$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: g5e9f4a9D9jbOnzt2wz/2MhAQAQUCYmPsAHr+OEV8AM= Subject key identifier: BB:31:54:10:56:0A:ED:C3:17:79:EE:75:2F:AA:B1:5A:82:26:24:D5 Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 06C1 Signing time: Tue 12 Aug 2025 22:27:46 +0000 Manifest this update: Tue 12 Aug 2025 22:27:45 +0000 Manifest next update: Tue 19 Aug 2025 22:27:45 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: w+1hwIGQRJwwGkWbs1k8PaZl6dmr/UOdjS5ptqWdU18=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: 3P7zE+Wtx98FiHeFJ5MpJ+Mdyi0A3n8ttsX2hYFO/Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Aug 12 22:27:45 2025 GMT Not After : Aug 19 22:27:45 2025 GMT Subject: CN=689bbfe1-ab38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:4c:54:d0:8b:1e:51:0e:66:26:62:2e:da: 10:11:a4:2a:fa:c0:b1:08:ed:75:d7:a4:26:5f:4e: c2:c3:fa:5f:dd:3f:06:67:a1:e2:d2:f7:ba:7d:a3: 0f:f9:4d:40:88:2e:47:3b:ac:50:22:8d:e8:14:86: a1:f7:a5:8d:fe:40:16:c1:0d:c7:7a:20:1c:86:a6: 2e:a3:97:8c:43:5e:69:b3:32:9a:0d:55:3e:c2:25: c0:6a:e7:63:e4:df:8a:16:4c:b7:99:12:38:fa:bd: 6a:10:d7:89:72:3e:57:c9:35:0e:e2:23:56:7f:05: 3f:47:6d:08:6b:f3:96:d4:13:e0:0a:43:0a:52:06: eb:0e:d8:f2:4e:76:dd:b7:45:03:fe:c0:64:ce:4b: f5:c6:74:2e:f4:8f:25:a7:c4:15:c5:55:4c:16:6d: 40:98:03:6c:28:bf:16:8c:0f:ea:7f:e0:23:85:fa: e6:d7:6c:a3:c9:f7:c3:55:5d:14:0b:36:49:ef:51: 0b:71:83:81:b0:a6:83:c4:76:4b:87:e5:c9:14:b5: dd:2e:ad:ff:cb:ba:e0:b3:e8:72:d8:cb:48:1c:4e: fa:af:0a:fe:3c:46:84:73:b8:1a:55:0f:57:70:d2: cb:ff:b9:12:1c:09:5c:98:36:e3:d4:db:14:fc:ac: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:31:54:10:56:0A:ED:C3:17:79:EE:75:2F:AA:B1:5A:82:26:24:D5 X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e8:d3:81:81:b4:de:ee:b0:f4:28:f5:cf:5d:58:58:f0:6c: d0:50:6e:ba:4f:c7:fc:7a:26:91:05:f9:fd:5f:c7:d2:af:00: 7a:b2:a2:20:f8:4b:51:3e:5e:fc:e8:a6:a1:e4:e9:0e:bc:f7: 52:70:7c:82:f3:3f:f2:b3:64:fb:9c:4f:98:f7:ba:3d:72:84: 69:49:bf:0c:be:20:9e:cc:93:12:89:11:0e:a1:40:e1:be:79: 98:8f:a5:6a:f8:00:5f:3a:b9:df:79:d8:0e:a7:4a:81:d4:46: 33:8b:3f:a9:7f:c6:bc:4a:d2:d5:22:b5:9b:81:ff:4b:c5:af: a1:79:54:5e:f1:1e:e1:cc:93:93:5d:ec:06:0c:7b:ab:e3:2b: 04:7c:68:e0:d1:6b:47:78:bb:20:f2:35:ef:83:73:a4:bd:22: a4:6a:a0:11:22:28:e5:9b:a0:a7:f9:17:ee:38:57:e8:cd:ac: 69:bd:e3:af:0c:a8:b3:34:f0:da:99:38:ce:dc:7a:c7:c6:3f: 7d:6c:6f:70:d0:e7:ff:2e:5e:4c:46:de:a2:c0:47:d9:99:15: 5e:21:03:06:4b:fe:0d:9a:4a:24:45:4c:ec:d9:b8:fe:8c:4a: 90:af:b6:6e:66:0d:33:ce:ed:ac:13:72:ef:db:5b:24:6d:b3: 09:c8:74:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUwODEyMjIyNzQ1WhcNMjUwODE5MjIyNzQ1WjAYMRYwFAYD VQQDEw02ODliYmZlMS1hYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSlMVNCLHlEOZiZiLtoQEaQq+sCxCO1116QmX07Cw/pf3T8GZ6Hi0ve6faMP +U1AiC5HO6xQIo3oFIah96WN/kAWwQ3HeiAchqYuo5eMQ15pszKaDVU+wiXAaudj 5N+KFky3mRI4+r1qENeJcj5XyTUO4iNWfwU/R20Ia/OW1BPgCkMKUgbrDtjyTnbd t0UD/sBkzkv1xnQu9I8lp8QVxVVMFm1AmANsKL8WjA/qf+Ajhfrm12yjyffDVV0U CzZJ71ELcYOBsKaDxHZLh+XJFLXdLq3/y7rgs+hy2MtIHE76rwr+PEaEc7gaVQ9X cNLL/7kSHAlcmDbj1NsU/Kz3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsxVBBW Cu3DF3nudS+qsVqCJiTVMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR6NOBgbTe7rD0KPXPXVhY8GzQUG66T8f8eiaRBfn9X8fSrwB6sqIg +EtRPl786Kah5OkOvPdScHyC8z/ys2T7nE+Y97o9coRpSb8MviCezJMSiREOoUDh vnmYj6Vq+ABfOrnfedgOp0qB1EYziz+pf8a8StLVIrWbgf9Lxa+heVRe8R7hzJOT XewGDHur4ysEfGjg0WtHeLsg8jXvg3OkvSKkaqARIijlm6Cn+RfuOFfozaxpveOv DKizNPDamTjO3HrHxj99bG9w0Of/Ll5MRt6iwEfZmRVeIQMGS/4NmkokRUzs2bj+ jEqQr7ZuZg0zzu2sE3Lv21skbbMJyHQk -----END CERTIFICATE-----Generated at Wed Aug 13 09:49:26 2025 by rpki-client