$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: H4rQyHN5zgOVko3eKtsfWxaRhxvTmwKWK6AlSsuk6Dw= Subject key identifier: 42:01:30:DF:11:99:B8:73:82:5C:B5:8F:04:D9:CE:80:53:0D:CE:47 Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0C8D Signing time: Mon 20 Oct 2025 18:58:09 +0000 Manifest this update: Mon 20 Oct 2025 18:58:09 +0000 Manifest next update: Mon 27 Oct 2025 18:58:09 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: j/sf03u52h0001acvwVnAhouZnKO7FznSWSYqES7oqA=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Oct 20 18:58:09 2025 GMT Not After : Oct 27 18:58:09 2025 GMT Subject: CN=68f68641-17a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:3b:d2:8f:45:00:4a:24:77:0d:f7:4b:4b: 7f:75:22:68:22:3b:31:ac:70:d0:d3:7d:39:98:40: ed:83:43:51:46:a5:4a:16:90:00:f6:d0:88:07:d1: 7d:fc:c8:2e:d6:15:8b:80:2d:8f:ab:05:f6:5b:35: f7:43:83:f3:39:5f:70:61:16:17:8c:1d:c9:7c:9e: e7:3f:02:82:c0:35:80:30:fe:3e:55:7a:89:cc:47: c4:a6:8e:0d:97:51:7a:13:91:6c:13:43:4d:d7:a3: 98:c8:42:ed:24:69:4b:48:aa:c5:56:51:97:41:df: d5:39:af:04:84:5c:4b:6a:27:bd:de:e5:bd:5a:d1: ed:ad:e0:f6:0d:30:a1:69:f2:74:d9:81:c2:88:6a: 41:53:2e:22:cd:66:72:b4:e3:80:98:32:92:08:be: d6:32:10:d0:45:d3:47:9e:5b:d7:a9:aa:1b:43:e9: f7:57:1a:99:e8:2a:9a:e5:9c:f3:58:da:fc:91:4e: 50:32:28:9c:f3:8c:09:99:26:0f:05:16:58:a9:d3: f2:3f:95:ba:6e:e8:c4:bd:f4:dc:20:dc:5a:0b:44: d9:ae:5b:46:db:30:61:72:d5:25:fc:0d:c9:40:7d: cc:59:12:e6:7f:0f:a3:3d:8f:8d:51:12:69:a0:59: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:30:DF:11:99:B8:73:82:5C:B5:8F:04:D9:CE:80:53:0D:CE:47 X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:39:cf:7e:09:43:d2:d6:14:c4:76:c7:2f:8d:7a:97:65:79: 85:a5:64:e0:34:cb:f8:3d:96:1f:d7:42:32:45:e5:77:f7:07: 99:df:1e:57:3d:eb:2f:31:06:98:9d:bc:b2:86:80:25:bd:06: 44:fc:aa:ef:c6:24:4a:4f:69:d1:a0:10:f9:b5:9e:a0:f0:d8: dd:28:c1:ab:eb:52:6c:ca:df:4f:03:15:a3:e8:76:21:2a:24: 0a:45:52:67:fa:67:cc:f1:56:8d:fc:3f:ef:24:26:09:b9:e2: d7:1a:d8:bb:f2:de:1b:ab:40:cf:b6:05:ab:00:eb:b6:6d:4e: 28:45:16:72:f1:d9:9b:b5:b8:b0:9b:37:18:8f:a8:bf:27:9c: ba:cc:d6:1e:e4:24:96:40:47:65:d5:9d:92:85:97:61:ab:e8: 63:fd:6a:f8:1e:ba:fe:bd:e7:71:7a:e4:ec:ff:aa:c0:5c:35: 31:0e:c4:cf:93:57:09:98:ef:04:8d:50:d9:04:4d:21:3d:45: ad:8a:1f:d7:d5:41:ef:98:50:99:f0:6a:b0:49:4f:1b:20:c0: 61:04:b8:b7:5f:87:4d:87:9a:c3:33:99:9e:59:aa:a9:99:a1: 0a:4d:58:f9:da:97:e6:3a:8d:b0:ad:cb:fd:78:80:85:da:17: b9:3a:29:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUxMDIwMTg1ODA5WhcNMjUxMDI3MTg1ODA5WjAYMRYwFAYD VQQDEw02OGY2ODY0MS0xN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQw70o9FAEokdw33S0t/dSJoIjsxrHDQ0305mEDtg0NRRqVKFpAA9tCIB9F9 /Mgu1hWLgC2PqwX2WzX3Q4PzOV9wYRYXjB3JfJ7nPwKCwDWAMP4+VXqJzEfEpo4N l1F6E5FsE0NN16OYyELtJGlLSKrFVlGXQd/VOa8EhFxLaie93uW9WtHtreD2DTCh afJ02YHCiGpBUy4izWZytOOAmDKSCL7WMhDQRdNHnlvXqaobQ+n3VxqZ6Cqa5Zzz WNr8kU5QMiic84wJmSYPBRZYqdPyP5W6bujEvfTcINxaC0TZrltG2zBhctUl/A3J QH3MWRLmfw+jPY+NURJpoFmjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIBMN8R mbhzgly1jwTZzoBTDc5HMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCOc9+CUPS1hTEdscvjXqXZXmFpWTgNMv4PZYf10IyReV39weZ3x5X PesvMQaYnbyyhoAlvQZE/KrvxiRKT2nRoBD5tZ6g8NjdKMGr61Jsyt9PAxWj6HYh KiQKRVJn+mfM8VaN/D/vJCYJueLXGti78t4bq0DPtgWrAOu2bU4oRRZy8dmbtbiw mzcYj6i/J5y6zNYe5CSWQEdl1Z2ShZdhq+hj/Wr4Hrr+vedxeuTs/6rAXDUxDsTP k1cJmO8EjVDZBE0hPUWtih/X1UHvmFCZ8GqwSU8bIMBhBLi3X4dNh5rDM5meWaqp maEKTVj52pfmOo2wrcv9eICF2he5Oimb -----END CERTIFICATE-----Generated at Tue Oct 21 07:51:13 2025 by rpki-client