$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: No7zBOMLB2JOqc5XqCpbrMuxrD5KgN3lMNJ+0iCSH9Y= Subject key identifier: 49:42:8B:37:E5:24:A8:DD:59:79:06:99:17:99:EF:8E:A9:3B:F4:53 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 16 Signing time: Sun 19 Oct 2025 11:27:17 +0000 Manifest this update: Sun 19 Oct 2025 11:27:17 +0000 Manifest next update: Sun 26 Oct 2025 11:27:17 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: kFBK+HTPXPtWDtjRL+iJIwW21/cjelwvbRF47dUbmfM=) 2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: g7RZU/wRy/WcZYbu6OOC41FcuLTqxTBZLD2lxc5r+0s=) 3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: 4ic8CmF7ut7Pvp2iYIvf/QMf2ZOGMMwbhjJKgiRPMl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Oct 19 11:27:17 2025 GMT Not After : Oct 26 11:27:17 2025 GMT Subject: CN=68f4cb15-c22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:2b:5a:90:3f:08:4d:fe:43:d7:5c:34:76: b3:b8:cb:07:6c:91:a5:36:f2:a9:ee:9f:09:71:99: 37:0c:6f:0f:1c:1d:d5:77:3d:0d:32:34:9d:0e:a0: 3b:99:5a:8a:66:c0:14:ef:db:58:41:c2:f5:75:f7: 84:c7:ca:ef:67:71:8e:30:e6:4e:26:37:44:63:b8: 25:19:ce:e0:06:92:2d:44:fa:5c:d3:a0:d1:a8:3c: 64:7d:41:be:b9:5d:69:ac:33:34:a6:5f:ed:68:3e: 75:43:70:e9:f3:ad:1b:1e:4b:af:53:0c:48:04:5d: d8:83:3e:be:83:cd:7a:ce:19:6e:ea:14:24:52:c7: 72:95:5e:f9:94:ad:13:61:70:b4:b3:5e:98:74:9b: 8d:26:86:6c:36:5e:69:9a:95:3f:8e:02:23:02:53: df:75:72:7f:51:b9:a0:30:47:ba:d1:37:89:8b:cc: e7:48:4c:70:68:35:b3:00:35:20:b1:d0:63:b3:7c: 44:d1:82:00:d8:2a:a4:c9:92:59:79:9b:43:86:6d: 6e:2f:99:16:fa:b5:01:39:c7:52:6e:94:d7:36:57: 88:1d:5a:ae:ab:77:69:33:ed:54:dc:c7:98:18:75: 92:18:d8:e8:0a:5b:8b:85:9c:07:f2:b6:2f:a0:89: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:42:8B:37:E5:24:A8:DD:59:79:06:99:17:99:EF:8E:A9:3B:F4:53 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:d7:f5:f3:f3:87:c1:3f:41:35:01:57:fa:70:71:0d:c1: 42:1e:ad:ae:19:bb:48:e6:c0:0a:18:db:2f:f0:cb:a5:c3:97: 27:5c:12:14:0f:66:b9:44:3e:4b:52:60:32:8f:a5:b0:64:36: 80:b8:9a:bd:3c:f7:19:ba:ae:73:83:be:94:12:d5:f4:f3:12: 4a:d0:8f:8d:dc:bb:46:4d:97:15:11:30:8d:e3:58:0a:4d:97: 4d:ef:8a:58:3f:a5:50:47:03:8c:9d:d8:77:f8:07:97:cd:02: 6f:2b:8b:40:68:ed:eb:b4:50:7e:44:96:c3:d3:fc:29:ef:55: 04:61:7b:a8:d8:90:c6:ae:2f:99:59:0f:d8:c9:9e:5d:09:cb: 7b:f1:15:7d:29:ee:6e:ca:0f:26:21:47:64:05:26:43:76:a3: 9b:0f:c3:91:29:c1:80:a5:12:ff:58:26:a1:0a:8d:c7:73:19: 5c:0d:d0:78:55:86:fd:93:d5:3f:ee:4d:87:95:f2:14:18:ac: 27:11:21:31:0b:71:45:8f:99:a3:ea:64:1e:82:91:8a:81:bb: 5d:16:c8:aa:7e:37:ec:fe:a4:1d:cc:1f:0d:7d:15:de:d2:40: bd:6f:57:ac:91:71:29:ec:9a:bd:d8:e9:aa:17:1a:f4:fe:17: 04:0e:8b:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNTEwMTkxMTI3MTdaFw0yNTEwMjYxMTI3MTdaMBgxFjAUBgNV BAMTDTY4ZjRjYjE1LWMyMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGTStakD8ITf5D11w0drO4ywdskaU28qnunwlxmTcMbw8cHdV3PQ0yNJ0OoDuZ WopmwBTv21hBwvV194THyu9ncY4w5k4mN0RjuCUZzuAGki1E+lzToNGoPGR9Qb65 XWmsMzSmX+1oPnVDcOnzrRseS69TDEgEXdiDPr6DzXrOGW7qFCRSx3KVXvmUrRNh cLSzXph0m40mhmw2XmmalT+OAiMCU991cn9RuaAwR7rRN4mLzOdITHBoNbMANSCx 0GOzfETRggDYKqTJkll5m0OGbW4vmRb6tQE5x1JulNc2V4gdWq6rd2kz7VTcx5gY dZIY2OgKW4uFnAfyti+giSj3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSUKLN+Uk qN1ZeQaZF5nvjqk79FMwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACzv1/Xz84fBP0E1AVf6cHENwUIera4Zu0jmwAoY2y/wy6XDlydcEhQP ZrlEPktSYDKPpbBkNoC4mr089xm6rnODvpQS1fTzEkrQj43cu0ZNlxURMI3jWApN l03vilg/pVBHA4yd2Hf4B5fNAm8ri0Bo7eu0UH5ElsPT/CnvVQRhe6jYkMauL5lZ D9jJnl0Jy3vxFX0p7m7KDyYhR2QFJkN2o5sPw5EpwYClEv9YJqEKjcdzGVwN0HhV hv2T1T/uTYeV8hQYrCcRITELcUWPmaPqZB6CkYqBu10WyKp+N+z+pB3MHw19Fd7S QL1vV6yRcSnsmr3Y6aoXGvT+FwQOizo= -----END CERTIFICATE-----Generated at Tue Oct 21 03:02:36 2025 by rpki-client