$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: 45Q0ShGLBc2hoJPPhEp25mQKm6Som9SIq7RX7Xc6rOo= Subject key identifier: D5:2F:CA:8F:AE:59:2D:D7:9A:D5:ED:C4:3E:33:41:16:74:61:CF:82 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 04B0 Signing time: Sun 19 Oct 2025 01:47:26 +0000 Manifest this update: Sun 19 Oct 2025 01:47:26 +0000 Manifest next update: Sun 26 Oct 2025 01:47:26 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: h8IvAEEfIBDNRHQ7RIOvCyWh26CpowCRI5PIJaBCfUs=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: Oct 19 01:47:26 2025 GMT Not After : Oct 26 01:47:26 2025 GMT Subject: CN=68f4432e-876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:9d:37:32:94:10:2d:64:51:d7:0c:a1:60: 3f:42:ad:a6:6c:05:8e:7e:d2:01:61:71:20:43:68: 6a:6b:f1:97:b1:9d:8e:26:8a:04:a1:28:6f:c1:5a: cd:2d:1d:32:36:5e:8e:c7:4c:1b:ed:0c:22:ff:3b: 28:0a:bc:d3:9c:f8:6d:04:48:df:c7:06:f1:25:6d: 86:8a:9e:ab:7e:8b:3b:b5:8e:a8:b6:db:aa:8c:3f: 1e:57:ed:93:61:94:7c:4b:d2:29:4b:57:e8:a0:a2: c6:8d:8d:4b:3d:fe:17:03:ff:19:48:53:da:fa:10: ce:71:02:b3:5b:a3:5c:aa:7f:24:7b:6c:97:f1:09: 4d:c5:a8:1d:10:89:99:cd:2c:2e:8e:df:75:d6:b4: 5d:1f:ce:26:5e:b2:5d:fb:0a:11:ed:d0:50:9e:d2: 2c:68:bb:a9:bf:f1:1a:3a:72:36:c2:ed:29:1e:d0: 5a:ed:8a:46:0f:b1:e3:a5:b4:db:97:a1:a3:1f:7a: 97:8a:a3:8a:03:29:bc:d2:df:f0:88:e2:b1:d5:e8: f0:70:c4:85:56:ef:d7:7b:34:3e:97:55:1f:1a:47: 7d:c4:99:9c:14:e3:ef:16:4e:35:7a:e2:77:80:2d: 65:34:de:e0:e8:50:88:3c:67:ff:79:c7:9e:91:dd: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2F:CA:8F:AE:59:2D:D7:9A:D5:ED:C4:3E:33:41:16:74:61:CF:82 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2d:b6:c1:10:2b:67:2b:6a:61:06:5c:c7:ef:69:b6:0d:15: d5:d1:82:bb:85:a3:61:3a:f9:b4:f2:8a:3f:d5:b2:ac:c7:b2: 75:3a:5a:63:51:3b:ac:0a:76:12:ea:45:77:d3:c0:ad:5f:4b: 1a:d3:b1:70:67:75:65:ee:8b:cf:9b:a4:d5:53:b5:33:40:dd: 53:64:f9:8f:04:6f:8f:34:55:93:11:05:49:3b:87:c2:91:79: 9d:80:1a:6e:87:ea:f9:c3:3c:cd:a4:55:62:25:ed:be:48:c8: 6e:88:18:09:35:0c:48:bb:f4:3f:85:e3:c3:dc:7d:59:d1:65: de:90:86:d6:20:36:df:d5:1d:4f:db:00:3e:e8:ad:70:a5:03: c6:0f:6b:11:70:ce:05:b4:d4:d3:06:5a:b3:05:97:03:47:bb: b1:bb:fc:6e:15:00:99:b4:ce:4d:e2:30:2d:9d:77:b9:9e:4f: 93:14:32:5c:f2:a8:cf:db:3c:51:78:ed:c8:1c:f0:cc:c7:4a: 08:f5:e7:a7:6e:8d:be:7c:0a:05:79:70:e4:bb:de:77:b5:55: 39:19:18:de:b1:b2:44:77:df:c3:8d:c5:aa:ab:ea:7d:a5:23: d8:5d:3d:6f:10:f7:ff:64:46:01:9c:c3:d3:94:31:b7:cf:95: 50:5a:55:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjUxMDE5MDE0NzI2WhcNMjUxMDI2MDE0NzI2WjAYMRYwFAYD VQQDEw02OGY0NDMyZS04NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoedNzKUEC1kUdcMoWA/Qq2mbAWOftIBYXEgQ2hqa/GXsZ2OJooEoShvwVrN LR0yNl6Ox0wb7Qwi/zsoCrzTnPhtBEjfxwbxJW2Gip6rfos7tY6ottuqjD8eV+2T YZR8S9IpS1fooKLGjY1LPf4XA/8ZSFPa+hDOcQKzW6Ncqn8ke2yX8QlNxagdEImZ zSwujt911rRdH84mXrJd+woR7dBQntIsaLupv/EaOnI2wu0pHtBa7YpGD7HjpbTb l6GjH3qXiqOKAym80t/wiOKx1ejwcMSFVu/XezQ+l1UfGkd9xJmcFOPvFk41euJ3 gC1lNN7g6FCIPGf/eceekd1n7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUvyo+u WS3XmtXtxD4zQRZ0Yc+CMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhLbbBECtnK2phBlzH72m2DRXV0YK7haNhOvm08oo/1bKsx7J1Olpj UTusCnYS6kV308CtX0sa07FwZ3Vl7ovPm6TVU7UzQN1TZPmPBG+PNFWTEQVJO4fC kXmdgBpuh+r5wzzNpFViJe2+SMhuiBgJNQxIu/Q/hePD3H1Z0WXekIbWIDbf1R1P 2wA+6K1wpQPGD2sRcM4FtNTTBlqzBZcDR7uxu/xuFQCZtM5N4jAtnXe5nk+TFDJc 8qjP2zxReO3IHPDMx0oI9eenbo2+fAoFeXDku953tVU5GRjesbJEd9/DjcWqq+p9 pSPYXT1vEPf/ZEYBnMPTlDG3z5VQWlV+ -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:58 2025 by rpki-client