$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json) Hash identifier: CzCpHw7mCZ2AJwlaMpSAGVHKvWPtP41bejoNVS2vKss= Subject key identifier: 16:6C:86:A6:0D:A1:07:1B:C1:3A:AD:B5:82:A8:01:08:D6:D4:6E:A4 Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft Manifest number: 0104 Signing time: Sun 19 Oct 2025 07:57:14 +0000 Manifest this update: Sun 19 Oct 2025 07:57:13 +0000 Manifest next update: Sun 26 Oct 2025 07:57:13 +0000 Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: Je+UI4nmHlEN8JZvg7trZvwDEHPdq4J5bBHWwIc0BqY=) 2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0 Validity Not Before: Oct 19 07:57:13 2025 GMT Not After : Oct 26 07:57:13 2025 GMT Subject: CN=68f499d9-4519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:8d:72:45:ee:c6:32:55:b9:79:c8:84:cb: 4e:2f:63:ae:80:01:8e:71:75:8c:31:f0:87:15:75: 4d:fd:5e:2e:e2:88:e8:00:3e:94:b4:a2:24:21:ce: 25:97:ad:35:2f:27:c3:83:42:95:21:a6:d3:2d:cb: 8f:9a:e5:3a:a7:85:7c:c6:6c:71:bf:63:86:a3:7e: d9:3e:6a:d9:31:28:a8:e5:7e:84:cb:02:8d:ed:e3: f5:0f:bc:3d:12:cb:f0:40:df:90:18:de:99:56:46: 26:72:50:6d:da:f8:88:2f:74:fd:4f:5a:92:f8:fb: 73:22:04:8e:29:0a:d6:ac:ae:7b:bb:e3:71:fa:3f: 1c:43:5a:5c:62:2c:3a:64:a1:f5:7f:8f:9c:74:e8: 1c:ed:f9:3b:9f:fd:7c:9f:2e:9a:63:60:b3:1d:2c: 5c:83:89:19:b2:fb:0f:3b:45:a7:b1:2e:d4:fd:46: 87:f3:67:50:9e:42:96:62:dd:b3:34:70:e9:b5:6c: 57:59:05:f2:58:fb:be:96:db:1d:c1:73:35:5b:83: 2b:9e:1e:24:d6:8e:a8:ae:9e:8f:72:cf:b2:13:2e: f4:df:23:1c:3c:e3:68:16:49:ef:e1:64:99:1a:89: 41:72:79:50:6d:8a:28:31:20:ac:78:b7:08:3d:4f: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6C:86:A6:0D:A1:07:1B:C1:3A:AD:B5:82:A8:01:08:D6:D4:6E:A4 X509v3 Authority Key Identifier: keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c2:54:a6:22:3c:53:74:b5:42:0f:a6:7e:7c:99:ca:ae:a9: 84:3a:61:5a:67:5c:07:44:fb:00:b1:d5:96:be:de:89:ee:01: cc:32:f8:73:03:79:3f:4c:61:8f:2f:29:d2:72:e2:8e:e0:b9: 3f:9f:8b:68:66:93:83:7d:64:81:20:5e:bc:5f:5a:7a:45:9e: d7:54:3b:8d:f1:66:54:e6:81:93:14:e1:3f:fa:bd:83:a1:12: 64:65:54:19:a1:7e:04:4e:e1:42:2e:20:8f:d5:27:de:1a:a6: 33:08:23:86:05:37:2c:00:f1:7e:7d:9a:26:42:08:5d:97:e0: 2b:a2:4b:af:9d:a0:67:73:3f:4a:77:ce:00:9d:33:55:27:2f: 7d:6a:7c:fe:72:39:9e:96:55:fd:34:c5:36:5c:c1:b9:2e:ba: f7:c5:2f:35:39:dd:19:0e:7a:18:cc:78:0b:fd:6d:f9:ba:b2: c0:a9:86:aa:b4:e3:1f:26:b2:71:bc:fb:ec:dc:63:2f:4c:55: 52:8a:5c:f8:3e:bb:07:57:c8:9f:84:ab:f5:a4:dc:bb:55:50: 18:95:35:3e:c8:6d:03:bb:5d:aa:dc:b0:89:44:3b:60:f5:a2: 64:65:ba:51:1d:d9:b3:91:0a:ea:65:57:f5:d1:dd:3e:f8:ad: 0e:a2:51:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwQ0YxMTAvBgNVBAUTKEVGQzE3QjBEMTExMjZDN0ZBOTQxQkQ0RDBFQ0E3QUEz OUU5MzQ2QTAwHhcNMjUxMDE5MDc1NzEzWhcNMjUxMDI2MDc1NzEzWjAYMRYwFAYD VQQDEw02OGY0OTlkOS00NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM+NckXuxjJVuXnIhMtOL2OugAGOcXWMMfCHFXVN/V4u4ojoAD6UtKIkIc4l l601LyfDg0KVIabTLcuPmuU6p4V8xmxxv2OGo37ZPmrZMSio5X6EywKN7eP1D7w9 EsvwQN+QGN6ZVkYmclBt2viIL3T9T1qS+PtzIgSOKQrWrK57u+Nx+j8cQ1pcYiw6 ZKH1f4+cdOgc7fk7n/18ny6aY2CzHSxcg4kZsvsPO0WnsS7U/UaH82dQnkKWYt2z NHDptWxXWQXyWPu+ltsdwXM1W4Mrnh4k1o6orp6Pcs+yEy703yMcPONoFknv4WSZ GolBcnlQbYooMSCseLcIPU/2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZshqYN oQcbwTqttYKoAQjW1G6kMB8GA1UdIwQYMBaAFO/Bew0REmx/qUG9TQ7KeqOek0ag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBDRi83RTAxM0NEQTFG MTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JILXBRYjFORHNwNm81NlRS cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4RjdEUkVTYkgtcFFiMU5Ec3A2bzU2VFJxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBDRi83RTAxM0NEQTFGMTgxMUVGOTczMzNFMTBDNEY5QUUwMi83OEY3RFJFU2JI LXBRYjFORHNwNm81NlRScUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkwlSmIjxTdLVCD6Z+fJnKrqmEOmFaZ1wHRPsAsdWWvt6J7gHMMvhz A3k/TGGPLynScuKO4Lk/n4toZpODfWSBIF68X1p6RZ7XVDuN8WZU5oGTFOE/+r2D oRJkZVQZoX4ETuFCLiCP1SfeGqYzCCOGBTcsAPF+fZomQghdl+ArokuvnaBncz9K d84AnTNVJy99anz+cjmellX9NMU2XMG5Lrr3xS81Od0ZDnoYzHgL/W35urLAqYaq tOMfJrJxvPvs3GMvTFVSilz4PrsHV8ifhKv1pNy7VVAYlTU+yG0Du12q3LCJRDtg 9aJkZbpRHdmzkQrqZVf10d0++K0OolGb -----END CERTIFICATE-----Generated at Mon Oct 20 16:24:52 2025 by rpki-client