$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: YtdeSoAzKHHqA27jjs1jbebX/W1GlhbnnIDoqlTJp0o= Subject key identifier: 89:A6:A8:0A:D8:B3:A9:D4:D7:70:27:5C:5E:DB:B9:E2:00:E2:A5:0C Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 1275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 1264 Signing time: Sat 18 Oct 2025 17:37:10 +0000 Manifest this update: Sat 18 Oct 2025 17:37:09 +0000 Manifest next update: Sat 25 Oct 2025 17:37:09 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: 8m4n8eUTYmu6RWqJejj9kz8+BDIycjOQVKHjcUgRnSc=) 2: 0DE55A7CAA4411F0B070DC19C4F9AE02.roa (hash: QZnpi1XJxd86ZX8V2EZQmrcAMBdQtNXdb6YyTgLqo34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4725 (0x1275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Oct 18 17:37:09 2025 GMT Not After : Oct 25 17:37:09 2025 GMT Subject: CN=68f3d046-1fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:65:5c:f4:81:7d:d8:2b:bd:39:b0:3f:41: 5f:90:48:ee:ba:c0:c7:3e:0f:4c:6c:f7:6c:54:a0: 69:ef:20:40:f1:b9:0f:76:a3:1d:6b:e4:03:fa:7b: 9d:40:cc:a9:cc:78:ee:24:6b:5e:b5:e0:c3:ac:8d: 0c:99:a5:92:62:3a:0f:51:90:72:2b:6e:74:4f:74: 90:b5:6b:7f:e6:2e:dc:ee:79:65:5a:e2:fd:25:ff: 21:90:a3:66:e9:9b:ec:2f:bf:2a:0f:8e:7a:d3:0b: de:6f:be:cf:84:05:e6:ec:6c:3e:a2:41:a7:51:02: 3f:09:19:f5:ed:ae:1f:f8:36:84:30:83:44:6c:a6: a5:53:b0:4e:3a:58:15:2d:b0:5c:d1:55:0f:e7:42: ef:30:90:b1:15:9b:b6:1b:b8:c8:d9:1a:dc:a7:da: 28:66:17:44:05:7c:d2:c2:ed:50:0e:33:03:3b:78: 8f:ee:ac:a9:8d:3c:6c:b5:08:67:01:13:fb:72:e2: 4a:35:8b:04:1f:6e:1e:fb:aa:c7:8f:9d:3b:88:4f: 8c:76:16:d2:97:13:be:d2:57:1e:80:47:b2:2f:5a: 1e:76:6d:ea:8d:f3:8e:5c:a5:d7:69:7b:51:69:7c: ee:da:04:c8:82:5d:1c:48:77:93:d8:8a:fd:22:f3: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:A8:0A:D8:B3:A9:D4:D7:70:27:5C:5E:DB:B9:E2:00:E2:A5:0C X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:08:d9:3b:5b:b6:77:91:84:8e:27:2f:fb:aa:5c:97:0d:a0: 49:cf:63:7b:da:89:a9:83:51:bd:7d:ea:09:e9:fa:9f:4c:bc: dc:80:e2:7e:f5:bc:89:73:d7:01:95:e2:0f:eb:ce:43:ff:33: 18:bf:f9:4a:67:92:16:e1:ae:f0:a6:e2:7c:8d:8a:5f:e6:45: 2e:ea:48:f1:b5:c7:53:b7:67:d3:01:87:2f:a7:9d:62:c4:ab: 9e:e9:16:06:31:77:07:d7:b3:ea:4d:12:35:c4:a4:e7:f0:32: 8f:02:b1:94:43:a2:6c:fc:87:9b:03:03:f3:35:86:20:72:a0: 6a:3d:99:c8:7b:49:f3:bc:58:f6:f9:66:99:e0:ab:61:51:57: 35:bb:06:42:b2:33:08:82:1b:1a:32:01:55:11:5a:0f:59:ca: 75:a4:3f:2a:88:79:a1:7a:35:54:72:b4:17:f5:26:2f:08:38: c0:ba:24:b8:07:0a:a1:a3:ff:f4:1b:ce:7a:71:fd:8f:b4:e6: ce:15:cf:2f:7a:9f:bb:dd:1a:90:92:ca:02:1e:ff:3e:4b:a4: a7:5d:00:54:ee:02:79:d8:72:53:6f:51:26:0a:eb:02:63:0c: c8:f6:4d:77:39:53:9b:ac:f0:93:55:22:b1:00:08:97:9a:07: bf:e8:5b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUxMDE4MTczNzA5WhcNMjUxMDI1MTczNzA5WjAYMRYwFAYD VQQDEw02OGYzZDA0Ni0xZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw69lXPSBfdgrvTmwP0FfkEjuusDHPg9MbPdsVKBp7yBA8bkPdqMda+QD+nud QMypzHjuJGteteDDrI0MmaWSYjoPUZByK250T3SQtWt/5i7c7nllWuL9Jf8hkKNm 6ZvsL78qD4560wveb77PhAXm7Gw+okGnUQI/CRn17a4f+DaEMINEbKalU7BOOlgV LbBc0VUP50LvMJCxFZu2G7jI2Rrcp9ooZhdEBXzSwu1QDjMDO3iP7qypjTxstQhn ARP7cuJKNYsEH24e+6rHj507iE+MdhbSlxO+0lcegEeyL1oedm3qjfOOXKXXaXtR aXzu2gTIgl0cSHeT2Ir9IvPohwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImmqArY s6nU13AnXF7bueIA4qUMMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtCNk7W7Z3kYSOJy/7qlyXDaBJz2N72ompg1G9feoJ6fqfTLzcgOJ+ 9byJc9cBleIP685D/zMYv/lKZ5IW4a7wpuJ8jYpf5kUu6kjxtcdTt2fTAYcvp51i xKue6RYGMXcH17PqTRI1xKTn8DKPArGUQ6Js/IebAwPzNYYgcqBqPZnIe0nzvFj2 +WaZ4KthUVc1uwZCsjMIghsaMgFVEVoPWcp1pD8qiHmhejVUcrQX9SYvCDjAuiS4 Bwqho//0G856cf2PtObOFc8vep+73RqQksoCHv8+S6SnXQBU7gJ52HJTb1EmCusC YwzI9k13OVObrPCTVSKxAAiXmge/6Fty -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:23 2025 by rpki-client