$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json) Hash identifier: B8bkIa9m6wpulwVPs7QePPw1QzKkkxC8qgi6s9+ZjZQ= Subject key identifier: 98:0C:6B:CF:2E:17:8C:E8:B2:B3:6C:9C:59:E6:75:6F:DC:68:3D:EB Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft Manifest number: 99 Signing time: Sun 19 Oct 2025 09:37:05 +0000 Manifest this update: Sun 19 Oct 2025 09:37:04 +0000 Manifest next update: Sun 26 Oct 2025 09:37:04 +0000 Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: HX/89ZfL1/3or9cTTB0UcC8hOSA1ofsim4Hjb2nesF8=) 2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: NFkplWmsMA3dKF672WmukIl9RpnNjHUYN1V/j7l+GN0=) 3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: FPrJ8rYYz3zXm+ulxONvcKZWR1V8127XQSJ/4rwqktA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Validity Not Before: Oct 19 09:37:04 2025 GMT Not After : Oct 26 09:37:04 2025 GMT Subject: CN=68f4b140-e25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:18:c7:33:ef:1a:8d:14:27:3f:db:c2:85: d2:8b:62:2b:3e:f9:f0:45:b3:2e:b5:01:aa:10:5c: 15:c9:b4:8f:26:2a:46:8d:e5:6b:fc:0d:55:fa:0c: f9:85:c4:fb:ec:41:5b:fc:d8:cc:ae:c6:9a:6e:3f: 02:29:1d:a5:43:e3:a1:f4:0e:ea:93:d5:af:da:48: 5f:4a:62:77:8b:a8:c2:ee:35:b4:58:b0:90:6b:2d: e7:09:91:ec:16:51:02:a7:91:2f:14:9c:19:c9:80: 25:77:22:bf:15:22:d3:25:4d:03:70:b8:9b:2f:53: 45:a6:58:3d:d9:c8:6a:93:0d:5a:12:48:4c:18:4e: bf:78:3a:71:ca:a6:1f:75:50:d7:50:68:46:4e:8b: 94:d5:ab:7a:85:84:e3:9b:49:3e:ff:9e:1b:1f:cf: 97:8b:84:b5:b5:ed:cd:98:18:d0:0e:fa:4a:d8:b0: 59:1a:4d:34:2a:55:66:e7:bb:a0:db:dc:c0:2a:9b: 50:b0:01:a6:14:e7:cb:9b:98:c7:73:3a:3d:bf:5f: a1:bc:fc:bf:e3:50:c3:91:bd:aa:8b:08:b3:55:63: 49:46:a5:21:d3:ee:5e:22:54:20:16:5d:19:e4:b1: 39:bf:2e:40:c7:3d:56:61:0f:e6:e6:2b:95:15:2b: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:6B:CF:2E:17:8C:E8:B2:B3:6C:9C:59:E6:75:6F:DC:68:3D:EB X509v3 Authority Key Identifier: keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:42:41:e0:32:08:2e:2f:f5:7b:42:1a:fd:21:1a:8a:cf:a4: da:7f:5c:8a:f5:52:0d:3a:0a:56:eb:5e:3c:21:f6:a1:90:a4: f8:f6:6f:e2:c5:1f:29:f7:a7:c0:7c:d3:ac:f1:bf:ea:95:f6: 51:8d:3c:a6:18:9a:3c:6a:f8:2d:cf:81:7b:0a:ad:c5:10:a4: c2:9e:ab:8c:36:77:6f:ee:e9:ca:90:bf:b9:b0:8f:fb:f8:60: 08:8d:fb:4f:b5:36:6b:2a:44:48:55:bf:0d:89:62:17:db:f6: 7c:7e:2f:fc:57:1c:c5:49:78:fc:7e:b8:8e:88:39:77:8e:e9: 11:71:95:96:4d:94:14:00:89:1a:cd:86:15:95:40:02:72:74: 12:fe:b0:71:c9:36:70:4b:9c:dd:68:50:dc:ce:eb:9f:e2:c5: 2b:99:33:ab:ce:d8:06:03:39:66:60:e8:10:c6:32:fa:66:07: 12:73:4b:30:53:19:c4:3a:28:31:ec:64:b5:ce:89:d1:4a:72: b8:4b:04:5c:06:ac:62:f8:90:72:98:51:29:c3:ba:60:89:74: 6d:a5:a0:8a:3a:39:58:4c:79:0a:b4:38:68:48:ba:2b:5c:21: b3:6d:15:aa:6d:dd:19:b1:2d:5d:44:e5:3d:65:53:fb:f5:2e: 57:14:e3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBM0MxMTAvBgNVBAUTKEVFODE5QTQ5QjhDOEE4NDQxM0VFOEZFODMyNkVGMTM3 RjUxODVDNjYwHhcNMjUxMDE5MDkzNzA0WhcNMjUxMDI2MDkzNzA0WjAYMRYwFAYD VQQDEw02OGY0YjE0MC1lMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26EYxzPvGo0UJz/bwoXSi2IrPvnwRbMutQGqEFwVybSPJipGjeVr/A1V+gz5 hcT77EFb/NjMrsaabj8CKR2lQ+Oh9A7qk9Wv2khfSmJ3i6jC7jW0WLCQay3nCZHs FlECp5EvFJwZyYAldyK/FSLTJU0DcLibL1NFplg92chqkw1aEkhMGE6/eDpxyqYf dVDXUGhGTouU1at6hYTjm0k+/54bH8+Xi4S1te3NmBjQDvpK2LBZGk00KlVm57ug 29zAKptQsAGmFOfLm5jHczo9v1+hvPy/41DDkb2qiwizVWNJRqUh0+5eIlQgFl0Z 5LE5vy5Axz1WYQ/m5iuVFSvkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgMa88u F4zosrNsnFnmdW/caD3rMB8GA1UdIwQYMBaAFO6Bmkm4yKhEE+6P6DJu8Tf1GFxm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83QkZCNENBQ0M2 QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFFUVQ3b19vTW03eE5fVVlY R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdvR2FTYmpJcUVRVDdvX29NbTd4Tl9VWVhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83QkZCNENBQ0M2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFF UVQ3b19vTW03eE5fVVlYR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBQkHgMgguL/V7Qhr9IRqKz6Taf1yK9VINOgpW6148IfahkKT49m/i xR8p96fAfNOs8b/qlfZRjTymGJo8avgtz4F7Cq3FEKTCnquMNndv7unKkL+5sI/7 +GAIjftPtTZrKkRIVb8NiWIX2/Z8fi/8VxzFSXj8friOiDl3jukRcZWWTZQUAIka zYYVlUACcnQS/rBxyTZwS5zdaFDczuuf4sUrmTOrztgGAzlmYOgQxjL6ZgcSc0sw UxnEOigx7GS1zonRSnK4SwRcBqxi+JBymFEpw7pgiXRtpaCKOjlYTHkKtDhoSLor XCGzbRWqbd0ZsS1dROU9ZVP79S5XFOMY -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:41 2025 by rpki-client