$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: QHdbUYLznnmnM8oS6L/4cgCnVmwcN/QOkC6uGVnbe/4= Subject key identifier: A6:A7:A7:8F:6B:80:AB:23:43:C1:2D:30:E5:4B:4C:BE:5B:30:E2:4B Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 06ED Signing time: Tue 04 Nov 2025 22:03:53 +0000 Manifest this update: Tue 04 Nov 2025 22:03:53 +0000 Manifest next update: Tue 11 Nov 2025 22:03:53 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: jKPkdSMPTH6R29IEq6EdfXgULVYc//R3/PHUpghhR5I=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: +RlQrZP27VhwQZfpQ7NB0SSwiNNy2ueJpVSFdx75riA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Nov 4 22:03:53 2025 GMT Not After : Nov 11 22:03:53 2025 GMT Subject: CN=690a7849-dc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:52:31:51:a2:4d:f1:d1:fe:dd:29:e7:4c: b7:23:a6:dc:21:20:47:a3:02:06:5b:06:6a:ab:bf: bf:4d:e9:33:f9:0f:f6:fc:fb:7b:54:93:b0:8c:46: fb:a9:20:a1:a9:aa:18:40:0a:1a:2d:a8:d4:9b:15: 5d:64:34:83:79:e2:c4:4b:bb:8a:ee:7d:47:11:70: 91:d3:51:e7:1b:3e:ed:6d:16:f8:53:c7:b4:d3:a8: 3c:52:c2:94:5d:7c:70:c6:94:c5:1b:fc:7a:a2:fc: 66:26:7d:d9:89:d0:ff:7c:a6:0c:15:18:6d:5f:f7: 36:57:5d:fd:5a:a4:46:c4:52:62:f1:cd:16:4a:7c: e8:c4:02:46:98:a2:c6:34:29:85:40:19:77:ab:9f: 75:b8:3e:11:c2:b5:fd:fe:be:27:c4:73:c4:bc:59: 0a:d0:af:88:b4:ba:6a:6e:d3:fc:6f:f7:7c:15:d0: d5:a9:1c:0d:9f:d4:53:6d:5e:62:d0:b0:11:58:3d: 31:d7:6d:92:44:74:fc:cc:38:e5:bb:7a:e4:06:9f: cf:21:d9:d4:d9:77:c0:17:90:52:69:40:86:8d:6a: 2f:dc:c4:85:a9:58:8f:51:a4:5d:d9:03:82:fc:61: 2b:80:b5:49:a9:d5:f8:e3:2d:7a:77:fc:a4:b1:89: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A7:A7:8F:6B:80:AB:23:43:C1:2D:30:E5:4B:4C:BE:5B:30:E2:4B X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5c:9b:95:d2:8a:a4:67:d6:50:1c:7e:fd:ec:31:3e:8d:d1: 40:9c:85:2a:37:d4:e4:e7:03:58:57:a5:22:62:cc:2b:fb:80: 16:04:0e:7f:6e:b1:74:60:b0:89:bb:e2:1c:54:a5:ad:fd:ec: 79:ee:b6:32:59:c8:2e:b2:7b:51:c7:67:d0:65:90:0b:18:9f: 1e:0f:03:58:d6:48:07:bc:27:1f:c8:e1:db:2f:04:a2:ce:8b: 4e:47:ea:17:4a:1c:46:3d:28:42:a1:5b:ed:61:b2:ad:c4:2d: ae:a8:8c:94:7a:b9:dd:88:36:ae:e8:bd:c1:df:52:ef:14:cd: 7e:2a:db:80:76:1a:cf:e0:71:e4:6c:3e:c3:d0:b9:5a:d5:1c: b0:6b:be:48:ac:ce:90:02:36:38:6d:d5:d6:d6:79:a2:0e:a5: 00:15:14:dc:f1:05:18:84:a3:46:9f:3f:13:cd:33:e4:ab:6d: 8e:53:5c:a0:2b:1a:b2:9a:35:36:d4:13:4b:16:3b:43:7e:ed: cf:bf:94:c6:27:41:dd:b0:9e:b0:3b:75:84:47:fa:39:63:82: 4e:7f:50:43:22:c7:0f:17:b1:58:8b:eb:92:8b:ca:17:e5:1e: c0:76:ec:80:2d:06:54:5f:16:37:15:8b:57:30:fb:b1:52:24: 76:8b:36:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUxMTA0MjIwMzUzWhcNMjUxMTExMjIwMzUzWjAYMRYwFAYD VQQDEw02OTBhNzg0OS1kYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZBSMVGiTfHR/t0p50y3I6bcISBHowIGWwZqq7+/Tekz+Q/2/Pt7VJOwjEb7 qSChqaoYQAoaLajUmxVdZDSDeeLES7uK7n1HEXCR01HnGz7tbRb4U8e006g8UsKU XXxwxpTFG/x6ovxmJn3ZidD/fKYMFRhtX/c2V139WqRGxFJi8c0WSnzoxAJGmKLG NCmFQBl3q591uD4RwrX9/r4nxHPEvFkK0K+ItLpqbtP8b/d8FdDVqRwNn9RTbV5i 0LARWD0x122SRHT8zDjlu3rkBp/PIdnU2XfAF5BSaUCGjWov3MSFqViPUaRd2QOC /GErgLVJqdX44y16d/yksYla9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKanp49r gKsjQ8EtMOVLTL5bMOJLMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKXJuV0oqkZ9ZQHH797DE+jdFAnIUqN9Tk5wNYV6UiYswr+4AWBA5/ brF0YLCJu+IcVKWt/ex57rYyWcgusntRx2fQZZALGJ8eDwNY1kgHvCcfyOHbLwSi zotOR+oXShxGPShCoVvtYbKtxC2uqIyUerndiDau6L3B31LvFM1+KtuAdhrP4HHk bD7D0Lla1Rywa75IrM6QAjY4bdXW1nmiDqUAFRTc8QUYhKNGnz8TzTPkq22OU1yg KxqymjU21BNLFjtDfu3Pv5TGJ0HdsJ6wO3WER/o5Y4JOf1BDIscPF7FYi+uSi8oX 5R7AduyALQZUXxY3FYtXMPuxUiR2izbB -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:55 2025 by rpki-client