$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: MxuUUQc53ZSBbBes6lHgoX6PFhcR5HS992FVwEjzO5s= Subject key identifier: 28:A3:8A:FF:01:68:56:0F:BE:04:90:A2:8D:7E:CA:E6:CA:4B:CE:9A Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0C31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0C1A Signing time: Sat 18 Oct 2025 19:32:10 +0000 Manifest this update: Sat 18 Oct 2025 19:32:09 +0000 Manifest next update: Sat 25 Oct 2025 19:32:09 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: Pyz2dlCuyTy5Y+IFtuDV3u7pBkiJ1OLiPiBqzxQQdeM=) 2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=) 4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3121 (0xc31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: Oct 18 19:32:09 2025 GMT Not After : Oct 25 19:32:09 2025 GMT Subject: CN=68f3eb39-7434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:3c:e0:62:b8:85:fe:71:9c:9f:58:09:67: 4e:85:1f:6e:f3:33:60:10:63:d7:bc:9e:90:70:7b: 32:e3:ce:f0:19:75:08:73:01:f3:05:7a:13:94:4e: 87:5b:14:87:03:d4:55:24:c1:99:97:db:41:d4:88: f7:15:11:03:d4:a6:25:38:1b:13:67:88:f2:cf:d3: dd:72:3d:45:e9:40:14:b7:17:53:02:df:e5:c2:de: af:da:77:6d:f6:22:72:d4:22:5b:48:69:f4:80:17: 4c:37:a6:5c:ca:59:fb:88:87:33:80:65:c4:aa:37: a7:ea:82:f6:b1:51:63:94:c5:b7:34:b3:02:3f:7f: ff:44:f9:a2:e6:ea:2b:94:24:b2:d7:ca:97:1b:72: 33:60:fa:a2:02:a7:10:a2:77:a8:8c:35:ca:df:b4: e4:b9:d5:d5:fb:a4:ff:f4:af:5d:b9:ff:9b:25:fe: d7:93:4f:d7:92:04:59:aa:b4:d9:a1:d4:1d:db:15: 55:10:51:b8:4f:3a:be:94:dd:36:98:4b:58:49:fc: f2:20:65:d7:19:50:e1:96:78:a7:83:35:46:aa:7e: b1:d2:a6:ac:a8:dc:c4:8b:eb:de:de:e2:9c:4a:ad: ae:07:21:e6:01:97:1e:4f:30:a2:2f:85:f1:97:a4: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:8A:FF:01:68:56:0F:BE:04:90:A2:8D:7E:CA:E6:CA:4B:CE:9A X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c3:f3:df:ae:46:a7:ae:23:83:05:32:40:93:70:97:07:42: db:d4:77:fa:ca:43:d8:37:88:cf:f0:72:20:83:d0:2b:41:73: 53:ae:27:71:5d:ff:53:32:71:3f:0e:cc:43:df:9a:43:70:6b: 47:9d:10:53:51:a6:db:01:ca:c5:d6:ce:0d:8d:c2:eb:a7:39: b0:4d:69:62:dc:af:44:ef:4d:2a:9f:98:34:b2:03:d0:9b:fd: c0:0e:a1:c3:72:fe:bc:3c:2c:f3:42:6f:9a:33:62:50:74:46: 3b:bf:9d:14:87:be:5d:b8:e7:1e:e9:61:57:5b:8b:04:b3:70: 82:ed:7b:1a:b0:25:b5:a7:42:39:12:63:f7:45:4a:71:00:d9: c8:aa:74:eb:ce:63:be:21:63:bd:af:0e:b0:d2:96:a1:ab:ed: 65:81:54:b3:91:5d:dd:f4:d8:36:78:d6:e5:68:f4:fc:fb:0d: a9:6f:e7:f2:df:43:e4:2c:41:6c:8a:63:16:88:88:4d:86:32: 5c:72:51:64:90:94:65:dc:ca:af:58:fe:4b:93:9c:a1:83:cb: d8:b4:f4:12:42:45:54:ba:b9:03:5a:e0:e1:93:05:e0:b3:cc: 90:aa:0a:9d:6c:6e:4e:23:f0:7b:d3:2a:f8:c3:0a:ae:27:c1: f1:c5:cb:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUxMDE4MTkzMjA5WhcNMjUxMDI1MTkzMjA5WjAYMRYwFAYD VQQDEw02OGYzZWIzOS03NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZg84GK4hf5xnJ9YCWdOhR9u8zNgEGPXvJ6QcHsy487wGXUIcwHzBXoTlE6H WxSHA9RVJMGZl9tB1Ij3FRED1KYlOBsTZ4jyz9Pdcj1F6UAUtxdTAt/lwt6v2ndt 9iJy1CJbSGn0gBdMN6Zcyln7iIczgGXEqjen6oL2sVFjlMW3NLMCP3//RPmi5uor lCSy18qXG3IzYPqiAqcQoneojDXK37TkudXV+6T/9K9duf+bJf7Xk0/XkgRZqrTZ odQd2xVVEFG4Tzq+lN02mEtYSfzyIGXXGVDhlningzVGqn6x0qasqNzEi+ve3uKc Sq2uByHmAZceTzCiL4Xxl6TNsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCijiv8B aFYPvgSQoo1+yubKS86aMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBww/PfrkanriODBTJAk3CXB0Lb1Hf6ykPYN4jP8HIgg9ArQXNTridx Xf9TMnE/DsxD35pDcGtHnRBTUabbAcrF1s4NjcLrpzmwTWli3K9E700qn5g0sgPQ m/3ADqHDcv68PCzzQm+aM2JQdEY7v50Uh75duOce6WFXW4sEs3CC7XsasCW1p0I5 EmP3RUpxANnIqnTrzmO+IWO9rw6w0pahq+1lgVSzkV3d9Ng2eNblaPT8+w2pb+fy 30PkLEFsimMWiIhNhjJcclFkkJRl3MqvWP5Lk5yhg8vYtPQSQkVUurkDWuDhkwXg s8yQqgqdbG5OI/B70yr4wwquJ8Hxxcs8 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:55 2025 by rpki-client