$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: S8p2M1n3Z/VhxmjppGQf6f6rb5ugO7j05H9E0MZgdjM= Subject key identifier: D0:5E:03:9A:FC:7C:54:61:88:69:5B:24:A6:73:5A:99:A4:51:07:E9 Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 02C4 Signing time: Sun 19 Oct 2025 03:35:55 +0000 Manifest this update: Sun 19 Oct 2025 03:35:55 +0000 Manifest next update: Sun 26 Oct 2025 03:35:55 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: IM7S+JLIyaFph3IQt0E0o4CczAf5jijpatz5Jw7YCvM=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: Pomp25euWUzW6bLzCINDqzM6FpJj6K+BUv6uncbVybw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Oct 19 03:35:55 2025 GMT Not After : Oct 26 03:35:55 2025 GMT Subject: CN=68f45c9b-c144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:e5:13:b3:47:36:0c:4a:ac:39:d1:b2:70: 09:92:7a:f1:fa:cc:d2:97:5b:a1:57:b9:91:57:8f: f5:86:21:be:7f:41:0e:f1:59:8b:44:06:fb:ff:ac: de:c7:3c:9e:3e:e6:c4:e8:c2:0a:03:9c:b7:3e:61: 52:90:c3:21:3d:a7:f8:9a:f1:43:d5:2c:4d:ac:a4: 76:37:ad:f4:3a:5c:aa:48:24:e6:aa:ba:cb:09:b8: ec:19:03:27:06:79:6b:9e:d4:8c:c1:16:5d:17:d6: 2b:90:db:37:27:35:66:fb:1f:8a:09:2a:e5:68:6d: 2e:dc:be:f5:9e:60:44:59:61:36:9d:9b:d5:f2:3b: 13:ec:27:e2:60:b1:86:3e:7f:2c:f9:74:65:f7:6a: 14:06:65:67:85:a9:c5:46:22:c9:15:d9:18:bd:ac: b2:fe:2c:0b:77:78:e9:90:79:ca:cc:ff:d4:b7:a4: 44:47:78:cd:b4:5d:a8:74:70:a5:b7:c8:1b:72:97: 53:59:94:db:2e:e7:b4:a8:40:45:77:3f:d0:96:aa: e3:28:11:d0:fc:12:d6:dc:2b:44:ac:9d:cf:17:39: ad:94:2e:55:6f:21:1a:17:3c:5f:83:19:fa:da:d9: 8c:91:9b:88:ac:51:4d:3d:0f:f1:6b:58:87:90:bb: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5E:03:9A:FC:7C:54:61:88:69:5B:24:A6:73:5A:99:A4:51:07:E9 X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:88:5e:5e:0c:c5:16:d7:8a:61:cd:23:37:32:18:d2:1a:73: 01:0e:77:88:79:f6:15:ed:37:dd:19:20:cb:51:c6:05:b9:5c: 84:ed:f4:42:3c:fd:2a:14:fd:f7:3c:f1:c6:3b:5b:a0:55:1b: 2e:dc:19:f1:ee:08:79:fb:e7:39:66:86:25:51:98:9c:30:51: 5a:d6:e0:b6:a0:f2:b5:bd:82:f7:ac:59:d7:29:c7:3f:02:d0: 8b:dc:74:c5:65:87:ad:bc:99:e3:21:9b:af:71:d9:a1:82:1f: 5f:ba:dd:f7:34:d8:6d:71:6c:c0:ad:37:5d:d8:1f:1b:d9:0f: da:94:3a:8d:28:05:68:56:7a:20:d2:54:bf:29:2e:8f:e8:c0: 39:3e:22:80:81:b9:93:94:29:84:73:e0:84:a1:e1:d3:16:ab: 5c:96:d3:b3:ba:3f:41:9f:e6:68:e2:26:0b:a9:53:16:81:95: fa:93:fd:f5:4f:67:41:76:56:c6:84:03:88:d1:71:76:89:8e: 00:f9:49:5d:af:8c:e0:15:b7:08:7a:b2:35:53:cc:88:8f:e3: d1:fd:d6:d6:ae:83:60:bc:29:44:96:12:ef:29:2c:e4:5f:b9: 7e:cf:67:f5:7b:05:39:9f:85:29:e4:41:8f:8d:dd:d4:27:b1: 0b:0c:ab:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUxMDE5MDMzNTU1WhcNMjUxMDI2MDMzNTU1WjAYMRYwFAYD VQQDEw02OGY0NWM5Yi1jMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2HlE7NHNgxKrDnRsnAJknrx+szSl1uhV7mRV4/1hiG+f0EO8VmLRAb7/6ze xzyePubE6MIKA5y3PmFSkMMhPaf4mvFD1SxNrKR2N630OlyqSCTmqrrLCbjsGQMn BnlrntSMwRZdF9YrkNs3JzVm+x+KCSrlaG0u3L71nmBEWWE2nZvV8jsT7CfiYLGG Pn8s+XRl92oUBmVnhanFRiLJFdkYvayy/iwLd3jpkHnKzP/Ut6RER3jNtF2odHCl t8gbcpdTWZTbLue0qEBFdz/QlqrjKBHQ/BLW3CtErJ3PFzmtlC5VbyEaFzxfgxn6 2tmMkZuIrFFNPQ/xa1iHkLvmmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBeA5r8 fFRhiGlbJKZzWpmkUQfpMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7iF5eDMUW14phzSM3MhjSGnMBDneIefYV7TfdGSDLUcYFuVyE7fRC PP0qFP33PPHGO1ugVRsu3Bnx7gh5++c5ZoYlUZicMFFa1uC2oPK1vYL3rFnXKcc/ AtCL3HTFZYetvJnjIZuvcdmhgh9fut33NNhtcWzArTdd2B8b2Q/alDqNKAVoVnog 0lS/KS6P6MA5PiKAgbmTlCmEc+CEoeHTFqtcltOzuj9Bn+Zo4iYLqVMWgZX6k/31 T2dBdlbGhAOI0XF2iY4A+Uldr4zgFbcIerI1U8yIj+PR/dbWroNgvClElhLvKSzk X7l+z2f1ewU5n4Up5EGPjd3UJ7ELDKvp -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:10 2025 by rpki-client