$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json) Hash identifier: hZjPNQBweRhbtEocqf4ZnAW4Y7NhASHOBbZJUP6dWaQ= Subject key identifier: 84:D0:9A:C3:3F:CE:08:ED:E1:C5:05:C3:38:8B:D6:26:EF:93:C5:1C Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft Manifest number: 4F Signing time: Sun 19 Oct 2025 10:41:01 +0000 Manifest this update: Sun 19 Oct 2025 10:41:00 +0000 Manifest next update: Sun 26 Oct 2025 10:41:00 +0000 Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: w2qd/I838TEg1UHs2wlDjD0zg/QLSxTGB7vsuMozVow=) 2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Validity Not Before: Oct 19 10:41:00 2025 GMT Not After : Oct 26 10:41:00 2025 GMT Subject: CN=68f4c03d-61ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:6b:a8:aa:fe:77:05:de:0c:dd:e7:d5:97: 4a:52:9e:2f:cf:2b:26:d8:a7:75:9b:57:37:33:57: 34:05:2b:72:fb:c7:34:d1:a0:3b:d3:83:12:3c:2e: 99:c6:71:2f:5b:c4:38:e8:0f:41:c5:9b:8e:26:b1: 64:c6:cb:2d:0e:25:88:80:04:fb:68:cf:14:ef:56: ff:a6:03:a8:1f:f6:0f:cc:35:50:d8:21:6a:f4:13: 42:f7:3a:58:81:26:29:72:27:0d:95:18:89:fb:cb: 37:ee:f2:d0:bb:de:cb:6d:0a:d8:ff:30:f5:a7:02: b8:d6:f0:10:a2:c7:1b:5e:1b:4d:41:89:ea:e3:53: 17:91:fd:17:01:84:67:2e:67:99:1f:ba:39:a0:36: 72:59:78:f6:ce:e6:b1:8e:6e:44:6d:72:77:ee:d2: 15:88:8a:46:cf:79:7c:60:4b:63:af:5e:58:9d:8b: de:57:20:c7:88:25:c5:cc:d5:df:6d:c3:fb:7a:39: d8:7d:2f:dd:3b:7d:ab:d6:db:a6:e2:c9:b7:61:8c: e3:ac:93:dc:97:ba:d7:d3:48:0b:4e:23:5c:59:a7: 96:d8:0a:9b:67:56:94:6c:18:ee:d6:b6:f3:88:8c: 28:3b:99:b6:ae:e4:5b:0f:56:37:2c:dd:53:7d:c2: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:9A:C3:3F:CE:08:ED:E1:C5:05:C3:38:8B:D6:26:EF:93:C5:1C X509v3 Authority Key Identifier: keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2c:db:30:13:9b:70:2f:99:a1:68:12:f9:19:5b:a6:b0:d7: fa:d2:a2:22:e4:68:41:77:31:0c:f0:5d:93:78:74:78:64:c7: ac:45:ba:03:18:ad:f7:bf:b4:57:d8:1f:56:b4:41:aa:a2:b6: 95:5f:b1:c7:2d:15:4d:74:8f:20:e8:21:68:c6:2a:c5:25:f0: 27:77:cd:4e:4e:0d:83:bc:a1:87:bd:63:89:0c:68:a9:23:d9: af:a5:81:a6:c4:ae:bf:7b:36:6c:14:5c:18:ae:84:9c:ca:6a: 85:43:50:99:a2:23:75:df:1f:40:dd:a2:42:75:f8:28:cd:65: 3e:97:69:4a:ce:f9:e7:e3:0c:73:5f:ee:5e:72:13:11:00:1a: 5c:29:3c:c8:de:45:83:0e:15:fa:0f:1a:19:68:9b:80:84:28: 3a:ec:8e:f2:3b:80:b7:1b:24:d2:68:01:bb:1d:0e:1e:74:a0: 3d:6e:6d:db:d8:62:dc:6d:fc:09:58:e3:3e:3a:cd:dd:09:72: 3b:bc:b6:33:04:91:3c:b5:2b:10:db:ef:1f:9e:34:28:3a:96: df:cd:5f:f7:45:55:7a:f8:72:ac:20:c4:55:be:fa:eb:a2:db: 90:a7:28:3e:e1:22:2c:fb:fd:86:b8:e0:be:01:7e:e8:61:25: 3b:9c:24:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUY2NDExMC8GA1UEBRMoQjNFRUNGMTY3MjU2MTQ0QTQ2QTFEQUI0OEI4MDgwRDc5 MEQyMDQzQzAeFw0yNTEwMTkxMDQxMDBaFw0yNTEwMjYxMDQxMDBaMBgxFjAUBgNV BAMTDTY4ZjRjMDNkLTYxY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrtWuoqv53Bd4M3efVl0pSni/PKybYp3WbVzczVzQFK3L7xzTRoDvTgxI8LpnG cS9bxDjoD0HFm44msWTGyy0OJYiABPtozxTvVv+mA6gf9g/MNVDYIWr0E0L3OliB JilyJw2VGIn7yzfu8tC73sttCtj/MPWnArjW8BCixxteG01BierjUxeR/RcBhGcu Z5kfujmgNnJZePbO5rGObkRtcnfu0hWIikbPeXxgS2OvXlidi95XIMeIJcXM1d9t w/t6Odh9L907favW26biybdhjOOsk9yXutfTSAtOI1xZp5bYCptnVpRsGO7WtvOI jCg7mbau5FsPVjcs3VN9whz7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhNCawz/O CO3hxQXDOIvWJu+TxRwwHwYDVR0jBBgwFoAUs+7PFnJWFEpGodq0i4CA15DSBDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RjY0L0ExRTBEODNBMzQ2 NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy03UEZuSldGRXBHb2RxMGk0Q0ExNURTQkR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RjY0L0ExRTBEODNBMzQ2NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVw R29kcTBpNENBMTVEU0JEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE8s2zATm3AvmaFoEvkZW6aw1/rSoiLkaEF3MQzwXZN4dHhkx6xFugMY rfe/tFfYH1a0QaqitpVfscctFU10jyDoIWjGKsUl8Cd3zU5ODYO8oYe9Y4kMaKkj 2a+lgabErr97NmwUXBiuhJzKaoVDUJmiI3XfH0DdokJ1+CjNZT6XaUrO+efjDHNf 7l5yExEAGlwpPMjeRYMOFfoPGhlom4CEKDrsjvI7gLcbJNJoAbsdDh50oD1ubdvY Ytxt/AlY4z46zd0Jcju8tjMEkTy1KxDb7x+eNCg6lt/NX/dFVXr4cqwgxFW++uui 25CnKD7hIiz7/Ya44L4BfuhhJTucJAc= -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:51 2025 by rpki-client