$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: LQPPQpanxaGwGuHNtpIOqtrnhmtCpk7QDD+XbA3SWSo= Subject key identifier: B7:71:13:15:4F:20:62:A8:34:28:05:A5:01:31:B8:33:EC:64:20:15 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 06B3 Signing time: Sat 18 Oct 2025 23:38:10 +0000 Manifest this update: Sat 18 Oct 2025 23:38:10 +0000 Manifest next update: Sat 25 Oct 2025 23:38:10 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: mHVJBZu+EBKzgOqPt4jtQtlG41QvEGgg7AcQagDLOqc=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Oct 18 23:38:10 2025 GMT Not After : Oct 25 23:38:10 2025 GMT Subject: CN=68f424e2-2456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:c8:3b:cc:53:d1:44:3a:6b:94:4a:0a:25: ab:a2:c3:ca:7f:e1:7f:2c:3a:0e:35:6b:f3:a0:29: c6:f8:52:b1:4b:78:6a:bd:fe:62:1b:0b:ff:68:b6: a9:bc:c4:88:5b:7b:88:04:35:b0:3a:94:d8:2c:5f: 0e:63:5a:e5:24:de:42:64:66:f7:ad:64:14:a6:9a: 1d:43:80:b7:bd:ef:93:98:e7:33:0d:19:5a:a0:60: e7:45:60:57:f8:ab:fb:41:33:ed:a0:56:62:83:32: bd:05:db:cc:cb:80:58:c7:b2:ea:f3:a9:1d:85:f2: 51:fd:3e:9c:be:03:82:d4:23:94:44:8b:03:00:60: d6:8e:ef:e2:b9:b3:be:00:d8:c3:9e:e8:52:42:83: 34:31:97:45:58:76:ce:72:b6:9b:66:04:0a:75:a8: fb:3a:cd:c4:6c:b2:58:82:ad:da:fa:4a:1b:62:1f: 1f:bc:ab:42:60:13:18:dc:68:99:cc:9e:ba:c0:47: 6c:92:98:9e:20:68:39:23:a3:f6:91:0f:0f:f9:5e: 89:34:9d:54:5e:ef:4f:94:4b:13:ea:3e:b4:f8:f9: 11:35:ce:fe:08:f5:f5:38:86:ca:89:5d:99:0b:b8: ce:11:c9:16:b9:6f:94:4c:ec:81:44:24:5d:9d:4c: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:71:13:15:4F:20:62:A8:34:28:05:A5:01:31:B8:33:EC:64:20:15 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:16:94:8c:7f:e6:da:a7:4f:e2:2d:57:af:56:fd:5e:68: 0f:57:ee:1d:97:16:f3:e2:51:e9:a8:bf:8d:f5:51:7b:e2:89: 34:af:99:9c:06:7d:6f:d3:9c:cf:ef:c6:10:e3:ce:62:0f:b3: 6d:13:e2:f9:c1:1b:a0:f8:e9:90:65:0a:5e:09:7d:5d:32:e6: bf:f4:1b:5f:bb:3c:06:24:df:58:b4:ec:c4:6a:b0:34:07:41: c0:3a:0b:f1:e1:01:54:cc:a7:38:66:12:53:29:23:a7:2a:40: a8:97:f5:09:07:c4:6c:53:bb:84:8e:1a:ef:6c:d6:3c:e6:86: d0:c3:58:58:ef:a0:8a:93:ae:7e:71:a1:58:47:d7:fa:96:1d: b9:bd:cb:77:7d:bb:9c:eb:2d:12:69:78:c3:24:43:a0:7a:54: b5:a1:b3:9a:52:e8:b3:8c:a1:c8:ac:00:92:09:c0:9c:7a:7c: 55:cf:51:08:fc:3c:a9:19:d7:56:4b:67:47:d3:b1:e0:2e:90: 18:4b:bb:6f:dd:05:e2:6c:f7:87:48:74:75:44:78:bc:16:88: 81:44:c7:a6:82:75:aa:c2:a3:94:20:d7:07:d5:2e:a8:ab:ee: 48:65:7e:5a:e8:9d:8c:85:6a:5a:52:e9:96:da:ca:b4:3a:cf: 30:5b:17:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjUxMDE4MjMzODEwWhcNMjUxMDI1MjMzODEwWjAYMRYwFAYD VQQDEw02OGY0MjRlMi0yNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9RDIO8xT0UQ6a5RKCiWrosPKf+F/LDoONWvzoCnG+FKxS3hqvf5iGwv/aLap vMSIW3uIBDWwOpTYLF8OY1rlJN5CZGb3rWQUppodQ4C3ve+TmOczDRlaoGDnRWBX +Kv7QTPtoFZigzK9BdvMy4BYx7Lq86kdhfJR/T6cvgOC1COURIsDAGDWju/iubO+ ANjDnuhSQoM0MZdFWHbOcrabZgQKdaj7Os3EbLJYgq3a+kobYh8fvKtCYBMY3GiZ zJ66wEdskpieIGg5I6P2kQ8P+V6JNJ1UXu9PlEsT6j60+PkRNc7+CPX1OIbKiV2Z C7jOEckWuW+UTOyBRCRdnUwkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdxExVP IGKoNCgFpQExuDPsZCAVMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwkhaUjH/m2qdP4i1Xr1b9XmgPV+4dlxbz4lHpqL+N9VF74ok0r5mc Bn1v05zP78YQ485iD7NtE+L5wRug+OmQZQpeCX1dMua/9BtfuzwGJN9YtOzEarA0 B0HAOgvx4QFUzKc4ZhJTKSOnKkCol/UJB8RsU7uEjhrvbNY85obQw1hY76CKk65+ caFYR9f6lh25vct3fbuc6y0SaXjDJEOgelS1obOaUuizjKHIrACSCcCcenxVz1EI /DypGddWS2dH07HgLpAYS7tv3QXibPeHSHR1RHi8FoiBRMemgnWqwqOUINcH1S6o q+5IZX5a6J2MhWpaUumW2sq0Os8wWxdw -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:42 2025 by rpki-client