$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json) Hash identifier: Gwo/TfgvlafZ3aTcMXTDdYCHO+T+Ets+W11yODfo/r4= Subject key identifier: CF:77:46:2E:EA:FB:3F:9B:97:47:05:C7:B8:92:EE:C4:9E:49:39:C7 Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft Manifest number: A5 Signing time: Sun 19 Oct 2025 09:28:26 +0000 Manifest this update: Sun 19 Oct 2025 09:28:25 +0000 Manifest next update: Sun 26 Oct 2025 09:28:25 +0000 Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: FJgMKtAPu1HK27EfrHfEwSvSUbEcMSRjoox1CbsLSUc=) 2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: WLNXMP0ra3REMtSs7laKuUO//z/EEyMC3rb1Y8gR3Jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: Oct 19 09:28:25 2025 GMT Not After : Oct 26 09:28:25 2025 GMT Subject: CN=68f4af3a-fcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:38:86:fb:67:6a:cf:9e:83:aa:c2:01:32: 06:d3:a8:7c:7c:59:a3:7c:50:8a:fd:08:90:dd:ad: 0d:6c:5b:41:5b:99:f4:54:1e:57:de:18:6b:5c:6c: 9b:fb:cc:a0:a0:d9:66:d2:7a:98:66:a1:fc:3a:3f: 46:b5:63:3f:61:ff:8b:f6:44:e9:fa:50:2f:5e:00: b6:c6:a0:a9:a2:6d:c3:50:4f:e3:da:f5:1f:7f:13: 6f:bc:1f:06:5c:73:17:41:0e:a0:ee:cf:16:e5:81: ad:ae:de:bd:8a:e0:2b:64:a5:d6:c9:7f:f8:f2:97: 31:6e:32:d8:5e:6f:33:87:f4:1e:34:b1:75:07:f7: 7e:e1:25:e4:c9:3c:43:64:1b:ce:6e:74:d3:d2:2f: b5:ad:07:24:fc:90:3a:35:ec:4f:c1:43:b1:b9:2a: e7:c6:35:55:cf:29:3e:5c:35:06:82:20:ba:6d:05: b4:13:8c:a8:1d:d6:0c:5d:a3:00:99:8c:7f:1e:d7: 72:bb:9d:3c:83:01:0c:c7:8c:77:c9:d9:f0:76:26: 07:e8:c3:9e:42:e4:9e:49:15:6a:d2:2f:77:0b:56: 26:60:f5:71:ba:f1:0b:d6:c4:e2:74:2d:0e:8b:46: 7c:17:97:82:87:e3:68:cc:29:87:a3:20:71:c4:a2: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:46:2E:EA:FB:3F:9B:97:47:05:C7:B8:92:EE:C4:9E:49:39:C7 X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ac:3f:fb:1e:d0:44:3c:2e:95:58:30:6d:30:dd:b9:4f:77: 31:d4:67:bf:fb:f3:02:7b:d4:2f:fc:22:b1:19:41:08:a5:ce: 9c:b5:ee:df:d4:79:7b:bb:72:e7:49:d4:27:f6:11:1b:90:07: 10:63:9c:eb:b6:8d:b3:d3:4a:80:f9:75:cb:f1:de:4e:5b:67: 65:f6:b9:52:b6:19:59:06:be:8f:a5:5e:95:90:b0:dd:ea:3a: 85:e6:a8:a7:31:25:87:72:9f:ca:02:47:5f:b0:08:0e:86:67: 1d:f9:4f:00:f7:93:ce:ff:8b:88:6a:98:e7:59:83:03:8f:0f: 15:4f:83:d7:52:4f:b6:ad:dc:78:1d:80:7b:cb:aa:cd:cc:e8: af:d3:4d:0a:8b:31:52:cc:55:03:f4:b5:b8:08:41:50:03:c4: 90:59:b6:61:ff:e2:41:40:3d:f1:43:fd:b9:ce:5f:9d:9f:dc: 22:54:a8:0f:1f:74:15:fc:6e:3c:c2:3e:39:ec:eb:9a:c8:5f: ac:59:62:e5:77:a8:c3:67:c3:6f:90:99:d0:a9:7d:a8:b4:7e: c5:96:9b:f2:19:ae:44:59:1c:8b:00:e2:5a:d4:73:11:5d:92: 66:c3:47:8e:ad:01:33:2c:ca:35:6e:62:7c:fe:d2:f5:e7:00: 53:45:3c:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3Q0YxMTAvBgNVBAUTKEVDM0Q4MDdGNzkzQzlDRjVGQ0UzMzVFRTE1RTA5ODQ0 NDlCNDMwOTYwHhcNMjUxMDE5MDkyODI1WhcNMjUxMDI2MDkyODI1WjAYMRYwFAYD VQQDEw02OGY0YWYzYS1mY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ic4hvtnas+eg6rCATIG06h8fFmjfFCK/QiQ3a0NbFtBW5n0VB5X3hhrXGyb +8ygoNlm0nqYZqH8Oj9GtWM/Yf+L9kTp+lAvXgC2xqCpom3DUE/j2vUffxNvvB8G XHMXQQ6g7s8W5YGtrt69iuArZKXWyX/48pcxbjLYXm8zh/QeNLF1B/d+4SXkyTxD ZBvObnTT0i+1rQck/JA6NexPwUOxuSrnxjVVzyk+XDUGgiC6bQW0E4yoHdYMXaMA mYx/Htdyu508gwEMx4x3ydnwdiYH6MOeQuSeSRVq0i93C1YmYPVxuvEL1sTidC0O i0Z8F5eCh+NozCmHoyBxxKLw0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM93Ri7q +z+bl0cFx7iS7sSeSTnHMB8GA1UdIwQYMBaAFOw9gH95PJz1/OM17hXgmERJtDCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTdDRi9CNDE1NTQ1OEIy QzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5QWDg0elh1RmVDWVJFbTBN SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1KWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5Q WDg0elh1RmVDWVJFbTBNSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHrD/7HtBEPC6VWDBtMN25T3cx1Ge/+/MCe9Qv/CKxGUEIpc6cte7f 1Hl7u3LnSdQn9hEbkAcQY5zrto2z00qA+XXL8d5OW2dl9rlSthlZBr6PpV6VkLDd 6jqF5qinMSWHcp/KAkdfsAgOhmcd+U8A95PO/4uIapjnWYMDjw8VT4PXUk+2rdx4 HYB7y6rNzOiv000KizFSzFUD9LW4CEFQA8SQWbZh/+JBQD3xQ/25zl+dn9wiVKgP H3QV/G48wj457OuayF+sWWLld6jDZ8NvkJnQqX2otH7FlpvyGa5EWRyLAOJa1HMR XZJmw0eOrQEzLMo1bmJ8/tL15wBTRTzt -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:42 2025 by rpki-client