$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: /H3W/4Qh79JpqNgewTtP89UgmNu+xRbmtuRU6HWfxCU= Subject key identifier: 88:86:AF:13:E8:6A:82:9D:BB:67:B6:CD:FD:6E:1C:80:BB:A7:01:3C Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:06:27 +0000 Manifest this update: Sun 19 Oct 2025 08:06:26 +0000 Manifest next update: Sun 26 Oct 2025 08:06:26 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: NjvLZKVqjRdjGfcWXGaSFbHUy+jSk8bjUmpxq2TnOfs=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: Oct 19 08:06:26 2025 GMT Not After : Oct 26 08:06:26 2025 GMT Subject: CN=68f49c02-d814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:ff:62:fb:29:e1:6a:31:a5:8e:f0:7a:b2: 15:b8:20:91:f1:be:c9:fa:9b:72:69:ec:99:0c:c1: 3e:62:75:a1:11:7e:94:aa:f6:98:32:1c:23:41:7d: e0:66:52:d4:80:a7:39:18:9a:ae:29:a9:3c:aa:bf: 61:84:d6:94:8f:36:11:43:75:cc:c6:fd:2d:c3:3a: 17:27:90:1f:e0:12:a8:b5:83:75:e3:16:16:b5:72: 1c:36:e1:5d:5d:c8:4f:69:88:45:fb:61:0f:c0:17: c7:e0:9b:b0:c6:66:22:6a:ab:5f:fb:c2:e2:32:0f: bd:20:ef:36:56:46:f9:f3:13:b5:87:75:51:f6:c9: b1:46:fe:53:27:eb:31:b7:fb:90:84:96:98:59:0a: 8c:5c:ed:03:51:32:f1:c5:6a:f5:5e:98:63:84:d8: 57:1a:af:73:33:f6:f3:5a:03:02:fb:96:db:99:e6: 6e:d9:b6:f6:a5:79:51:f0:6b:0b:fc:af:23:dc:78: 5a:3c:87:d9:67:10:b5:56:ce:3f:e6:9e:1c:af:2c: f7:82:23:0a:37:89:de:fb:c8:d7:87:44:b9:da:3d: b5:73:ba:4b:7b:10:c3:c2:e1:6e:6a:06:9d:4e:a8: 80:20:78:10:c8:68:30:17:ad:c3:3c:75:f7:ad:54: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:86:AF:13:E8:6A:82:9D:BB:67:B6:CD:FD:6E:1C:80:BB:A7:01:3C X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c7:b5:bb:69:08:a5:14:05:aa:42:cb:50:89:5c:c1:7f:bb: 94:d7:2d:c4:98:e4:0c:02:c1:c7:7c:85:ee:4a:5f:85:53:dc: 88:0c:48:d8:b5:39:25:be:31:db:e1:36:c9:45:a6:ff:6c:e8: 36:30:38:0f:86:88:96:a7:2d:ee:8d:56:46:b7:61:e3:88:70: c8:e8:51:4d:a8:48:d2:40:30:68:1d:20:67:eb:d6:43:61:57: 8d:59:c1:16:07:ba:62:8c:d7:cc:d1:f1:d1:8c:cc:9b:8d:5d: 25:91:a8:ef:96:87:27:bd:6a:16:fc:2c:01:9a:95:b2:60:2b: cb:a0:6c:6c:48:94:ac:67:95:f3:0c:fd:ba:24:c2:60:a6:6e: c0:2b:2f:77:a5:84:e2:0f:a2:80:ad:36:14:94:67:45:39:3e: 84:16:46:4f:70:93:35:1e:3c:87:cb:41:5f:0d:be:62:cf:1f: 13:a9:63:30:22:b2:a5:53:91:88:42:8a:9e:4c:fe:7a:55:6f: f6:f9:25:8c:a7:22:5b:3f:59:dd:8d:96:ba:ea:31:c4:52:bb: cd:91:1d:ab:ac:ee:4d:f3:77:66:43:05:f4:27:b6:0c:6f:9e: 55:c8:cd:ee:48:5f:37:2b:32:4a:f5:6a:9e:f9:50:65:bc:18: e8:43:8f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz RTQyMzJERUYwHhcNMjUxMDE5MDgwNjI2WhcNMjUxMDI2MDgwNjI2WjAYMRYwFAYD VQQDEw02OGY0OWMwMi1kODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVT/Yvsp4WoxpY7werIVuCCR8b7J+ptyaeyZDME+YnWhEX6UqvaYMhwjQX3g ZlLUgKc5GJquKak8qr9hhNaUjzYRQ3XMxv0twzoXJ5Af4BKotYN14xYWtXIcNuFd XchPaYhF+2EPwBfH4JuwxmYiaqtf+8LiMg+9IO82Vkb58xO1h3VR9smxRv5TJ+sx t/uQhJaYWQqMXO0DUTLxxWr1XphjhNhXGq9zM/bzWgMC+5bbmeZu2bb2pXlR8GsL /K8j3HhaPIfZZxC1Vs4/5p4cryz3giMKN4ne+8jXh0S52j21c7pLexDDwuFuagad TqiAIHgQyGgwF63DPHX3rVTKpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiGrxPo aoKdu2e2zf1uHIC7pwE8MB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2 ZF94MGwyLW4xR3ctUWpMZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2x7W7aQilFAWqQstQiVzBf7uU1y3EmOQMAsHHfIXuSl+FU9yIDEjY tTklvjHb4TbJRab/bOg2MDgPhoiWpy3ujVZGt2HjiHDI6FFNqEjSQDBoHSBn69ZD YVeNWcEWB7pijNfM0fHRjMybjV0lkajvlocnvWoW/CwBmpWyYCvLoGxsSJSsZ5Xz DP26JMJgpm7AKy93pYTiD6KArTYUlGdFOT6EFkZPcJM1HjyHy0FfDb5izx8TqWMw IrKlU5GIQoqeTP56VW/2+SWMpyJbP1ndjZa66jHEUrvNkR2rrO5N83dmQwX0J7YM b55VyM3uSF83KzJK9Wqe+VBlvBjoQ48a -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:18 2025 by rpki-client