$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: eahhBeoEGwro32FLOs1R8hCPc3zkeQKpEWrabE2+68o= Subject key identifier: 86:A0:D9:BE:F1:00:72:11:6C:CB:DF:D3:E9:62:ED:9E:30:F1:61:BB Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0B75 Signing time: Fri 08 Aug 2025 19:18:08 +0000 Manifest this update: Fri 08 Aug 2025 19:18:08 +0000 Manifest next update: Fri 15 Aug 2025 19:18:08 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: SThK94k8/+s+NCaZZB9tb9aZoaSVCmV6kUAXd7igi3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Aug 8 19:18:08 2025 GMT Not After : Aug 15 19:18:08 2025 GMT Subject: CN=68964d70-ba24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:e4:2d:39:a9:29:ef:ac:e1:aa:ec:a3:d8: b7:c1:dd:41:da:4d:f8:ec:bc:76:78:43:2a:17:e7: 89:5b:16:27:ac:83:9c:2e:da:f9:d9:f1:f6:92:3a: c4:19:8d:9d:18:f6:8d:ca:c3:08:00:f8:67:9a:21: f4:f1:8e:67:8a:de:2f:8c:6a:fb:37:45:4f:df:62: 66:79:de:3d:2f:78:f1:d5:17:36:6d:eb:63:dc:30: 9f:fc:24:11:fe:23:5c:26:6a:be:0d:93:23:1a:39: c5:78:6c:cd:e4:32:76:6c:47:9f:ec:43:6c:0b:e9: 5d:6b:38:42:98:c4:fa:80:48:43:23:6a:9e:d4:17: a4:08:c9:b4:ca:53:c7:70:ce:ff:df:e6:5f:c1:81: 82:69:27:5a:a4:82:0c:87:59:90:81:4c:b9:91:f3: 1b:5c:5f:c8:56:f4:90:77:d5:fe:ff:91:75:0b:20: 01:e0:27:fd:73:17:1e:67:03:ca:97:3b:cc:7c:c1: 51:17:f0:40:bb:19:69:44:30:5b:3f:7d:10:85:f2: f0:f0:92:46:7d:1c:12:15:05:c3:aa:22:b5:32:19: f3:ac:24:d9:85:6d:2f:7a:9f:de:0c:aa:1a:51:f5: 5f:f9:2e:1e:25:cd:6d:44:4e:d9:8f:8e:5a:7a:31: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A0:D9:BE:F1:00:72:11:6C:CB:DF:D3:E9:62:ED:9E:30:F1:61:BB X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:0a:08:8c:18:23:db:fa:7d:30:a8:e5:01:0d:51:79:a6:2e: 2f:3f:d8:86:ce:06:89:b4:0e:d7:2c:eb:1a:b1:25:cf:84:c4: 44:d1:b1:25:66:80:66:ec:89:e4:0e:89:be:5e:c1:8c:d2:e4: 33:bc:15:9c:21:f7:03:53:29:d4:8b:54:99:b2:b7:91:bd:8a: c4:24:62:ed:da:bb:ed:34:2b:3f:1f:11:36:96:85:2a:f7:dd: 7f:9f:e4:f2:df:ef:37:57:f0:8f:41:1f:6e:b2:fd:6d:ba:77: c2:90:ee:54:cf:02:77:d7:95:90:70:64:6f:a5:1e:d0:e2:5b: 8a:45:d0:06:92:db:d9:41:3a:2f:b3:e7:e5:26:36:99:23:52: 43:3e:c8:e7:f6:49:64:29:a7:f3:66:e7:14:67:68:b9:c2:da: f9:d1:66:13:ba:ca:50:bd:28:69:97:ad:9b:12:9c:13:dc:62: 2f:d1:ea:d8:19:46:3f:e2:b3:a1:22:bf:1b:d4:00:3e:5e:af: b5:47:0a:6c:85:e8:d2:83:14:63:86:05:9a:fd:b0:f8:59:df: 20:4f:5b:86:35:f1:9c:b8:1b:cc:8f:69:58:d5:61:4b:c3:9b: ce:17:40:46:57:1c:77:26:bc:99:05:5f:c0:c4:6d:5d:82:30: 12:d8:21:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUwODA4MTkxODA4WhcNMjUwODE1MTkxODA4WjAYMRYwFAYD VQQDEw02ODk2NGQ3MC1iYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxznkLTmpKe+s4arso9i3wd1B2k347Lx2eEMqF+eJWxYnrIOcLtr52fH2kjrE GY2dGPaNysMIAPhnmiH08Y5nit4vjGr7N0VP32Jmed49L3jx1Rc2betj3DCf/CQR /iNcJmq+DZMjGjnFeGzN5DJ2bEef7ENsC+ldazhCmMT6gEhDI2qe1BekCMm0ylPH cM7/3+ZfwYGCaSdapIIMh1mQgUy5kfMbXF/IVvSQd9X+/5F1CyAB4Cf9cxceZwPK lzvMfMFRF/BAuxlpRDBbP30QhfLw8JJGfRwSFQXDqiK1MhnzrCTZhW0vep/eDKoa UfVf+S4eJc1tRE7Zj45aejEBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIag2b7x AHIRbMvf0+li7Z4w8WG7MB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfCgiMGCPb+n0wqOUBDVF5pi4vP9iGzgaJtA7XLOsasSXPhMRE0bEl ZoBm7InkDom+XsGM0uQzvBWcIfcDUynUi1SZsreRvYrEJGLt2rvtNCs/HxE2loUq 991/n+Ty3+83V/CPQR9usv1tunfCkO5UzwJ315WQcGRvpR7Q4luKRdAGktvZQTov s+flJjaZI1JDPsjn9klkKafzZucUZ2i5wtr50WYTuspQvShpl62bEpwT3GIv0erY GUY/4rOhIr8b1AA+Xq+1RwpshejSgxRjhgWa/bD4Wd8gT1uGNfGcuBvMj2lY1WFL w5vOF0BGVxx3JryZBV/AxG1dgjAS2CGn -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:58 2025 by rpki-client