$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: eZ5Y5dnwprvyJjG9X1UhBehaMr7Ln3+XV5rxtNWJAjk= Subject key identifier: 2D:73:08:08:DD:B2:7B:42:3F:2B:72:86:E9:61:C3:39:1C:89:8B:4D Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A0A Signing time: Mon 20 Oct 2025 20:46:53 +0000 Manifest this update: Mon 20 Oct 2025 20:46:52 +0000 Manifest next update: Mon 27 Oct 2025 20:46:52 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 9+ixzm6hB8i8zaVHoFSqHnAvXGQngo0powAFBFpQZRo=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Oct 20 20:46:52 2025 GMT Not After : Oct 27 20:46:52 2025 GMT Subject: CN=68f69fbc-f67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:b3:a1:f1:cc:9d:26:a1:7c:b0:ea:df:ca: c9:c6:61:e0:32:c4:90:5b:e8:e6:06:b6:14:d9:be: 01:3b:6d:34:36:69:28:60:06:48:20:26:2b:09:92: e2:de:a0:b3:29:80:85:31:48:26:35:b7:cb:40:ed: 67:40:0c:59:63:ac:6e:70:a1:42:41:75:8a:34:cc: 1e:21:08:bc:66:58:ed:b7:62:04:06:1d:90:01:c8: 5c:c6:09:ba:dd:34:6c:93:45:ca:93:74:ce:d9:99: 0d:b4:c0:ff:a0:0a:49:2f:7e:fb:17:6e:7a:fd:5f: 28:dc:19:a8:fe:09:c5:08:98:11:a3:90:0a:7c:21: 2d:1a:59:54:2e:bf:12:a4:6f:9a:96:48:ae:73:d2: 14:0d:69:5c:c7:7e:de:b6:c2:07:41:c0:00:12:01: a8:62:6c:45:cd:2e:bf:00:ec:6d:83:5e:10:1b:29: 9d:fa:63:10:1a:90:a9:c0:a0:3d:12:4f:ec:bf:2f: 49:62:c4:b6:8d:e1:ab:0c:35:38:cd:a6:26:52:3c: 43:f5:6d:25:6a:cb:0c:a4:6d:c6:67:a4:22:7b:2f: 33:78:0e:ea:c5:32:6f:b8:88:e3:1a:3c:62:b7:dc: d8:0b:4c:ac:29:4e:4c:62:0d:1f:a2:5a:de:11:30: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:08:08:DD:B2:7B:42:3F:2B:72:86:E9:61:C3:39:1C:89:8B:4D X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:13:20:4e:57:34:fa:95:6b:e0:7f:ca:5e:48:59:22:29:a6: 31:49:c9:ed:f4:0d:28:49:7b:68:82:81:19:73:e9:7a:8d:4e: aa:65:5a:6f:ee:70:42:39:ec:06:b2:e1:61:a8:ab:87:05:5d: cc:b6:50:4c:92:fa:60:ee:eb:a7:f9:e3:4f:7a:89:ee:c4:10: aa:a2:47:54:98:f2:1b:d4:0d:1d:48:8b:82:f8:36:cf:57:3f: e4:71:14:10:07:80:25:95:f3:27:92:ad:81:a9:90:e2:7a:24: 25:49:09:c8:50:16:12:89:b1:c4:be:db:d4:53:e9:af:37:86: 6f:cf:ee:d5:46:00:22:84:20:1f:37:45:63:96:93:1a:4d:2d: 34:06:66:1e:d8:5c:55:84:f5:74:24:1f:3c:f2:26:bd:e0:db: a7:92:05:3f:0a:40:a1:f3:45:42:8c:f8:91:5e:00:34:30:fd: a3:44:90:87:34:19:d1:aa:9f:6e:24:2d:23:ee:a0:38:90:d8: 31:b3:15:8a:24:50:49:69:bf:39:96:af:98:55:e7:41:2f:17: cf:d6:46:5d:50:6d:be:2e:a2:27:b1:25:ac:35:05:bf:91:0c: 25:4b:4f:44:a3:20:0d:b3:19:c0:20:22:19:fc:c2:0d:3f:38: 85:50:5a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUxMDIwMjA0NjUyWhcNMjUxMDI3MjA0NjUyWjAYMRYwFAYD VQQDEw02OGY2OWZiYy1mNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTezofHMnSahfLDq38rJxmHgMsSQW+jmBrYU2b4BO200NmkoYAZIICYrCZLi 3qCzKYCFMUgmNbfLQO1nQAxZY6xucKFCQXWKNMweIQi8Zljtt2IEBh2QAchcxgm6 3TRsk0XKk3TO2ZkNtMD/oApJL377F256/V8o3Bmo/gnFCJgRo5AKfCEtGllULr8S pG+alkiuc9IUDWlcx37etsIHQcAAEgGoYmxFzS6/AOxtg14QGymd+mMQGpCpwKA9 Ek/svy9JYsS2jeGrDDU4zaYmUjxD9W0lassMpG3GZ6Qiey8zeA7qxTJvuIjjGjxi t9zYC0ysKU5MYg0folreETAZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1zCAjd sntCPytyhulhwzkciYtNMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1EyBOVzT6lWvgf8peSFkiKaYxScnt9A0oSXtogoEZc+l6jU6qZVpv 7nBCOewGsuFhqKuHBV3MtlBMkvpg7uun+eNPeonuxBCqokdUmPIb1A0dSIuC+DbP Vz/kcRQQB4AllfMnkq2BqZDieiQlSQnIUBYSibHEvtvUU+mvN4Zvz+7VRgAihCAf N0VjlpMaTS00BmYe2FxVhPV0JB888ia94NunkgU/CkCh80VCjPiRXgA0MP2jRJCH NBnRqp9uJC0j7qA4kNgxsxWKJFBJab85lq+YVedBLxfP1kZdUG2+LqInsSWsNQW/ kQwlS09EoyANsxnAICIZ/MINPziFUFpV -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:00 2025 by rpki-client