$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json) Hash identifier: fbo5Q/TNz4hhvO0o4Qqya2jjV2uEfBSdzPGmNAjjZg0= Subject key identifier: 68:CE:7A:8C:9C:13:F4:F4:72:25:80:AE:62:CC:4C:6F:90:0E:D1:1E Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft Manifest number: 0816 Signing time: Sat 18 Oct 2025 22:07:02 +0000 Manifest this update: Sat 18 Oct 2025 22:07:02 +0000 Manifest next update: Sat 25 Oct 2025 22:07:02 +0000 Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: YAbVCZDN4iX9AJXBL2vLpWte7pzRkDT5SfOZw2GH+Tc=) 2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: GW9s3WIygsKZLnHwRZ6mSkc9+Me0q/KYVWFIK75BZGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: Oct 18 22:07:02 2025 GMT Not After : Oct 25 22:07:02 2025 GMT Subject: CN=68f40f86-ce38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:5c:18:09:09:d2:d3:1b:2e:85:47:56:b2: d8:ee:71:4b:37:5e:ba:d1:09:86:e3:55:f6:26:dd: c7:b6:eb:4e:c1:49:a9:86:fb:3b:e7:6c:b3:f2:4b: c5:cf:d7:cf:99:21:0c:71:ed:a7:f2:bc:36:8d:c5: e3:bc:ea:69:32:16:24:f8:06:37:e5:f2:a9:1a:71: 38:96:b0:db:17:cb:61:d7:13:fb:b5:e7:b3:d3:ca: 9b:1b:ce:12:a9:0d:13:7f:3a:22:28:f9:25:8d:9a: eb:03:68:a8:02:8d:23:26:7c:bc:68:ec:c9:33:c6: 73:e4:c5:66:89:7d:dc:9f:52:21:8b:08:61:3a:cc: 1d:27:38:c2:5d:53:f4:a6:b7:6f:09:09:65:98:9a: d3:7f:75:28:c0:d9:e6:63:5e:bb:28:9b:2b:64:ed: 37:76:d4:8b:b3:eb:58:7c:71:a8:bc:1f:63:01:90: bf:ae:36:45:ec:cf:66:5a:39:f5:52:6e:5d:96:02: d3:91:50:e6:c3:83:c8:4b:5f:8a:d7:6e:d9:95:88: d8:ad:ef:f9:0a:43:dd:41:a2:f1:ee:55:5c:07:60: 62:48:22:d0:8b:4d:2d:8f:d4:52:6f:91:58:5c:d1: 83:24:5c:e2:cc:2e:59:0a:e1:31:fb:37:13:b5:ab: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CE:7A:8C:9C:13:F4:F4:72:25:80:AE:62:CC:4C:6F:90:0E:D1:1E X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:30:89:2e:7d:41:8c:18:0c:da:65:22:ee:d4:7f:49:81:db: 7f:23:de:77:ae:30:78:6b:77:b6:58:54:60:f5:a0:0e:f2:5f: c8:29:85:cf:00:bb:da:09:90:d6:1b:01:fb:1b:da:d1:3f:eb: 50:1f:91:c9:22:22:b3:c5:34:91:39:a2:8e:8b:1a:53:12:35: db:e4:53:41:5a:6a:5d:c7:93:1b:22:5d:c8:f3:7a:73:c3:45: 72:09:87:62:5e:ce:f0:98:ed:99:bf:f8:47:54:d5:0a:d4:1d: 6d:55:7d:01:4f:f5:3d:71:cf:8f:bc:05:b4:a1:08:5e:07:4e: 49:2b:1a:be:1b:db:05:6d:51:18:0e:1d:3c:9e:6f:b8:de:42: de:72:d1:da:1b:af:52:64:63:b4:23:9f:56:24:1e:d2:07:61: 22:5c:d5:f6:14:46:c2:d2:f8:fe:1b:2e:8c:63:4f:78:f1:f0: 0d:de:d5:ea:7f:1e:55:e3:8a:0d:2e:04:ad:d0:e1:17:80:7e: 87:56:04:c5:5e:b4:52:66:01:1d:73:b8:6e:a8:27:46:fb:03: df:6b:37:3d:62:aa:84:09:42:84:6f:50:eb:eb:98:da:4a:87: 75:72:72:97:c3:df:a9:ab:91:6e:dc:99:0f:3d:2b:4c:2e:9c: 1b:4d:96:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjUxMDE4MjIwNzAyWhcNMjUxMDI1MjIwNzAyWjAYMRYwFAYD VQQDEw02OGY0MGY4Ni1jZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvetcGAkJ0tMbLoVHVrLY7nFLN1660QmG41X2Jt3HtutOwUmphvs752yz8kvF z9fPmSEMce2n8rw2jcXjvOppMhYk+AY35fKpGnE4lrDbF8th1xP7teez08qbG84S qQ0TfzoiKPkljZrrA2ioAo0jJny8aOzJM8Zz5MVmiX3cn1IhiwhhOswdJzjCXVP0 prdvCQllmJrTf3UowNnmY167KJsrZO03dtSLs+tYfHGovB9jAZC/rjZF7M9mWjn1 Um5dlgLTkVDmw4PIS1+K127ZlYjYre/5CkPdQaLx7lVcB2BiSCLQi00tj9RSb5FY XNGDJFzizC5ZCuEx+zcTtat93wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjOeoyc E/T0ciWArmLMTG+QDtEeMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp S3hISXgtbEs2d1FPM1dxd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZMIkufUGMGAzaZSLu1H9Jgdt/I953rjB4a3e2WFRg9aAO8l/IKYXP ALvaCZDWGwH7G9rRP+tQH5HJIiKzxTSROaKOixpTEjXb5FNBWmpdx5MbIl3I83pz w0VyCYdiXs7wmO2Zv/hHVNUK1B1tVX0BT/U9cc+PvAW0oQheB05JKxq+G9sFbVEY Dh08nm+43kLectHaG69SZGO0I59WJB7SB2EiXNX2FEbC0vj+Gy6MY0948fAN3tXq fx5V44oNLgSt0OEXgH6HVgTFXrRSZgEdc7huqCdG+wPfazc9YqqECUKEb1Dr65ja Sod1cnKXw9+pq5Fu3JkPPStMLpwbTZaB -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:40 2025 by rpki-client