$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: ZXnbfe7H3UTbga3rPmA5K1sW2GIfD0k2Gj0J2YzioN4= Subject key identifier: EC:F9:67:B1:76:A1:46:AB:04:76:A1:25:0E:71:79:38:C8:9D:20:47 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 0776 Signing time: Sat 18 Oct 2025 23:00:19 +0000 Manifest this update: Sat 18 Oct 2025 23:00:19 +0000 Manifest next update: Sat 25 Oct 2025 23:00:19 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: wH2ZhCz9YpDf/9PN5BFyO3d9Xyq1bEkmzdaxcu3iZ8k=) 2: DAFE4B0C795E11F0B29D8165C4F9AE02.roa (hash: sGjYPA02vzARTW+wA7XWlc/cbQ26Obsq/GZUeZJ2nk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: Oct 18 23:00:19 2025 GMT Not After : Oct 25 23:00:19 2025 GMT Subject: CN=68f41c03-29c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:22:b9:d6:69:81:ce:42:3f:7b:80:70:a8: 7d:b8:45:c6:e2:5c:82:f5:78:8f:24:3e:93:2e:39: 83:2b:0d:58:ec:b3:d4:8e:e5:19:42:cc:39:a5:56: 47:e3:ec:35:bc:b1:6c:53:8f:11:47:24:99:d7:3b: 35:ed:3e:c1:23:e3:34:f6:7e:cf:be:b8:0a:53:4b: e0:65:e5:54:ed:34:f5:b2:48:a4:51:1b:af:0e:86: f7:66:50:84:43:35:c8:62:99:ed:69:12:e6:fc:22: c7:7e:4f:80:6e:7b:6c:48:ac:fe:2c:19:c1:60:61: cc:b5:e7:be:ae:5c:f0:1e:45:56:8c:02:07:93:a7: 1e:cc:f3:58:6f:12:a4:b9:0d:96:52:df:1e:87:d8: 0c:81:8c:67:37:c6:60:79:42:17:92:50:11:76:a6: 1d:80:34:9f:32:41:e5:c0:bb:de:29:4a:2b:82:4b: de:01:d6:30:0c:ec:c0:01:2c:fa:5c:d6:1a:8d:6b: e6:95:05:9d:66:be:ca:95:ff:ad:8f:c8:6a:82:d0: 3e:ad:90:39:54:b0:cf:00:0d:84:55:b0:b5:4b:dc: e2:60:32:eb:bc:0c:32:11:37:d5:85:09:4d:ed:24: 69:3e:a0:92:2b:d5:94:d4:f1:ec:92:6b:d4:3c:01: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F9:67:B1:76:A1:46:AB:04:76:A1:25:0E:71:79:38:C8:9D:20:47 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b3:57:5a:77:da:d9:7c:1a:13:aa:e9:2f:cd:a9:63:28:2f: 39:79:21:3a:ef:e1:cd:35:6c:e7:88:0a:fb:20:11:88:20:fc: dd:e6:15:7e:ec:4c:b5:a3:86:ee:b6:62:de:3a:ab:0d:0c:8e: eb:1a:30:45:dc:4d:c2:df:42:c3:fc:49:c3:57:4b:a0:9b:19: ad:02:60:61:b1:8c:b4:ee:ab:db:e2:89:d0:c4:d8:09:fc:9d: 18:45:29:b0:f1:14:ce:e9:c2:f3:05:79:54:36:4f:3e:88:c7: df:a9:3d:69:b6:00:0c:3c:04:8a:c1:0b:64:06:e7:87:8c:5f: 47:1a:26:52:a7:77:68:95:ab:47:4a:16:d8:79:56:81:76:a6: 74:28:70:7f:5a:f8:cd:2e:c1:02:77:f8:6b:a6:10:b6:c7:d5: 14:db:99:ca:3a:43:75:4f:38:17:07:ed:1f:de:6b:aa:75:6d: 5d:7f:07:94:3f:f0:29:9a:1e:31:3e:07:5c:d7:6a:05:d8:24: 77:86:97:77:72:e1:8c:cb:a1:bf:ae:d8:0a:5e:08:0a:0d:61: a2:45:41:6a:73:84:23:95:24:aa:a6:fa:d6:97:83:c1:14:de: 8a:52:68:43:39:4d:86:23:8c:ae:7f:bd:0a:21:dd:53:7f:13: 10:de:46:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUxMDE4MjMwMDE5WhcNMjUxMDI1MjMwMDE5WjAYMRYwFAYD VQQDEw02OGY0MWMwMy0yOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTwiudZpgc5CP3uAcKh9uEXG4lyC9XiPJD6TLjmDKw1Y7LPUjuUZQsw5pVZH 4+w1vLFsU48RRySZ1zs17T7BI+M09n7PvrgKU0vgZeVU7TT1skikURuvDob3ZlCE QzXIYpntaRLm/CLHfk+AbntsSKz+LBnBYGHMtee+rlzwHkVWjAIHk6cezPNYbxKk uQ2WUt8eh9gMgYxnN8ZgeUIXklARdqYdgDSfMkHlwLveKUorgkveAdYwDOzAASz6 XNYajWvmlQWdZr7Klf+tj8hqgtA+rZA5VLDPAA2EVbC1S9ziYDLrvAwyETfVhQlN 7SRpPqCSK9WU1PHskmvUPAG6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz5Z7F2 oUarBHahJQ5xeTjInSBHMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBs1dad9rZfBoTqukvzaljKC85eSE67+HNNWzniAr7IBGIIPzd5hV+ 7Ey1o4butmLeOqsNDI7rGjBF3E3C30LD/EnDV0ugmxmtAmBhsYy07qvb4onQxNgJ /J0YRSmw8RTO6cLzBXlUNk8+iMffqT1ptgAMPASKwQtkBueHjF9HGiZSp3dolatH ShbYeVaBdqZ0KHB/WvjNLsECd/hrphC2x9UU25nKOkN1TzgXB+0f3muqdW1dfweU P/Apmh4xPgdc12oF2CR3hpd3cuGMy6G/rtgKXggKDWGiRUFqc4QjlSSqpvrWl4PB FN6KUmhDOU2GI4yuf70KId1TfxMQ3kZZ -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:10 2025 by rpki-client