$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: rawZjv1RB+/StAyWJ+st49EQfOT+NBtlpZqpTzJZSr0= Subject key identifier: D7:0D:B2:01:4D:91:52:8E:1A:F4:07:5E:A7:89:13:8E:24:9D:39:FE Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 020A Signing time: Sun 19 Oct 2025 04:42:58 +0000 Manifest this update: Sun 19 Oct 2025 04:42:57 +0000 Manifest next update: Sun 26 Oct 2025 04:42:57 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: Vm92a9z5yq939H3kaYGcaDL7kP/3hDCSDMcbKW8MeUM=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Oct 19 04:42:57 2025 GMT Not After : Oct 26 04:42:57 2025 GMT Subject: CN=68f46c51-cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:2f:83:20:17:bf:60:74:09:5e:dd:3f:c7: fd:16:9c:6b:96:4b:dd:d3:c5:4f:c5:7b:4c:7a:12: cc:a7:3e:4d:10:bf:fc:c8:d9:dd:23:6d:88:d3:1d: e2:83:c1:79:79:ab:ce:cb:e9:85:74:be:56:8a:6d: 61:e6:7f:62:40:cc:69:54:41:4a:18:d9:0d:90:26: 64:dc:3d:98:77:b8:3f:1f:e4:a9:b8:ef:32:0d:a1: 13:c5:c8:ae:b8:31:4a:bd:cb:dd:cb:e4:0e:02:46: 32:41:fe:ab:5d:3b:03:ba:c6:94:5c:a2:6a:e7:35: dd:db:77:d0:39:ec:1a:37:bf:ae:40:4c:80:e6:64: 67:ba:bb:bb:3a:3c:a7:35:d5:c4:70:f8:8d:28:c7: ed:13:1c:b7:07:42:7c:84:d3:36:ee:b1:88:7e:31: a8:fe:cc:fe:38:64:b5:f6:e1:64:d0:f4:e3:1b:6b: 03:5d:65:24:cb:e7:7f:0f:7c:9c:59:dc:81:8d:49: 6b:ab:11:05:9b:fd:1b:ed:7a:50:79:18:bc:ac:29: a3:38:ce:20:73:67:f6:b0:6d:13:ec:b4:7e:87:72: d7:51:50:01:54:40:9a:63:02:5e:d1:cd:27:2b:18: 79:90:f7:e7:cc:53:64:8e:f4:63:1b:4b:f5:36:9d: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0D:B2:01:4D:91:52:8E:1A:F4:07:5E:A7:89:13:8E:24:9D:39:FE X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:af:21:88:f0:74:e3:25:3c:26:31:e6:66:13:9e:5e:f5:03: 83:15:c2:40:ab:a6:1b:a7:83:7d:a1:c1:44:fc:51:9b:cd:f8: aa:f5:8b:5b:dd:f1:1f:f8:b1:5c:f4:41:d4:70:b9:29:5a:4c: 17:ed:71:fa:92:e4:c2:1a:4d:ae:73:d6:38:98:2e:f3:71:91: 54:09:b3:08:2e:6b:56:5c:f1:76:0e:70:e2:ee:57:58:26:b4: 0c:58:5c:af:49:e5:81:01:c4:4b:e1:64:20:38:e3:3a:bd:37: 6f:d0:b9:cd:ba:1e:d2:6d:4d:d5:9b:f6:d8:27:03:93:dd:d9: e5:ea:02:a2:84:f5:af:80:3b:85:f7:17:99:c5:4d:0c:9b:bb: ff:2c:5b:11:28:76:6b:9e:34:f6:65:97:18:48:df:7c:b5:2e: ad:7e:5d:72:80:c8:5e:36:b8:fa:b4:74:37:92:bc:29:e8:f8: 4a:88:d2:db:85:15:ad:b3:b5:93:b9:ec:ba:9a:fc:98:09:2d: b8:ea:db:46:63:1b:82:8d:e6:64:03:63:ba:39:72:80:6b:61: b3:a6:5b:7d:1a:97:d9:f2:85:62:5f:94:cb:22:41:fd:ea:c0: 5e:be:3e:4c:ac:63:d5:dd:c7:16:58:0e:86:41:cc:d8:68:39: be:af:41:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUxMDE5MDQ0MjU3WhcNMjUxMDI2MDQ0MjU3WjAYMRYwFAYD VQQDEw02OGY0NmM1MS1jYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPAvgyAXv2B0CV7dP8f9Fpxrlkvd08VPxXtMehLMpz5NEL/8yNndI22I0x3i g8F5eavOy+mFdL5Wim1h5n9iQMxpVEFKGNkNkCZk3D2Yd7g/H+SpuO8yDaETxciu uDFKvcvdy+QOAkYyQf6rXTsDusaUXKJq5zXd23fQOewaN7+uQEyA5mRnuru7Ojyn NdXEcPiNKMftExy3B0J8hNM27rGIfjGo/sz+OGS19uFk0PTjG2sDXWUky+d/D3yc WdyBjUlrqxEFm/0b7XpQeRi8rCmjOM4gc2f2sG0T7LR+h3LXUVABVECaYwJe0c0n Kxh5kPfnzFNkjvRjG0v1Np3jUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcNsgFN kVKOGvQHXqeJE44knTn+MB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfryGI8HTjJTwmMeZmE55e9QODFcJAq6Ybp4N9ocFE/FGbzfiq9Ytb 3fEf+LFc9EHUcLkpWkwX7XH6kuTCGk2uc9Y4mC7zcZFUCbMILmtWXPF2DnDi7ldY JrQMWFyvSeWBAcRL4WQgOOM6vTdv0LnNuh7SbU3Vm/bYJwOT3dnl6gKihPWvgDuF 9xeZxU0Mm7v/LFsRKHZrnjT2ZZcYSN98tS6tfl1ygMheNrj6tHQ3krwp6PhKiNLb hRWts7WTuey6mvyYCS246ttGYxuCjeZkA2O6OXKAa2Gzplt9GpfZ8oViX5TLIkH9 6sBevj5MrGPV3ccWWA6GQczYaDm+r0EV -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:57 2025 by rpki-client