$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: 2FJmz/P2acwz2B9b+e6Fse7SssQh8HP9rPdItXZBGuU= Subject key identifier: DA:30:8E:B6:D2:57:9F:49:FF:41:04:FF:9D:1E:71:08:14:8B:0C:DF Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: BF Signing time: Sun 19 Oct 2025 09:08:18 +0000 Manifest this update: Sun 19 Oct 2025 09:08:17 +0000 Manifest next update: Sun 26 Oct 2025 09:08:17 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: EXE4G5Y/LGVM89qNWUlvFQXuP+i+RToa8XmORLPV5Ns=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Oct 19 09:08:17 2025 GMT Not After : Oct 26 09:08:17 2025 GMT Subject: CN=68f4aa81-ad89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:82:49:bb:21:a0:b1:f6:06:ce:6d:5b:a1: 0c:38:f5:c1:0a:33:7f:d6:96:44:cd:ca:33:93:7b: 61:af:74:a2:74:f6:f4:dd:90:04:53:19:65:89:3f: 77:28:2b:ab:94:1d:31:ea:37:e0:5e:c3:4a:11:7f: 68:12:11:8b:92:20:48:76:f3:1a:66:5b:3e:de:60: fe:3e:e2:24:c5:e5:cc:e3:d1:a7:67:96:23:1f:10: 01:fc:3e:d7:ba:81:f8:3e:b2:5f:cc:43:f5:35:51: 7b:18:04:b9:36:69:f8:ef:66:ba:8d:ad:c8:1a:4f: f0:cd:6e:3c:88:79:3e:0d:6c:0b:d4:a9:03:0a:c9: d1:37:d5:ce:3e:1b:60:b2:3d:b4:e5:ed:ad:5d:99: e7:62:1f:68:26:82:0f:2d:4d:c9:ee:42:d2:04:d7: 1a:5f:15:e5:d5:23:41:98:ea:3d:02:af:4a:47:e2: f7:82:6e:4b:71:a1:3b:26:29:2e:66:43:a5:e0:03: 9e:8a:af:bf:3c:13:b0:f5:40:f2:39:44:b2:ac:ec: 98:1f:10:90:51:2d:a9:86:09:4b:9e:31:4d:e0:d9: 16:4c:25:f2:f7:d5:89:9d:3e:ed:5c:d3:d0:43:6b: f4:c3:41:8f:30:7b:22:ef:00:40:de:e8:ff:3d:32: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:30:8E:B6:D2:57:9F:49:FF:41:04:FF:9D:1E:71:08:14:8B:0C:DF X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:0e:12:75:53:73:68:02:16:89:39:7a:62:ce:16:db:d1:4b: c3:30:47:35:c2:91:38:7b:fd:19:f3:0d:3a:60:97:31:04:16: 09:f1:3b:a4:51:a2:65:40:f8:fe:18:86:6f:09:0f:ce:2f:19: 2d:fa:cd:1d:82:6d:01:dc:9b:d1:92:6b:1e:9c:86:dc:71:c1: cb:d4:d9:0b:ca:aa:a8:a7:87:3c:cf:8d:5b:b0:9b:72:6f:e5: 47:6a:3a:01:65:8b:b4:93:f9:2a:c1:ab:61:c4:f9:7a:9a:3c: 63:d6:c2:57:96:fd:8b:58:8f:4a:e1:16:f7:6e:b4:e8:84:b6: 01:0f:62:28:b2:9f:ac:0a:63:65:d7:5c:34:cc:cd:0f:c6:84: 40:74:8b:19:64:3b:3f:48:55:f8:46:f8:53:6d:0b:e7:c2:1c: 4f:eb:c4:b0:14:56:ff:81:de:28:c5:35:52:82:cd:ab:76:f8: c6:36:71:99:24:0a:ff:63:ea:10:4d:44:f3:8c:54:12:44:97: 2b:67:fb:63:e1:fe:1d:fc:b3:fa:4c:1c:e5:04:ed:c6:26:5c: bc:4b:c4:76:40:17:48:fe:c5:40:86:f3:00:03:60:e1:ae:b1: 34:e0:4d:0e:dd:b6:1e:90:1b:64:33:14:c0:d5:ff:b1:5e:37: 39:5b:91:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUxMDE5MDkwODE3WhcNMjUxMDI2MDkwODE3WjAYMRYwFAYD VQQDEw02OGY0YWE4MS1hZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43KCSbshoLH2Bs5tW6EMOPXBCjN/1pZEzcozk3thr3SidPb03ZAEUxlliT93 KCurlB0x6jfgXsNKEX9oEhGLkiBIdvMaZls+3mD+PuIkxeXM49GnZ5YjHxAB/D7X uoH4PrJfzEP1NVF7GAS5Nmn472a6ja3IGk/wzW48iHk+DWwL1KkDCsnRN9XOPhtg sj205e2tXZnnYh9oJoIPLU3J7kLSBNcaXxXl1SNBmOo9Aq9KR+L3gm5LcaE7Jiku ZkOl4AOeiq+/PBOw9UDyOUSyrOyYHxCQUS2phglLnjFN4NkWTCXy99WJnT7tXNPQ Q2v0w0GPMHsi7wBA3uj/PTJ2JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNowjrbS V59J/0EE/50ecQgUiwzfMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgDhJ1U3NoAhaJOXpizhbb0UvDMEc1wpE4e/0Z8w06YJcxBBYJ8Tuk UaJlQPj+GIZvCQ/OLxkt+s0dgm0B3JvRkmsenIbcccHL1NkLyqqop4c8z41bsJty b+VHajoBZYu0k/kqwathxPl6mjxj1sJXlv2LWI9K4Rb3brTohLYBD2Iosp+sCmNl 11w0zM0PxoRAdIsZZDs/SFX4RvhTbQvnwhxP68SwFFb/gd4oxTVSgs2rdvjGNnGZ JAr/Y+oQTUTzjFQSRJcrZ/tj4f4d/LP6TBzlBO3GJly8S8R2QBdI/sVAhvMAA2Dh rrE04E0O3bYekBtkMxTA1f+xXjc5W5GH -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:14 2025 by rpki-client