$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: T3TvD/O6LH+1AVIMTXcbsjPrWTPxjxEd3nmv/iYqrds= Subject key identifier: 8E:18:93:3E:DC:26:B2:14:23:B4:E7:16:A9:23:41:F3:74:6B:00:16 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 0520 Signing time: Mon 20 Oct 2025 15:30:56 +0000 Manifest this update: Mon 20 Oct 2025 15:30:55 +0000 Manifest next update: Mon 27 Oct 2025 15:30:55 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: fcQhPtRI6tQbT+9mPURrM9S5PpwmCa0vOpgcOMJIHLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Oct 20 15:30:55 2025 GMT Not After : Oct 27 15:30:55 2025 GMT Subject: CN=68f655af-3cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:54:ba:ff:67:36:83:2d:46:07:87:b7:07: 1a:55:0b:79:86:ba:6b:0e:bf:99:94:df:0a:d6:3b: 7b:89:10:1d:b9:f5:9a:f7:77:9b:f7:33:6d:8e:8b: 9c:ab:a8:f1:53:b3:37:8a:26:97:cf:49:0f:3b:44: 54:39:c0:61:94:b1:96:33:7e:05:8e:7a:42:59:84: 2d:83:d7:08:21:8c:65:63:bd:93:24:7a:57:02:f3: 04:cf:eb:9c:ab:a2:e6:c8:9e:e7:c0:bd:84:bd:12: 29:80:63:f5:bd:28:28:3c:c8:6c:e3:20:71:88:29: 27:01:47:3c:0d:75:46:05:d7:de:0e:a7:82:24:76: 9e:63:dd:eb:ea:b9:ea:e5:a5:d4:a2:9f:ae:ac:9a: 80:61:77:03:17:f5:02:98:99:cf:7a:51:b1:f4:3a: d4:e9:75:f2:ba:49:77:28:58:6b:26:a2:ba:8d:2e: 97:f3:59:bf:0b:a0:e4:ec:e1:a8:2f:95:b9:a8:de: 95:be:11:26:9b:69:cb:94:a6:dd:53:ac:90:36:96: 78:5f:ae:c1:a3:10:01:ae:f0:e8:3a:23:49:b3:36: 7e:21:7f:fb:d0:4e:38:a1:19:25:cd:5c:d7:ed:2b: ff:9d:ba:49:a5:dd:3f:f0:a3:b3:9c:e9:b3:22:eb: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:18:93:3E:DC:26:B2:14:23:B4:E7:16:A9:23:41:F3:74:6B:00:16 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e9:84:f7:f0:35:98:21:81:ff:29:d8:c1:2b:f2:c7:6a:37: 2f:5e:21:64:07:ec:db:c6:f5:a8:f2:fa:f7:2b:5b:b9:59:f2: a4:3f:5a:c3:08:73:3b:14:25:06:27:3d:fa:bc:38:df:30:13: 7f:4e:b0:f2:83:c1:be:81:c4:90:71:83:f2:55:f4:1f:67:83: fc:4d:08:7e:bf:e5:48:47:e8:3a:90:d0:06:4a:0d:b0:03:a5: 48:23:be:d0:69:b2:0b:10:2b:0f:9d:75:4d:d7:04:45:65:65: 32:ba:bc:9c:2c:84:0d:2f:92:1b:ec:e0:80:b2:6c:1c:62:b3: 92:c3:8f:6e:c7:b9:41:7d:9f:63:3f:cd:47:fa:b7:42:96:c0: 72:f5:d3:2a:d1:dc:27:e7:ad:1d:ab:d1:b1:15:83:98:76:c0: 5a:db:e1:7a:90:04:3b:84:2e:e6:ed:94:3e:8b:e1:58:bd:a8: 9c:e1:1b:1c:0d:4a:0b:21:ff:d1:31:3a:1b:38:9e:85:e4:1a: a5:11:a4:92:fc:f2:60:51:b2:5b:6c:28:d8:36:31:bb:82:2b: d3:ec:71:c8:40:04:ec:9a:45:99:07:2f:d1:83:72:3b:c0:34: 49:44:08:c7:f9:17:d0:17:ed:87:97:d6:aa:72:17:d6:9e:0c: 1b:32:fb:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUxMDIwMTUzMDU1WhcNMjUxMDI3MTUzMDU1WjAYMRYwFAYD VQQDEw02OGY2NTVhZi0zY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf5Uuv9nNoMtRgeHtwcaVQt5hrprDr+ZlN8K1jt7iRAdufWa93eb9zNtjouc q6jxU7M3iiaXz0kPO0RUOcBhlLGWM34FjnpCWYQtg9cIIYxlY72TJHpXAvMEz+uc q6LmyJ7nwL2EvRIpgGP1vSgoPMhs4yBxiCknAUc8DXVGBdfeDqeCJHaeY93r6rnq 5aXUop+urJqAYXcDF/UCmJnPelGx9DrU6XXyukl3KFhrJqK6jS6X81m/C6Dk7OGo L5W5qN6VvhEmm2nLlKbdU6yQNpZ4X67BoxABrvDoOiNJszZ+IX/70E44oRklzVzX 7Sv/nbpJpd0/8KOznOmzIuuVywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4Ykz7c JrIUI7TnFqkjQfN0awAWMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+6YT38DWYIYH/KdjBK/LHajcvXiFkB+zbxvWo8vr3K1u5WfKkP1rD CHM7FCUGJz36vDjfMBN/TrDyg8G+gcSQcYPyVfQfZ4P8TQh+v+VIR+g6kNAGSg2w A6VII77QabILECsPnXVN1wRFZWUyurycLIQNL5Ib7OCAsmwcYrOSw49ux7lBfZ9j P81H+rdClsBy9dMq0dwn560dq9GxFYOYdsBa2+F6kAQ7hC7m7ZQ+i+FYvaic4Rsc DUoLIf/RMTobOJ6F5BqlEaSS/PJgUbJbbCjYNjG7givT7HHIQATsmkWZBy/Rg3I7 wDRJRAjH+RfQF+2Hl9aqchfWngwbMvtT -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:34 2025 by rpki-client