$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json) Hash identifier: qgXEdGmVfUtg9lkmII2BlM0DwobP8Kzk3BCaS8Gz/GY= Subject key identifier: 35:1E:62:2D:06:CA:AB:5C:6F:31:32:DF:FE:B7:53:D2:5A:AB:3E:47 Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft Manifest number: 7E Signing time: Sun 19 Oct 2025 10:02:26 +0000 Manifest this update: Sun 19 Oct 2025 10:02:25 +0000 Manifest next update: Sun 26 Oct 2025 10:02:25 +0000 Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: RO8H8+80kKAprMljRQQTy5qWHG4AZmhKrgZc+6Ss0nE=) 2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: 6QHt7FPePc9ME7gIJCijX1TcfEpQyK9WI3BiH/AqMwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7 Validity Not Before: Oct 19 10:02:25 2025 GMT Not After : Oct 26 10:02:25 2025 GMT Subject: CN=68f4b731-8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:4b:69:32:49:98:17:09:c6:b8:a6:62:37: 42:d3:7e:76:12:64:c4:e2:fb:a7:70:f1:15:98:8d: db:c0:84:8b:f3:d7:b1:6b:46:f7:e2:e8:3c:3e:69: 89:9b:54:c2:4d:e8:58:4a:3c:28:dc:de:9f:ee:22: f4:7a:6e:d1:d4:0b:65:46:38:22:bf:9b:f0:15:1d: 5b:6e:3c:c9:4a:0e:3f:7e:dd:32:a3:75:e7:7c:c3: bd:cf:4e:b1:f3:a0:29:73:dc:69:3e:40:d9:a5:f1: a5:6c:ff:1a:b9:1d:c9:0d:5a:17:16:ef:24:ef:31: 1c:9d:d5:5e:62:e0:db:0c:8d:12:cf:c6:5c:01:77: c4:4f:50:04:34:7d:e7:e0:d9:3b:89:ed:85:43:54: 46:eb:81:81:83:5e:a4:ce:83:d7:63:8b:82:78:de: 52:61:8f:0d:b7:5c:46:71:5c:6f:7a:78:a8:4a:89: 11:d9:b8:61:0a:ab:64:40:c2:87:55:39:8d:4f:1c: 75:24:4f:87:0b:38:e6:d9:53:87:83:35:5b:82:9b: 5b:ba:1d:b1:6f:40:d1:e3:03:56:99:e3:55:6c:48: 45:53:46:0f:e8:d3:22:1b:3f:c3:5c:b0:9a:0d:c7: 7b:f9:0b:e3:e1:2c:c4:4c:e4:c5:73:86:16:64:d2: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1E:62:2D:06:CA:AB:5C:6F:31:32:DF:FE:B7:53:D2:5A:AB:3E:47 X509v3 Authority Key Identifier: keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2f:ff:d0:b2:f5:96:ff:b7:33:b1:c8:46:bd:2f:bd:0b:ed: 1f:91:87:85:54:75:50:04:d8:f4:5d:88:13:29:5e:f5:60:9a: 27:c5:41:bc:35:63:47:0e:ee:d6:fc:35:aa:9e:82:6d:a3:2d: c9:f7:6d:a6:1e:e6:69:dc:99:cb:3a:d7:39:ed:ed:e3:06:a2: 4c:b1:f2:d4:33:d0:6a:da:bd:40:21:39:99:10:82:f5:ba:fe: 65:79:42:97:21:4d:b4:51:4d:b3:91:6e:8d:d1:4c:45:13:c7: 37:e2:34:81:4e:6f:c8:3b:cc:30:99:fe:8a:c7:72:f2:c7:93: 83:d5:a8:32:25:06:12:b7:f2:0a:04:ef:2f:49:56:a9:ac:da: 5c:1f:fd:9c:67:64:f3:15:9f:c9:60:66:f7:20:19:6b:84:43: 18:96:0c:91:1b:f6:cb:c7:4e:e7:64:10:1f:87:12:9f:1c:fd: f0:f7:9f:47:58:f6:06:e8:6f:2f:8e:6d:04:9a:66:f9:e9:69: 91:d2:bd:64:cb:16:57:28:61:fd:b1:26:a4:e8:f6:d0:ea:a1: 0f:99:70:6b:99:1f:e0:2b:d5:61:7a:f9:24:8d:25:b1:0f:69: 39:46:de:51:1b:b9:9c:4d:f0:2d:65:78:4f:ab:ea:39:e2:dd: c8:0d:ed:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGMzcxMTAvBgNVBAUTKDZBRjE5MTVDODlGNTBDNzJBRDE2RjQxOUNEMzZFRjEy RjRBREEzQzcwHhcNMjUxMDE5MTAwMjI1WhcNMjUxMDI2MTAwMjI1WjAYMRYwFAYD VQQDEw02OGY0YjczMS04NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIdLaTJJmBcJxrimYjdC0352EmTE4vuncPEVmI3bwISL89exa0b34ug8PmmJ m1TCTehYSjwo3N6f7iL0em7R1AtlRjgiv5vwFR1bbjzJSg4/ft0yo3XnfMO9z06x 86Apc9xpPkDZpfGlbP8auR3JDVoXFu8k7zEcndVeYuDbDI0Sz8ZcAXfET1AENH3n 4Nk7ie2FQ1RG64GBg16kzoPXY4uCeN5SYY8Nt1xGcVxvenioSokR2bhhCqtkQMKH VTmNTxx1JE+HCzjm2VOHgzVbgptbuh2xb0DR4wNWmeNVbEhFU0YP6NMiGz/DXLCa Dcd7+Qvj4SzETOTFc4YWZNL6HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUeYi0G yqtcbzEy3/63U9Jaqz5HMB8GA1UdIwQYMBaAFGrxkVyJ9QxyrRb0Gc027xL0raPH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0YzNy9FNTEyMzdFQUVF ODMxMUVGQUY1OEI3M0ZDNEY5QUUwMi9hdkdSWEluMURIS3RGdlFaelRidkV2U3Rv OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0YzNy9FNTEyMzdFQUVFODMxMUVGQUY1OEI3M0ZDNEY5QUUwMi9hdkdSWEluMURI S3RGdlFaelRidkV2U3RvOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHL//QsvWW/7czschGvS+9C+0fkYeFVHVQBNj0XYgTKV71YJonxUG8 NWNHDu7W/DWqnoJtoy3J922mHuZp3JnLOtc57e3jBqJMsfLUM9Bq2r1AITmZEIL1 uv5leUKXIU20UU2zkW6N0UxFE8c34jSBTm/IO8wwmf6Kx3Lyx5OD1agyJQYSt/IK BO8vSVaprNpcH/2cZ2TzFZ/JYGb3IBlrhEMYlgyRG/bLx07nZBAfhxKfHP3w959H WPYG6G8vjm0Emmb56WmR0r1kyxZXKGH9sSak6PbQ6qEPmXBrmR/gK9VhevkkjSWx D2k5Rt5RG7mcTfAtZXhPq+o54t3IDe0e -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:59 2025 by rpki-client