$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: W/Ng7Xim16qXkFMtFOLs8DtTF5lgIAvyvT5PRkLmmyk= Subject key identifier: 77:F3:EA:22:EF:D8:47:3F:B7:38:DD:D6:CE:2F:C1:60:83:88:9B:AC Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 09:29:21 +0000 Manifest this update: Sun 19 Oct 2025 09:29:20 +0000 Manifest next update: Sun 26 Oct 2025 09:29:20 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: ihwGCH9SZ4z+2Mb+NraVclwYqAok1JQnoRYilK2g2ho=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Oct 19 09:29:20 2025 GMT Not After : Oct 26 09:29:20 2025 GMT Subject: CN=68f4af71-6644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:92:b4:9e:be:1d:7a:b1:e5:dd:60:48:73: 5e:6d:b8:f6:3c:2f:ad:6e:75:f4:c8:bf:67:6a:3f: 85:78:78:fc:21:11:89:91:61:c9:2b:25:53:cb:52: a5:a0:ad:11:6e:a1:21:04:43:64:05:70:07:b7:71: 37:40:f6:48:3d:82:37:ef:d8:a6:86:3f:02:ef:ea: b4:33:7e:38:1c:4d:ff:96:d0:2d:b8:98:27:23:ac: 56:e9:b6:18:2c:3b:c2:48:82:b6:3a:f0:7c:de:96: 57:79:ac:c4:ba:4c:b7:52:e3:5f:f2:ed:4e:84:64: 6f:34:39:55:ca:dd:f5:cd:6f:96:4b:21:55:80:cf: 35:0b:33:d2:58:ae:47:37:b6:ac:e4:ac:68:13:31: 83:f6:e3:2d:0a:6e:08:1b:c0:d3:9d:68:b4:39:4b: 7e:6f:28:a8:4e:70:f6:6b:19:69:dd:bf:f4:4b:c0: 8c:85:59:71:56:c1:42:7a:01:82:76:e9:8c:99:30: c1:bb:53:db:fd:8d:9e:e1:0b:65:ac:7b:55:24:fa: 21:77:62:7a:4e:d3:9e:62:82:b0:1e:8b:a1:9d:7b: b5:5c:81:01:3c:71:1c:a9:ab:dc:8b:ec:d3:cd:21: 34:a5:29:78:4f:8f:51:18:f0:d6:69:b4:29:f1:2d: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:EA:22:EF:D8:47:3F:B7:38:DD:D6:CE:2F:C1:60:83:88:9B:AC X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6a:e5:7c:9e:18:57:7c:9a:13:9f:cc:16:44:b9:70:e7:68: d2:14:46:87:30:42:c8:5f:dc:aa:0c:c9:58:f1:7b:38:de:e4: 0f:53:b1:2b:26:30:8b:af:86:32:6f:d1:58:bb:a2:e6:e8:3e: 4f:72:3d:16:13:50:9f:fa:3d:98:4c:4f:83:76:11:79:d2:99: 85:b4:cb:1b:a3:06:94:ce:12:74:1a:63:35:49:73:a0:7b:9e: ae:45:d9:de:d4:21:c0:f9:b8:0f:4b:da:09:e9:b4:25:fe:3a: 1c:f0:92:34:1c:b6:af:10:5e:93:76:71:d9:bf:7f:fa:81:b9: 3c:c1:ca:89:5c:e1:48:d3:d8:ab:47:0f:03:88:34:0a:78:a7: c2:73:a9:d0:b0:ec:75:1e:69:80:da:ea:35:fd:86:8c:f7:4d: 36:da:a7:b0:f8:09:91:e8:29:42:df:93:2b:1c:28:6b:02:59: 41:ef:8e:08:ee:2e:38:46:c4:ae:bc:53:69:d1:cc:15:20:61: 27:70:a2:f5:bb:16:5c:31:8e:93:44:ef:f8:c4:d8:28:c8:9c: df:a5:8f:39:c3:5a:16:67:5c:7d:12:a2:f7:fc:56:64:f7:1b: 8e:29:4c:11:a8:af:99:86:3c:68:fc:b9:4b:50:f1:ab:18:14: 7f:d6:cb:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3NTcxMTAvBgNVBAUTKEQzQkE0NERBNUNCREMxQ0M1MTI1RTJDMTAwN0I2Q0RC N0REQ0RDODUwHhcNMjUxMDE5MDkyOTIwWhcNMjUxMDI2MDkyOTIwWjAYMRYwFAYD VQQDEw02OGY0YWY3MS02NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1R2StJ6+HXqx5d1gSHNebbj2PC+tbnX0yL9naj+FeHj8IRGJkWHJKyVTy1Kl oK0RbqEhBENkBXAHt3E3QPZIPYI379imhj8C7+q0M344HE3/ltAtuJgnI6xW6bYY LDvCSIK2OvB83pZXeazEuky3UuNf8u1OhGRvNDlVyt31zW+WSyFVgM81CzPSWK5H N7as5KxoEzGD9uMtCm4IG8DTnWi0OUt+byioTnD2axlp3b/0S8CMhVlxVsFCegGC dumMmTDBu1Pb/Y2e4QtlrHtVJPohd2J6TtOeYoKwHouhnXu1XIEBPHEcqavci+zT zSE0pSl4T49RGPDWabQp8S0xvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfz6iLv 2Ec/tzjd1s4vwWCDiJusMB8GA1UdIwQYMBaAFNO6RNpcvcHMUSXiwQB7bNt93NyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc1Ny8zMjkzNENFQ0Iz N0ExMUVGOUMwN0M2NUJDNEY5QUUwMi8wN3BFMmx5OXdjeFJKZUxCQUh0czIzM2Mz SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc1Ny8zMjkzNENFQ0IzN0ExMUVGOUMwN0M2NUJDNEY5QUUwMi8wN3BFMmx5OXdj eFJKZUxCQUh0czIzM2MzSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYauV8nhhXfJoTn8wWRLlw52jSFEaHMELIX9yqDMlY8Xs43uQPU7Er JjCLr4Yyb9FYu6Lm6D5Pcj0WE1Cf+j2YTE+DdhF50pmFtMsbowaUzhJ0GmM1SXOg e56uRdne1CHA+bgPS9oJ6bQl/joc8JI0HLavEF6TdnHZv3/6gbk8wcqJXOFI09ir Rw8DiDQKeKfCc6nQsOx1HmmA2uo1/YaM90022qew+AmR6ClC35MrHChrAllB744I 7i44RsSuvFNp0cwVIGEncKL1uxZcMY6TRO/4xNgoyJzfpY85w1oWZ1x9EqL3/FZk 9xuOKUwRqK+Zhjxo/LlLUPGrGBR/1svk -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:41 2025 by rpki-client