrAtAy4 JjbCK7TahY/WucDHAelfnZggD30y6cCMZPD0Jiy14D9bguMuu927bxf7ljC5E3Hv PkscPph0ylh/AEKE6EbUNHToA3CZBFlU1IxYu7iX0V8ubvYTn+e/VIZ5HIiu+Rx3 KKx3IFp/J+I3Z4CbPqSnCVCPCwBkJUEsP6B1A48CPhD0rRuwJIN/3jaTlIV+H0qh gUNG14RGDyagH6TpcgP66GSgDq7JnJzf1kupk1HZK4lFEDxIFB2it4pmiMyFWoe3 OwD9yGPQtyrCTOfX+oyVMGGzFJziZTha -----END CERTIFICATE-----Generated at Thu Sep 18 21:40:18 2025 by rpki-client