$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft File: 7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json) Hash identifier: R7X0Xx+ZA1NR0Ez7In1Mzu6wTEa4v1QR/rxOrkTgaf4= Subject key identifier: 1E:97:80:02:B0:71:1A:43:2E:7A:0A:6B:F3:E8:2C:3A:86:8D:C8:C5 Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 Certificate issuer: /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Certificate serial: 30CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft Manifest number: 30C9 Signing time: Tue 04 Nov 2025 15:27:51 +0000 Manifest this update: Tue 04 Nov 2025 15:27:50 +0000 Manifest next update: Tue 11 Nov 2025 15:27:50 +0000 Files and hashes: 1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: 3oi9JDddV3zf9r18DUGbd21lTK3uD1xkZM+o+n0RXUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12490 (0x30ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170 Validity Not Before: Nov 4 15:27:50 2025 GMT Not After : Nov 11 15:27:50 2025 GMT Subject: CN=690a1b77-a701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:5b:bf:49:47:3a:12:78:9f:5e:6d:10:8e: dc:49:c2:ef:88:e3:c0:9d:d2:1e:d7:4b:39:09:6f: 6a:f8:2e:6d:46:24:a2:90:06:e2:50:55:92:1c:74: 21:23:9a:18:46:e2:56:92:f4:74:34:31:79:9c:5d: 92:2f:0e:7c:ac:03:89:a0:9d:26:8e:df:7d:76:1f: 00:c2:f8:38:2b:df:ed:ba:75:d3:68:95:94:2c:c0: 8d:34:26:2d:19:49:8c:20:38:1f:82:a4:3c:52:d2: b1:87:34:0c:90:6b:ac:9c:03:da:f7:4c:4f:76:e0: 1b:54:01:4d:7f:ba:cc:b0:c1:07:61:2b:c7:47:a4: 8f:d8:ce:03:0a:e8:22:07:75:64:38:fe:2a:c0:d3: 3b:09:f4:ee:8e:c2:8a:92:b6:68:39:01:39:58:02: ce:81:b9:d7:c8:43:19:5c:f0:53:a1:e4:9c:7a:b2: 46:58:af:a5:27:5d:5a:f2:c9:c0:99:67:6d:83:a1: 00:ec:40:98:0f:95:06:d3:d2:a6:54:89:4e:d6:b7: 0a:a9:1b:8a:b9:ba:aa:bc:5a:e5:ca:59:21:0d:d7: f8:5d:c2:f9:bb:45:26:a8:8e:0a:fc:ab:e0:04:49: 14:8d:10:cf:89:24:5d:6c:43:ce:fe:a3:44:cc:2e: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:97:80:02:B0:71:1A:43:2E:7A:0A:6B:F3:E8:2C:3A:86:8D:C8:C5 X509v3 Authority Key Identifier: keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:65:5f:40:29:9e:88:f2:85:fc:67:d6:14:72:af:0c:e9:c1: 60:96:da:bd:23:17:5d:45:19:bc:9d:5b:dc:6d:49:50:e2:bb: c1:b2:0f:2e:e2:45:68:7a:b2:85:6d:9f:4d:05:39:3c:b8:0b: 10:69:75:7d:4a:33:52:71:38:4a:e7:81:d0:f5:ea:88:31:0e: a5:36:bd:a5:24:e8:e4:9b:7b:cc:6c:62:24:f3:c9:7b:3b:04: 06:43:62:7d:2c:d0:34:f1:f6:6d:3f:7a:4f:8c:28:92:b8:3a: a6:15:4d:d2:6d:3b:5d:57:9f:d9:93:f5:f2:5f:a7:53:70:e3: 81:5a:ed:be:62:19:ed:fa:b4:05:ee:01:c5:29:b2:1c:cd:00: b8:ed:aa:f5:1e:2e:0e:2b:e4:0e:b5:a1:bc:c3:fc:2e:1d:69: 73:c1:1d:ea:91:c3:98:7e:8e:7b:5a:a1:81:b0:b2:82:32:02: 9c:1e:fb:ce:5c:41:5b:9f:ee:71:51:ae:47:2d:da:4b:ab:02: 92:e1:8f:c1:0f:42:c9:06:5a:f3:b6:e5:2f:32:2e:dd:e8:83: be:3a:fa:42:b7:33:24:0d:42:4c:33:e3:26:ed:7a:0e:34:07: 47:c2:22:c7:34:d9:53:b8:f5:5f:f2:83:ea:11:45:52:1d:2d: f6:48:54:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3ODYxMTAvBgNVBAUTKEVENTQ1MUY4NjExMTk4MkI2N0FEQTBBNEMwNkM1MUQ0 QTA4MDAxNzAwHhcNMjUxMTA0MTUyNzUwWhcNMjUxMTExMTUyNzUwWjAYMRYwFAYD VQQDEw02OTBhMWI3Ny1hNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJtbv0lHOhJ4n15tEI7cScLviOPAndIe10s5CW9q+C5tRiSikAbiUFWSHHQh I5oYRuJWkvR0NDF5nF2SLw58rAOJoJ0mjt99dh8Awvg4K9/tunXTaJWULMCNNCYt GUmMIDgfgqQ8UtKxhzQMkGusnAPa90xPduAbVAFNf7rMsMEHYSvHR6SP2M4DCugi B3VkOP4qwNM7CfTujsKKkrZoOQE5WALOgbnXyEMZXPBToeScerJGWK+lJ11a8snA mWdtg6EA7ECYD5UG09KmVIlO1rcKqRuKubqqvFrlylkhDdf4XcL5u0UmqI4K/Kvg BEkUjRDPiSRdbEPO/qNEzC56nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6XgAKw cRpDLnoKa/PoLDqGjcjFMB8GA1UdIwQYMBaAFO1UUfhhEZgrZ62gpMBsUdSggAFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc4Ni9FRUNENDYwNEU5 MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1DdG5yYUNrd0d4UjFLQ0FB WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdWUlItR0VSbUN0bnJhQ2t3R3hSMUtDQUFYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc4Ni9FRUNENDYwNEU5MkIxMUUyODdGM0JEOTQ1OTExRUEzMi83VlJSLUdFUm1D dG5yYUNrd0d4UjFLQ0FBWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGZV9AKZ6I8oX8Z9YUcq8M6cFgltq9IxddRRm8nVvcbUlQ4rvBsg8u 4kVoerKFbZ9NBTk8uAsQaXV9SjNScThK54HQ9eqIMQ6lNr2lJOjkm3vMbGIk88l7 OwQGQ2J9LNA08fZtP3pPjCiSuDqmFU3SbTtdV5/Zk/XyX6dTcOOBWu2+Yhnt+rQF 7gHFKbIczQC47ar1Hi4OK+QOtaG8w/wuHWlzwR3qkcOYfo57WqGBsLKCMgKcHvvO XEFbn+5xUa5HLdpLqwKS4Y/BD0LJBlrztuUvMi7d6IO+OvpCtzMkDUJMM+Mm7XoO NAdHwiLHNNlTuPVf8oPqEUVSHS32SFSH -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:21 2025 by rpki-client