$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: IucXxbJPWqYtnrPH7/MIOKTQ/N8QBAw9554yXknIe1s= Subject key identifier: 01:12:50:35:BD:2A:4E:3D:68:85:78:1C:FF:1E:43:32:3F:04:79:D3 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 7D Signing time: Sun 19 Oct 2025 10:04:46 +0000 Manifest this update: Sun 19 Oct 2025 10:04:46 +0000 Manifest next update: Sun 26 Oct 2025 10:04:46 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: I1DySYgL6j0ppPMztS6BYIZDAbbVsjxmWvx5MV/6df0=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Oct 19 10:04:46 2025 GMT Not After : Oct 26 10:04:46 2025 GMT Subject: CN=68f4b7be-12ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:4b:c1:d4:3a:77:e0:47:bc:73:9e:28:61: 6b:57:f7:60:01:c4:ac:09:52:e0:1e:e3:1f:b7:4e: 99:0e:58:89:78:3f:f4:26:93:12:d9:09:b4:f1:7e: ed:72:a9:0c:7f:0d:9b:1b:f6:19:51:3c:7c:52:92: cb:12:e4:24:8d:37:6c:09:20:27:4b:b0:e7:68:6d: 4b:38:f0:b4:07:8a:3a:e0:51:1e:c5:3e:0c:90:0f: ef:f4:85:16:db:ef:cf:6f:c7:a3:fe:0d:a3:75:85: d5:d8:7b:5a:e3:5e:8c:f9:3f:4a:c9:df:71:9c:09: 46:e6:e9:8a:c8:0f:3e:e0:c6:fe:d8:bd:b0:87:71: 86:9a:ec:f1:51:8f:88:97:ba:7f:75:6a:f7:6c:8b: 54:c4:17:89:38:68:53:9b:6b:81:fa:8d:46:3a:2f: 73:ba:a0:a8:e4:d0:e7:08:6c:a3:39:d2:43:c9:db: 76:78:a7:81:86:33:d4:a7:da:26:ab:c9:c7:36:e4: 8c:10:f2:b0:22:1f:48:f5:67:90:b7:c0:3b:a2:47: 24:38:44:bb:a6:c7:79:9b:56:e1:82:ab:ad:e2:47: c7:bf:37:5c:d0:f6:ac:95:ce:d6:e3:bd:c0:af:2b: 75:23:60:1f:74:a1:2e:b6:17:81:56:ab:55:4e:4a: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:50:35:BD:2A:4E:3D:68:85:78:1C:FF:1E:43:32:3F:04:79:D3 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:00:cf:f8:ee:16:d9:37:6c:8b:26:17:e5:8e:38:91:d4:48: f0:d4:0c:f4:55:d0:24:1e:7d:90:ad:8b:36:14:bd:4a:59:b7: 2f:34:33:99:d8:5c:e3:a9:7e:77:73:04:9a:f5:6e:36:91:cf: 9c:fb:b1:44:7f:68:bb:a9:85:3e:a9:50:a7:ba:71:99:8b:df: 15:03:82:5d:71:04:41:1c:4c:3d:c7:08:cf:7f:3f:42:e9:8e: 9e:b1:95:47:b4:85:54:66:c8:a2:23:cd:ff:91:87:d7:9f:a4: 89:1e:fa:8e:5e:5e:61:af:ec:41:db:85:72:3a:9f:2d:7e:45: 71:7a:aa:85:bc:91:be:d0:50:87:d2:27:59:fc:47:65:18:75: 0e:79:a9:f7:c6:69:dc:e8:c7:87:9c:6b:d9:ac:45:5e:ec:95: fb:83:38:fd:d2:62:da:49:b8:15:66:40:8c:70:30:b2:b2:72: 29:20:7d:73:1e:00:63:2d:8b:84:c0:66:84:9f:58:26:7a:50: 35:91:85:cd:62:5d:fe:a2:65:2d:60:61:2f:8b:ff:a7:4a:0c: ac:0a:45:a9:dc:1b:6b:d0:82:b5:c8:ea:0d:53:2d:a7:b1:ae: 7b:58:31:cd:0f:f3:44:04:b9:5e:b7:34:d3:ff:98:92:14:ed: e6:81:a0:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjUxMDE5MTAwNDQ2WhcNMjUxMDI2MTAwNDQ2WjAYMRYwFAYD VQQDEw02OGY0YjdiZS0xMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsFLwdQ6d+BHvHOeKGFrV/dgAcSsCVLgHuMft06ZDliJeD/0JpMS2Qm08X7t cqkMfw2bG/YZUTx8UpLLEuQkjTdsCSAnS7DnaG1LOPC0B4o64FEexT4MkA/v9IUW 2+/Pb8ej/g2jdYXV2Hta416M+T9Kyd9xnAlG5umKyA8+4Mb+2L2wh3GGmuzxUY+I l7p/dWr3bItUxBeJOGhTm2uB+o1GOi9zuqCo5NDnCGyjOdJDydt2eKeBhjPUp9om q8nHNuSMEPKwIh9I9WeQt8A7okckOES7psd5m1bhgqut4kfHvzdc0Paslc7W473A ryt1I2AfdKEutheBVqtVTkqkGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAESUDW9 Kk49aIV4HP8eQzI/BHnTMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUAM/47hbZN2yLJhfljjiR1Ejw1Az0VdAkHn2QrYs2FL1KWbcvNDOZ 2FzjqX53cwSa9W42kc+c+7FEf2i7qYU+qVCnunGZi98VA4JdcQRBHEw9xwjPfz9C 6Y6esZVHtIVUZsiiI83/kYfXn6SJHvqOXl5hr+xB24VyOp8tfkVxeqqFvJG+0FCH 0idZ/EdlGHUOean3xmnc6MeHnGvZrEVe7JX7gzj90mLaSbgVZkCMcDCysnIpIH1z HgBjLYuEwGaEn1gmelA1kYXNYl3+omUtYGEvi/+nSgysCkWp3Btr0IK1yOoNUy2n sa57WDHND/NEBLletzTT/5iSFO3mgaA2 -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:55 2025 by rpki-client