$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: G6WHarBbPN2Bwhmc1WxihcysOeK362aXDx0iW93K2YI= Subject key identifier: 00:B5:55:84:BB:0B:B0:74:7E:8E:65:70:84:CE:69:D5:8F:B2:5F:65 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 086E Signing time: Sat 18 Oct 2025 21:46:42 +0000 Manifest this update: Sat 18 Oct 2025 21:46:42 +0000 Manifest next update: Sat 25 Oct 2025 21:46:42 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: /k/iPki3frKrGswwwJNOAo5Y/HzHRIudR32w6n4FPLs=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: 9/6FBIuUpW3NyM8fzRBAE8GJH3DWuJevjPt7vt5pHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Oct 18 21:46:42 2025 GMT Not After : Oct 25 21:46:42 2025 GMT Subject: CN=68f40ac2-2601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:00:39:69:60:9e:6a:30:a4:d0:b6:88:8e: 7b:6c:12:18:ef:10:84:0f:18:02:fe:c4:7b:ff:93: d9:6e:56:af:f8:1a:c4:e9:f6:27:51:41:84:ab:d4: 94:83:e3:9e:39:46:8e:8d:92:6c:cb:c3:a0:a5:d7: f2:81:6f:e4:b5:5b:e0:49:5b:1b:93:b3:42:a8:e7: 99:34:90:4c:eb:c8:f9:dd:fe:96:0d:9d:5a:fc:ca: 05:d6:41:35:05:cd:fa:27:07:95:b4:31:27:d2:9a: 7e:85:90:7b:1d:2b:f4:e2:80:2f:08:97:5b:4c:cc: 27:81:a8:a8:d6:aa:67:5f:3a:b8:26:62:05:d5:ed: f5:89:e6:89:ec:36:09:52:b9:f7:79:db:5d:f7:0f: 79:de:af:2d:5c:e6:4d:bf:b5:9b:ab:5b:cd:e9:72: e1:05:26:89:82:7f:b9:1f:a4:4c:7c:44:11:bc:b1: 99:b0:80:8b:ad:06:5b:4d:cc:62:89:c0:e3:bc:7e: 3a:68:e1:e5:b3:a6:63:8e:f4:02:b1:89:ff:ee:3b: ec:cf:72:ab:92:b8:0d:38:bf:b8:e3:5d:f0:06:21: 2e:af:ed:09:24:81:9f:ff:46:2a:35:10:6e:e3:82: 6c:85:b2:58:a8:01:51:d5:d3:90:81:d3:3f:77:26: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:55:84:BB:0B:B0:74:7E:8E:65:70:84:CE:69:D5:8F:B2:5F:65 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e8:61:ed:cd:0d:6e:50:b9:0f:68:bf:95:31:37:19:58:22: 6b:52:85:aa:52:9c:8a:91:b2:3b:29:4a:33:2c:03:5d:f5:a3: f7:43:b1:53:67:5a:c2:52:f3:2c:71:35:c8:71:ec:c7:5c:b0: 5a:62:ff:6e:2c:5f:e9:10:35:48:51:fe:ad:38:12:d6:84:b3: b9:da:e6:ac:55:18:7d:1a:8b:0a:5d:c5:94:79:9f:dd:6a:3f: 9e:f4:91:de:62:c2:be:62:4a:bd:ed:af:c9:8e:f9:9f:63:3e: e5:9b:32:ef:ed:3d:c8:67:b2:37:9a:79:76:98:c3:39:d5:cc: 49:07:91:e3:ea:19:8f:6b:96:60:f5:d1:a6:97:5f:9b:f7:d2: 0e:aa:3e:0b:81:aa:e0:56:b0:bc:0e:60:a0:96:ba:a5:ae:fa: 84:0c:ec:b1:fa:d3:d7:58:d4:0d:9e:86:52:75:96:6e:8d:fe: d6:0c:c7:87:2c:72:2d:5a:4b:2a:2f:18:69:d6:fd:d9:7f:2f: 5c:d0:ae:5a:67:b1:c7:bf:f5:32:6c:46:f5:50:11:58:cb:d3: 80:f4:46:4e:44:98:d2:ad:f1:a2:0d:de:21:83:36:a3:6a:13: 21:12:86:bd:93:d8:26:39:d6:0a:14:b4:81:e4:1e:d2:29:36: 22:f3:25:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjUxMDE4MjE0NjQyWhcNMjUxMDI1MjE0NjQyWjAYMRYwFAYD VQQDEw02OGY0MGFjMi0yNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ncAOWlgnmowpNC2iI57bBIY7xCEDxgC/sR7/5PZblav+BrE6fYnUUGEq9SU g+OeOUaOjZJsy8OgpdfygW/ktVvgSVsbk7NCqOeZNJBM68j53f6WDZ1a/MoF1kE1 Bc36JweVtDEn0pp+hZB7HSv04oAvCJdbTMwngaio1qpnXzq4JmIF1e31ieaJ7DYJ Urn3edtd9w953q8tXOZNv7Wbq1vN6XLhBSaJgn+5H6RMfEQRvLGZsICLrQZbTcxi icDjvH46aOHls6ZjjvQCsYn/7jvsz3KrkrgNOL+4413wBiEur+0JJIGf/0YqNRBu 44JshbJYqAFR1dOQgdM/dyYRgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAC1VYS7 C7B0fo5lcITOadWPsl9lMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB6GHtzQ1uULkPaL+VMTcZWCJrUoWqUpyKkbI7KUozLANd9aP3Q7FT Z1rCUvMscTXIcezHXLBaYv9uLF/pEDVIUf6tOBLWhLO52uasVRh9GosKXcWUeZ/d aj+e9JHeYsK+Ykq97a/JjvmfYz7lmzLv7T3IZ7I3mnl2mMM51cxJB5Hj6hmPa5Zg 9dGml1+b99IOqj4LgargVrC8DmCglrqlrvqEDOyx+tPXWNQNnoZSdZZujf7WDMeH LHItWksqLxhp1v3Zfy9c0K5aZ7HHv/UybEb1UBFYy9OA9EZORJjSrfGiDd4hgzaj ahMhEoa9k9gmOdYKFLSB5B7SKTYi8yVb -----END CERTIFICATE-----Generated at Mon Oct 20 00:18:53 2025 by rpki-client