$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: lmgyyGyTQngfN4VbMAsKsIxt16d5GFQhvqddte9DuCg= Subject key identifier: 0A:5B:46:67:0C:E3:04:58:21:3C:95:C4:8C:FA:52:4D:31:C0:9F:6B Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 3511 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 34EB Signing time: Mon 20 Oct 2025 14:17:03 +0000 Manifest this update: Mon 20 Oct 2025 14:17:03 +0000 Manifest next update: Mon 27 Oct 2025 14:17:03 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: 4tZbyl7mnT0Z29oyDYmirP7Wuu1wZ7blpFIhU7tS058=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13585 (0x3511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Oct 20 14:17:03 2025 GMT Not After : Oct 27 14:17:03 2025 GMT Subject: CN=68f6445f-4152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:db:90:10:bf:20:46:a8:58:03:ce:c7:c2: ac:7b:55:a9:e6:e7:ba:dc:5c:36:8a:18:c2:f2:73: f9:07:df:92:3b:44:b7:dc:9d:e4:14:8e:4d:bb:d8: 53:3b:9c:30:41:a5:89:ca:6b:da:62:d9:c4:20:2e: fc:3d:30:34:e2:b8:25:49:03:49:34:09:df:4a:b3: e5:68:0b:b2:3a:7e:6b:7f:d3:e3:3f:73:2c:bc:a0: 9a:93:13:fc:fe:c3:3d:0e:82:d9:b4:0a:89:2f:ec: 5c:3c:82:66:1a:b6:fc:78:26:f6:0e:87:cb:0a:a3: 51:6a:2f:6c:5a:fa:16:6e:08:f6:2a:d4:db:90:f4: 30:f0:54:26:86:66:79:d3:fd:ae:9f:5f:29:c7:9b: bd:af:42:c2:03:c2:6d:10:89:b2:2a:bb:3d:57:65: 35:cc:7b:21:c7:d4:af:04:d7:0b:3e:6c:76:08:0d: de:91:95:b1:b1:43:b3:3c:a0:e2:55:9f:26:42:3e: aa:69:3f:02:3e:09:40:22:81:92:d5:e6:e5:c0:99: 99:31:e2:00:f6:c6:54:08:3a:ef:4b:47:1d:30:3a: d7:7d:da:5d:85:bd:4b:a0:d5:4e:a1:40:3c:1a:29: 30:32:e8:3d:e8:17:26:d6:2f:51:be:0c:f0:ef:65: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5B:46:67:0C:E3:04:58:21:3C:95:C4:8C:FA:52:4D:31:C0:9F:6B X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:62:76:eb:d9:29:90:1e:2d:5e:f5:6f:19:49:c8:1f:b9:8b: 90:f0:71:08:5a:af:8e:5c:d0:84:23:26:78:f1:2b:d4:91:7f: ec:32:e4:ab:e9:de:23:dd:64:a1:a4:f4:bb:95:65:f2:63:8d: b9:94:29:5f:a5:af:22:15:35:24:5e:f1:e1:87:7c:9d:33:f0: 08:92:06:22:3b:84:bb:9f:c7:f9:ea:cc:3b:ea:d6:49:7d:ca: bc:37:14:5a:84:e4:0f:46:ee:61:34:72:fc:6c:05:6d:3c:70: 07:f4:d9:e8:8b:9c:e0:a7:69:7e:3f:e7:27:55:52:31:24:06: 82:d0:4f:d4:28:70:5d:0e:ad:80:14:d8:e0:f3:a6:e7:7c:1a: d8:54:ba:65:87:22:e0:37:30:09:e6:d2:72:ab:68:ea:5b:11: 12:f2:b0:bd:35:82:59:60:07:9b:5d:c0:0c:c7:68:1f:ac:62: 30:33:ac:9c:e9:92:14:4e:9d:59:df:db:2a:2e:40:5d:2f:83: 83:e8:41:ab:c3:36:86:1b:a8:83:7b:47:e3:16:73:6c:d9:a9: d8:4e:68:20:bf:e6:95:7f:e6:b7:90:e6:99:0e:58:1d:9c:97: 7f:96:4a:06:63:c1:4c:15:88:59:4d:2a:a5:03:36:14:6a:d0: eb:39:4e:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUxMDIwMTQxNzAzWhcNMjUxMDI3MTQxNzAzWjAYMRYwFAYD VQQDEw02OGY2NDQ1Zi00MTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SnbkBC/IEaoWAPOx8Kse1Wp5ue63Fw2ihjC8nP5B9+SO0S33J3kFI5Nu9hT O5wwQaWJymvaYtnEIC78PTA04rglSQNJNAnfSrPlaAuyOn5rf9PjP3MsvKCakxP8 /sM9DoLZtAqJL+xcPIJmGrb8eCb2DofLCqNRai9sWvoWbgj2KtTbkPQw8FQmhmZ5 0/2un18px5u9r0LCA8JtEImyKrs9V2U1zHshx9SvBNcLPmx2CA3ekZWxsUOzPKDi VZ8mQj6qaT8CPglAIoGS1eblwJmZMeIA9sZUCDrvS0cdMDrXfdpdhb1LoNVOoUA8 GikwMug96Bcm1i9Rvgzw72XJJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApbRmcM 4wRYITyVxIz6Uk0xwJ9rMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOYnbr2SmQHi1e9W8ZScgfuYuQ8HEIWq+OXNCEIyZ48SvUkX/sMuSr 6d4j3WShpPS7lWXyY425lClfpa8iFTUkXvHhh3ydM/AIkgYiO4S7n8f56sw76tZJ fcq8NxRahOQPRu5hNHL8bAVtPHAH9Nnoi5zgp2l+P+cnVVIxJAaC0E/UKHBdDq2A FNjg86bnfBrYVLplhyLgNzAJ5tJyq2jqWxES8rC9NYJZYAebXcAMx2gfrGIwM6yc 6ZIUTp1Z39sqLkBdL4OD6EGrwzaGG6iDe0fjFnNs2anYTmggv+aVf+a3kOaZDlgd nJd/lkoGY8FMFYhZTSqlAzYUatDrOU4V -----END CERTIFICATE-----Generated at Tue Oct 21 08:09:36 2025 by rpki-client