$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: zOnGujAJHPo0hNmLCl4b/1ruob+h6TIDpha28BqPlYw= Subject key identifier: 47:4E:C7:57:87:9F:1C:6D:B4:F5:D4:5B:18:F3:F2:7E:1A:B7:E0:9E Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 07A5 Signing time: Sat 18 Oct 2025 22:44:48 +0000 Manifest this update: Sat 18 Oct 2025 22:44:47 +0000 Manifest next update: Sat 25 Oct 2025 22:44:47 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: A5hfmWlczqNIcdB/RLJXSHmGR9J/JTQOWAXSCTFUUyQ=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Oct 18 22:44:47 2025 GMT Not After : Oct 25 22:44:47 2025 GMT Subject: CN=68f41860-2e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:51:97:64:8c:cc:81:aa:e6:a8:3e:f4:88: de:f1:47:68:ca:b6:4d:c8:d2:af:ed:26:6d:2e:e2: 85:7c:ca:b4:60:9c:4d:e9:fc:ef:84:74:e2:a4:a9: ab:d8:e4:08:d7:9f:b0:94:42:8d:07:00:b8:07:6e: ba:d9:8a:d5:86:ee:0f:27:b8:5d:b7:d2:dd:ab:ff: 5e:46:d9:ee:cb:d9:ce:1f:20:87:cd:22:4f:51:ea: d6:f6:64:c6:36:d4:59:dc:3c:85:0e:5f:ff:5c:e2: 85:94:d9:92:71:fa:45:75:0a:2f:42:8b:02:9d:f1: 66:5f:38:45:6c:3d:d2:93:9b:e3:94:5b:11:86:9a: 74:28:8d:49:a8:81:76:7f:49:5a:0f:b4:cd:b7:7b: 08:2c:d6:83:a5:d7:d4:dc:77:ba:0c:15:f7:da:27: 53:76:18:34:71:19:0c:49:19:e6:8a:02:20:eb:d8: 69:b6:26:f8:d9:e7:ad:ca:0a:ef:ad:fa:1e:41:32: 52:96:5a:e2:0a:f2:5e:85:fa:af:5a:d3:84:39:93: c1:62:f3:27:fb:05:98:2c:f9:e5:94:96:28:72:dd: 51:7c:94:ec:be:57:10:07:de:55:ec:7d:72:06:bc: 8a:02:45:25:f2:3d:ef:b0:e4:b8:f4:ca:75:ea:b5: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4E:C7:57:87:9F:1C:6D:B4:F5:D4:5B:18:F3:F2:7E:1A:B7:E0:9E X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:e3:2f:e6:e2:22:4e:3f:3b:13:8c:43:55:d3:fe:ec:f0: 07:25:4a:65:28:5a:f5:d5:9e:b0:c9:c8:ea:b7:20:41:6b:2f: f1:b2:26:05:59:04:0d:b7:0f:24:39:e7:48:d4:f9:ad:4e:d2: 6d:c5:3c:38:39:41:00:98:12:f1:e0:57:65:7e:d8:b6:02:f8: 8e:9e:25:bc:4e:4f:f8:b9:7c:dc:38:55:45:67:40:4c:ac:fb: 6e:49:48:e9:cd:9f:7e:a6:f5:b6:e4:28:64:55:ab:92:94:39: 1d:59:c1:c8:00:bb:45:b0:73:10:08:f2:2e:e4:d8:84:05:61: 58:d2:fb:0c:07:15:38:2e:e7:cd:cb:64:27:55:30:11:48:96: a9:b0:b5:04:16:62:08:88:2d:0f:f1:70:32:95:fa:ae:2a:99: 9a:22:c6:d9:ed:e0:36:e1:3b:98:f7:3a:03:73:8f:ec:55:22: 68:e9:82:bd:18:f7:ca:ee:95:1c:c5:1f:97:35:03:a8:20:4f: f3:f6:2a:3c:19:13:b5:d8:85:79:4c:5f:e4:c9:46:5f:4d:6a: a7:c6:31:00:fc:15:3b:5a:ee:49:9d:7a:84:0e:5d:3a:4b:64: 7f:67:15:5d:35:e5:b5:ad:b8:5f:28:56:7b:67:3a:24:e6:84: 28:83:ac:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUxMDE4MjI0NDQ3WhcNMjUxMDI1MjI0NDQ3WjAYMRYwFAYD VQQDEw02OGY0MTg2MC0yZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yRRl2SMzIGq5qg+9Ije8UdoyrZNyNKv7SZtLuKFfMq0YJxN6fzvhHTipKmr 2OQI15+wlEKNBwC4B2662YrVhu4PJ7hdt9Ldq/9eRtnuy9nOHyCHzSJPUerW9mTG NtRZ3DyFDl//XOKFlNmScfpFdQovQosCnfFmXzhFbD3Sk5vjlFsRhpp0KI1JqIF2 f0laD7TNt3sILNaDpdfU3He6DBX32idTdhg0cRkMSRnmigIg69hptib42eetygrv rfoeQTJSllriCvJehfqvWtOEOZPBYvMn+wWYLPnllJYoct1RfJTsvlcQB95V7H1y BryKAkUl8j3vsOS49Mp16rV3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdOx1eH nxxttPXUWxjz8n4at+CeMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/2uMv5uIiTj87E4xDVdP+7PAHJUplKFr11Z6wycjqtyBBay/xsiYF WQQNtw8kOedI1PmtTtJtxTw4OUEAmBLx4Fdlfti2AviOniW8Tk/4uXzcOFVFZ0BM rPtuSUjpzZ9+pvW25ChkVauSlDkdWcHIALtFsHMQCPIu5NiEBWFY0vsMBxU4LufN y2QnVTARSJapsLUEFmIIiC0P8XAylfquKpmaIsbZ7eA24TuY9zoDc4/sVSJo6YK9 GPfK7pUcxR+XNQOoIE/z9io8GRO12IV5TF/kyUZfTWqnxjEA/BU7Wu5JnXqEDl06 S2R/ZxVdNeW1rbhfKFZ7Zzok5oQog6zm -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:35 2025 by rpki-client