$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft File: erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json) Hash identifier: hApGO8YIT6AR7dIxlvKg/WmBF2P03LIa+Rv6y9kRPEk= Subject key identifier: AD:4F:6E:1E:FC:53:06:13:B5:52:AD:DC:18:76:78:41:73:1D:BC:71 Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC Certificate issuer: /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft Manifest number: 72 Signing time: Sun 19 Oct 2025 10:14:59 +0000 Manifest this update: Sun 19 Oct 2025 10:14:58 +0000 Manifest next update: Sun 26 Oct 2025 10:14:58 +0000 Files and hashes: 1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: sKfa5HAzZgbdFdJUoNU17AesZRrrJj8qR/4ppWc4KQg=) 2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC Validity Not Before: Oct 19 10:14:58 2025 GMT Not After : Oct 26 10:14:58 2025 GMT Subject: CN=68f4ba23-ebaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:7b:e4:cc:12:d4:39:dd:52:7e:e5:e6:22: 86:18:da:8e:b3:0e:72:c1:5e:ac:5b:a1:91:ee:20: ae:fd:a1:12:d9:76:ff:41:d6:31:39:62:c6:de:45: 36:0c:3f:e4:84:9e:64:a5:04:1f:2f:42:8b:ec:74: e3:cc:30:54:9a:35:5e:d8:96:7f:7f:1a:c6:08:7d: 65:17:f8:27:6c:fe:fa:d6:f6:53:33:60:75:e9:43: 37:a7:f8:2b:3b:95:9d:3a:4c:26:f7:6a:7a:bf:4b: 05:4e:00:7a:b3:b8:92:1c:ea:27:ca:ac:38:d1:01: e7:c0:37:0f:8b:50:73:20:f6:24:c1:a8:fa:8e:d9: bb:35:64:4e:f0:c3:7c:55:bb:0f:71:45:8d:c5:10: b1:85:bd:ac:7d:c0:0f:9c:60:c6:bd:bf:9f:d8:9d: 84:a0:c8:34:be:2c:20:e3:df:5b:b4:6b:d5:b1:fb: ab:f3:f8:94:eb:7f:c2:1b:19:6a:e8:56:e0:d6:db: b8:6c:e7:26:bd:aa:45:3f:15:b6:f7:32:c1:35:2c: 6c:11:ca:c6:2e:88:db:08:47:21:17:72:2a:64:09: 88:36:a5:27:fc:66:83:a4:9b:4a:82:84:86:b5:37: 8e:ee:21:61:1c:cb:4b:0f:c0:ee:f5:58:9a:58:5b: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:6E:1E:FC:53:06:13:B5:52:AD:DC:18:76:78:41:73:1D:BC:71 X509v3 Authority Key Identifier: keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9e:22:36:4b:73:2a:56:9e:40:27:15:76:8a:db:94:21:b6: fd:16:26:2b:50:1b:f6:16:5f:8f:81:d3:9a:38:20:9d:e0:8e: 01:46:9d:a7:60:cc:d7:79:0a:a4:83:71:55:b7:02:f1:17:c1: 88:5f:4e:83:5b:fc:6a:f1:c0:8e:31:1a:70:1e:67:7b:1f:d3: db:e8:08:07:73:f5:0b:19:6c:ae:e8:86:ff:34:95:0c:49:a1: 57:0d:2e:5b:63:13:d6:c4:a8:05:92:b6:f8:2f:18:bc:62:0e: 4a:07:de:43:1f:da:ae:3c:ae:0b:a6:85:69:4f:52:ec:46:0d: 91:38:2c:5d:7a:13:4b:1c:c9:02:37:84:6c:40:4c:42:45:d4: 73:c1:4a:29:a6:fa:61:c8:67:87:32:d8:64:12:e5:72:be:a6: c9:0b:47:e3:d2:71:8a:05:1e:8e:7e:cc:e3:e0:11:80:0f:d4: 2b:09:85:b6:ed:c6:cb:d5:ac:4a:3b:4f:ce:0f:41:33:3c:c3: 54:0d:2f:7e:68:38:c6:70:b8:ce:c5:67:60:4f:06:65:2b:2c: dd:5c:ad:18:8f:68:22:92:ae:f4:3d:cb:79:55:3b:98:e9:0d: b6:be:21:25:c4:db:e5:a3:b5:36:a2:9b:3b:26:66:ba:6c:ee: a9:15:43:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzI0NDExMC8GA1UEBRMoN0FCQkEwQUQ5RUM4RUQ2NTVFRkM3OTk1N0QwMzE1RUFG Nzg1RkFFQzAeFw0yNTEwMTkxMDE0NThaFw0yNTEwMjYxMDE0NThaMBgxFjAUBgNV BAMTDTY4ZjRiYTIzLWViYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfInvkzBLUOd1SfuXmIoYY2o6zDnLBXqxboZHuIK79oRLZdv9B1jE5YsbeRTYM P+SEnmSlBB8vQovsdOPMMFSaNV7Yln9/GsYIfWUX+Cds/vrW9lMzYHXpQzen+Cs7 lZ06TCb3anq/SwVOAHqzuJIc6ifKrDjRAefANw+LUHMg9iTBqPqO2bs1ZE7ww3xV uw9xRY3FELGFvax9wA+cYMa9v5/YnYSgyDS+LCDj31u0a9Wx+6vz+JTrf8IbGWro VuDW27hs5ya9qkU/Fbb3MsE1LGwRysYuiNsIRyEXcipkCYg2pSf8ZoOkm0qChIa1 N47uIWEcy0sPwO71WJpYW5j/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrU9uHvxT BhO1Uq3cGHZ4QXMdvHEwHwYDVR0jBBgwFoAUerugrZ7I7WVe/HmVfQMV6veF+uww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MjQ0L0YyRjEyM0Y4MDND MzExRjA4OEY0NkQxRUM0RjlBRTAyL2VydWdyWjdJN1dWZV9IbVZmUU1WNnZlRi11 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXJ1Z3JaN0k3V1ZlX0htVmZRTVY2dmVGLXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MjQ0L0YyRjEyM0Y4MDNDMzExRjA4OEY0NkQxRUM0RjlBRTAyL2VydWdyWjdJN1dW ZV9IbVZmUU1WNnZlRi11dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmeIjZLcypWnkAnFXaK25Qhtv0WJitQG/YWX4+B05o4IJ3gjgFGnadg zNd5CqSDcVW3AvEXwYhfToNb/GrxwI4xGnAeZ3sf09voCAdz9QsZbK7ohv80lQxJ oVcNLltjE9bEqAWStvgvGLxiDkoH3kMf2q48rgumhWlPUuxGDZE4LF16E0scyQI3 hGxATEJF1HPBSimm+mHIZ4cy2GQS5XK+pskLR+PScYoFHo5+zOPgEYAP1CsJhbbt xsvVrEo7T84PQTM8w1QNL35oOMZwuM7FZ2BPBmUrLN1crRiPaCKSrvQ9y3lVO5jp Dba+ISXE2+WjtTaimzsmZrps7qkVQ9M= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:43 2025 by rpki-client