$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: vspBvKuRfh2eyky09QyIH5Fxte+/KVMAGFl42YbdgtY= Subject key identifier: 76:9D:D5:4D:C4:6F:04:D9:04:6D:3D:D3:EE:99:50:68:B4:3A:E2:D7 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 097E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0961 Signing time: Sat 18 Oct 2025 21:16:59 +0000 Manifest this update: Sat 18 Oct 2025 21:16:58 +0000 Manifest next update: Sat 25 Oct 2025 21:16:58 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: MKwyE3oe2blEO9YzJfjnTbQkAV588nz07HGBR+FzAvc=) 2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: ohub1su2eLkcxe2mnfMUSQeEjo+GPwYrkG+K0CsdsDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2430 (0x97e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Oct 18 21:16:58 2025 GMT Not After : Oct 25 21:16:58 2025 GMT Subject: CN=68f403ca-f1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:3d:1d:82:e7:e4:7c:82:49:82:61:9e:d2: 11:e3:2b:a9:b8:c9:6b:c0:97:67:2f:ed:12:34:9d: 46:59:7a:60:79:82:c9:43:c8:cc:9e:65:2d:eb:1d: f2:f7:da:f5:c6:14:e1:aa:b2:03:34:18:e7:a5:a8: 75:68:38:61:1f:1a:bc:9d:70:5b:93:68:59:ed:60: 59:98:98:dd:8e:ff:c7:de:fc:8f:6c:5c:c4:90:57: f7:24:44:54:ca:19:fb:c5:51:ad:1d:e5:e4:62:86: 6a:da:e7:b4:4b:06:24:a6:22:9f:77:46:e7:d9:d4: 39:9e:70:7e:37:2f:33:09:e2:74:46:7b:1a:7a:54: 82:c5:e6:a0:b1:80:42:cf:cd:5b:d4:22:c5:c0:ee: 0b:21:29:54:27:20:2c:ba:39:68:46:0a:2d:57:1f: e3:7f:65:99:d5:80:9e:80:16:c1:58:2c:db:4a:b3: bc:97:1b:bf:63:f2:83:9c:da:4b:3e:fe:55:64:ee: 33:0a:ab:91:e8:e4:9f:66:d7:f8:24:01:44:3d:ec: 49:f0:e2:7b:0d:ba:d2:90:e4:85:50:f9:65:06:31: 07:dd:eb:3c:d5:88:26:b0:2a:b4:75:9a:cc:41:7f: 08:00:dc:95:33:58:c5:ee:a0:d3:c0:ba:58:4a:b3: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9D:D5:4D:C4:6F:04:D9:04:6D:3D:D3:EE:99:50:68:B4:3A:E2:D7 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bd:f1:a3:9b:1a:90:52:69:86:3b:3b:14:77:49:06:7c:8b: fd:53:c3:91:28:da:62:34:0a:d6:a7:2b:bd:ab:4c:ac:92:31: 0c:ef:ec:4d:63:83:de:0e:e1:86:66:3b:08:8d:b8:d0:fb:cf: 02:0a:be:7e:3f:d4:46:65:1c:f0:86:e8:09:a8:51:69:4a:82: 06:22:b4:34:33:36:c0:88:e3:57:0a:9d:72:f4:01:c5:14:12: 56:f8:dd:4c:c1:f3:6c:80:ea:1a:ee:a8:a6:ff:1b:17:75:61: 72:ea:c5:6c:8a:08:4e:26:57:e2:57:8f:07:36:5b:68:bf:c1: 21:b1:8d:68:32:11:aa:7d:3c:ff:41:08:8d:c7:3d:40:99:8d: 43:82:47:f1:e8:63:57:9c:01:36:b3:59:7b:4c:fa:0e:e9:11: cf:6c:f6:17:1f:e3:21:e1:b1:fe:44:27:f7:4e:17:03:0e:c5: 87:43:0d:33:b5:3a:0f:47:73:48:62:bf:13:8c:57:20:f9:d4: 11:51:3d:8c:b0:80:72:fb:de:20:50:3a:26:47:20:5f:d9:76: 64:bd:f1:cf:0c:f1:72:78:8d:01:db:05:58:73:16:54:e4:9c: db:95:08:16:96:59:13:4e:7f:37:15:39:a3:28:ff:57:f3:61: 37:82:6c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjUxMDE4MjExNjU4WhcNMjUxMDI1MjExNjU4WjAYMRYwFAYD VQQDEw02OGY0MDNjYS1mMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1io9HYLn5HyCSYJhntIR4yupuMlrwJdnL+0SNJ1GWXpgeYLJQ8jMnmUt6x3y 99r1xhThqrIDNBjnpah1aDhhHxq8nXBbk2hZ7WBZmJjdjv/H3vyPbFzEkFf3JERU yhn7xVGtHeXkYoZq2ue0SwYkpiKfd0bn2dQ5nnB+Ny8zCeJ0RnsaelSCxeagsYBC z81b1CLFwO4LISlUJyAsujloRgotVx/jf2WZ1YCegBbBWCzbSrO8lxu/Y/KDnNpL Pv5VZO4zCquR6OSfZtf4JAFEPexJ8OJ7DbrSkOSFUPllBjEH3es81YgmsCq0dZrM QX8IANyVM1jF7qDTwLpYSrOaxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHad1U3E bwTZBG090+6ZUGi0OuLXMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfvfGjmxqQUmmGOzsUd0kGfIv9U8ORKNpiNArWpyu9q0yskjEM7+xN Y4PeDuGGZjsIjbjQ+88CCr5+P9RGZRzwhugJqFFpSoIGIrQ0MzbAiONXCp1y9AHF FBJW+N1MwfNsgOoa7qim/xsXdWFy6sVsighOJlfiV48HNltov8EhsY1oMhGqfTz/ QQiNxz1AmY1Dgkfx6GNXnAE2s1l7TPoO6RHPbPYXH+Mh4bH+RCf3ThcDDsWHQw0z tToPR3NIYr8TjFcg+dQRUT2MsIBy+94gUDomRyBf2XZkvfHPDPFyeI0B2wVYcxZU 5JzblQgWllkTTn83FTmjKP9X82E3gmw9 -----END CERTIFICATE-----Generated at Sun Oct 19 23:06:26 2025 by rpki-client