$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: zjcOfvVTmeRnmTF4qTUAhacURphoQd7ULheYv22BI80= Subject key identifier: C9:E5:88:A7:FB:BF:59:F0:48:E1:8C:EC:7B:65:91:2D:5A:3A:52:2E Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 9D Signing time: Mon 20 Oct 2025 14:29:46 +0000 Manifest this update: Mon 20 Oct 2025 14:29:45 +0000 Manifest next update: Mon 27 Oct 2025 14:29:45 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: yoW66mW5bO0Wp8QM1sNmYZPn/8kfH2CdD9ll2Jpjv1o=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: RGDwrnHLpwoltlbpIvS3zEQYJokw21O0scCTRV6lF5o=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: ASozTCqLLf2W3v4/3oV7UOvO2kqTmGagQ7fGwleiFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Oct 20 14:29:45 2025 GMT Not After : Oct 27 14:29:45 2025 GMT Subject: CN=68f64759-5f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:2d:46:83:c6:b9:1f:7d:51:ee:eb:21:11: 64:b5:df:33:65:ad:ef:e3:2b:fe:50:cd:5b:d2:4c: 92:02:59:4a:e0:10:d9:6e:18:78:82:bf:a8:ad:ae: 03:00:9c:94:15:1b:31:09:af:47:0a:23:81:b9:8e: 5c:cd:2e:9c:e5:4a:e4:31:5c:42:cf:28:6c:05:98: 50:c7:69:91:ef:e8:3a:c1:10:64:5e:db:65:07:95: a3:fd:44:ac:bc:ea:cc:91:9f:ed:3a:de:f7:8f:df: e9:d5:60:0b:86:92:13:38:4a:64:0d:43:9e:eb:ac: c9:bd:83:28:c3:1a:cf:9a:97:86:c9:f4:e6:58:ab: 07:41:0e:db:9a:44:0c:cd:e2:d6:ff:ad:c8:51:4e: 05:ec:56:c6:9a:6f:4c:be:26:3d:9c:b8:4a:fe:c2: e4:f9:e4:1b:3f:ac:0a:11:5e:68:31:f4:77:96:05: 21:71:b6:90:6e:24:4b:db:52:80:9e:ee:dd:1a:af: e0:20:f6:49:e7:7d:44:59:e4:6e:dc:6d:56:d5:79: 3e:16:04:ed:7d:58:bc:03:20:7e:7c:22:e1:1a:4a: 56:67:cd:ed:e8:e5:86:dd:13:f9:39:e1:27:75:93: 53:c1:10:8e:cf:50:5f:93:31:74:f6:4c:20:32:ec: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E5:88:A7:FB:BF:59:F0:48:E1:8C:EC:7B:65:91:2D:5A:3A:52:2E X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d8:5f:af:8c:85:7e:38:37:6f:6e:91:3f:de:93:f4:25:5b: a2:9b:b8:c2:b1:60:16:de:9c:f5:f4:60:47:72:67:5f:bc:ef: a1:1d:3e:ee:63:01:2c:7a:c4:b0:44:5f:21:e9:52:5a:a4:5b: 04:fe:f8:5d:d3:48:e1:14:0d:14:3a:1b:4f:40:64:33:db:da: 77:8f:91:28:ac:2b:7e:c3:2a:f4:dc:f8:cc:0b:04:c9:b0:52: fa:58:e7:ee:64:73:d8:1a:78:13:26:99:3b:0b:3c:65:49:5b: 21:52:8c:b2:6c:83:fe:cf:35:92:e9:06:95:0e:bf:43:dc:ab: b6:ab:35:1a:39:2e:ae:cb:44:ee:fc:24:e4:e9:d0:af:a0:17: 83:dd:40:43:a2:84:d6:29:69:25:d3:6e:25:b2:93:43:fb:2b: b7:3c:68:dd:bf:90:ae:8e:3a:24:9a:8c:0c:2b:cc:b7:d1:54: 4a:70:7d:97:46:92:69:0c:b5:01:71:a4:63:3b:28:6b:51:9e: a8:90:01:c8:5e:44:3a:65:a2:9a:6f:8d:41:87:f1:36:95:6c: 9b:63:a6:36:e6:3c:23:40:f3:aa:9a:cc:fa:5f:01:ef:6b:cf: e8:5e:21:0a:99:1c:ac:5e:9e:0d:01:dd:93:dd:1b:71:11:6a: 69:74:2a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjUxMDIwMTQyOTQ1WhcNMjUxMDI3MTQyOTQ1WjAYMRYwFAYD VQQDEw02OGY2NDc1OS01ZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK0tRoPGuR99Ue7rIRFktd8zZa3v4yv+UM1b0kySAllK4BDZbhh4gr+ora4D AJyUFRsxCa9HCiOBuY5czS6c5UrkMVxCzyhsBZhQx2mR7+g6wRBkXttlB5Wj/USs vOrMkZ/tOt73j9/p1WALhpITOEpkDUOe66zJvYMowxrPmpeGyfTmWKsHQQ7bmkQM zeLW/63IUU4F7FbGmm9MviY9nLhK/sLk+eQbP6wKEV5oMfR3lgUhcbaQbiRL21KA nu7dGq/gIPZJ531EWeRu3G1W1Xk+FgTtfVi8AyB+fCLhGkpWZ83t6OWG3RP5OeEn dZNTwRCOz1BfkzF09kwgMuwa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnliKf7 v1nwSOGM7HtlkS1aOlIuMB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv2F+vjIV+ODdvbpE/3pP0JVuim7jCsWAW3pz19GBHcmdfvO+hHT7u YwEsesSwRF8h6VJapFsE/vhd00jhFA0UOhtPQGQz29p3j5EorCt+wyr03PjMCwTJ sFL6WOfuZHPYGngTJpk7CzxlSVshUoyybIP+zzWS6QaVDr9D3Ku2qzUaOS6uy0Tu /CTk6dCvoBeD3UBDooTWKWkl024lspND+yu3PGjdv5CujjokmowMK8y30VRKcH2X RpJpDLUBcaRjOyhrUZ6okAHIXkQ6ZaKab41Bh/E2lWybY6Y25jwjQPOqmsz6XwHv a8/oXiEKmRysXp4NAd2T3RtxEWppdCoN -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:26 2025 by rpki-client