$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: iHNNxtmTlSU6CGMDCa3WIeSOAExyf6MPiheGtOmHHRM= Subject key identifier: 4A:15:BB:1E:36:D4:57:36:23:B9:86:22:68:EE:87:4D:1B:02:FB:98 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 09B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 09AE Signing time: Mon 20 Oct 2025 20:50:54 +0000 Manifest this update: Mon 20 Oct 2025 20:50:53 +0000 Manifest next update: Mon 27 Oct 2025 20:50:53 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: 8mz06ifTOHrIIAbhG9+dw6ieDddVFWCju4E0hR+H/Ec=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Oct 20 20:50:53 2025 GMT Not After : Oct 27 20:50:53 2025 GMT Subject: CN=68f6a0ad-b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:d1:db:f4:f1:cf:9c:4c:b2:e3:6d:e7:93: 60:18:53:4d:1b:d5:6e:c1:4f:37:3f:ba:cf:3f:1b: 0e:2b:3e:65:cd:3a:86:01:ab:81:16:34:2a:73:56: 32:63:fd:e7:d7:93:13:2d:c0:fb:bd:f9:27:5f:d7: 73:15:fe:a2:b7:a1:83:a7:e3:e3:d5:71:25:33:ff: ae:6b:72:e6:f8:58:65:b1:22:4b:63:d5:43:b5:62: 30:e7:29:0d:28:4c:2e:f8:2c:7f:48:e2:23:39:7b: c2:d0:9e:ad:46:11:08:a1:03:8a:12:ff:db:74:cf: 6b:6d:83:4e:83:eb:b6:4e:8e:67:a6:9b:ef:4d:d7: 12:3c:6f:c1:1d:54:02:28:45:a2:42:4b:66:76:14: 53:68:65:c5:85:7b:92:ae:c2:4d:37:fe:27:fd:ef: 5f:c1:3c:d3:d8:cf:af:d9:6f:04:a6:55:c8:03:58: 72:4f:02:e5:04:3a:12:54:85:27:69:5b:40:a6:fc: ed:d9:f8:fb:53:5e:3e:06:61:4d:35:ed:95:3a:ca: 89:4a:8a:b8:70:b4:5f:87:3f:dd:5c:26:d8:ba:4c: 0a:dd:d8:b2:c7:02:9f:ba:a7:44:68:02:56:f2:ca: 78:9b:c4:83:24:6e:72:5e:51:6e:0b:5f:5b:6f:eb: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:BB:1E:36:D4:57:36:23:B9:86:22:68:EE:87:4D:1B:02:FB:98 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a9:a6:23:d9:dd:fc:3a:a2:50:49:00:12:c9:75:03:c9:3a: 53:24:50:55:bf:7a:27:ff:f0:3b:eb:f9:81:b0:72:94:72:97: 32:96:3b:a7:bf:d5:e4:e5:a3:b5:69:80:e8:1a:e2:e2:6c:65: d8:13:0a:5f:cf:e2:8e:1d:24:76:62:d6:de:8e:38:90:8d:7d: 3e:cf:ed:3b:1d:d5:b7:a6:1c:d9:01:78:1e:fc:85:ab:9b:8b: 23:15:a7:14:03:71:65:80:6b:b7:96:ac:fe:60:82:77:f1:f9: be:0f:ee:68:1a:42:92:28:2c:49:c9:ab:63:b8:c0:c0:3d:4e: 08:b0:4d:dc:48:6d:f7:0d:2a:06:61:84:58:bb:f0:c4:a5:d7: 96:2e:39:95:0d:72:3b:4b:b7:16:a6:44:cb:4b:0a:b6:48:2c: cc:75:47:95:9e:7a:04:8a:21:f2:e9:2f:8d:b4:83:e9:9a:1b: 4f:b9:2a:60:65:4d:ef:2e:2f:c3:99:8c:95:18:a3:85:bd:83: 26:76:6c:90:40:a9:50:b8:8c:30:bd:00:64:b8:9a:f8:3a:d8: c4:52:de:7c:01:f9:62:4a:fa:ed:bc:f5:87:04:2c:18:cc:62: cf:22:d3:9b:44:f7:21:33:a5:bc:0e:6e:1a:1c:6a:d6:6b:e0: 42:f9:af:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUxMDIwMjA1MDUzWhcNMjUxMDI3MjA1MDUzWjAYMRYwFAYD VQQDEw02OGY2YTBhZC1iMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnzR2/Txz5xMsuNt55NgGFNNG9VuwU83P7rPPxsOKz5lzTqGAauBFjQqc1Yy Y/3n15MTLcD7vfknX9dzFf6it6GDp+Pj1XElM/+ua3Lm+FhlsSJLY9VDtWIw5ykN KEwu+Cx/SOIjOXvC0J6tRhEIoQOKEv/bdM9rbYNOg+u2To5nppvvTdcSPG/BHVQC KEWiQktmdhRTaGXFhXuSrsJNN/4n/e9fwTzT2M+v2W8EplXIA1hyTwLlBDoSVIUn aVtApvzt2fj7U14+BmFNNe2VOsqJSoq4cLRfhz/dXCbYukwK3diyxwKfuqdEaAJW 8sp4m8SDJG5yXlFuC19bb+t6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoVux42 1Fc2I7mGImjuh00bAvuYMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByqaYj2d38OqJQSQASyXUDyTpTJFBVv3on//A76/mBsHKUcpcyljun v9Xk5aO1aYDoGuLibGXYEwpfz+KOHSR2YtbejjiQjX0+z+07HdW3phzZAXge/IWr m4sjFacUA3FlgGu3lqz+YIJ38fm+D+5oGkKSKCxJyatjuMDAPU4IsE3cSG33DSoG YYRYu/DEpdeWLjmVDXI7S7cWpkTLSwq2SCzMdUeVnnoEiiHy6S+NtIPpmhtPuSpg ZU3vLi/DmYyVGKOFvYMmdmyQQKlQuIwwvQBkuJr4OtjEUt58AfliSvrtvPWHBCwY zGLPItObRPchM6W8Dm4aHGrWa+BC+a8F -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:48 2025 by rpki-client