$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: VxwDYWSQRAbhPsmjTG4AJzq4lt+g/I2ShW4ahC/TnVg= Subject key identifier: 68:0E:2A:27:A3:2B:15:E0:82:B2:38:99:9D:C7:19:62:E5:D6:79:80 Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 020F Signing time: Sun 19 Oct 2025 04:34:15 +0000 Manifest this update: Sun 19 Oct 2025 04:34:15 +0000 Manifest next update: Sun 26 Oct 2025 04:34:15 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: rG+L+ob5Q7hT8p0Qf71bU2DNAuLI0N/COYkwv9f6vjc=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: GXQfXFZ8jth0bdOi6DqHjN+LeeVGl2tXIJaBhAaaOn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: Oct 19 04:34:15 2025 GMT Not After : Oct 26 04:34:15 2025 GMT Subject: CN=68f46a47-3229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:12:48:05:59:a6:1e:b2:7a:3c:06:da:07: 1e:81:14:93:cb:63:94:94:b6:55:3b:3d:16:94:a0: 5c:20:cc:19:74:e2:37:0c:b6:eb:5f:f7:50:52:77: 28:59:52:97:6e:e7:2e:be:88:81:ac:49:33:f6:2a: f7:06:12:f9:ee:f8:22:d4:f8:f7:f0:a4:42:2b:84: 37:13:2c:0c:61:77:95:8c:60:3d:94:3c:f4:05:4e: df:50:82:c5:30:61:95:ae:60:06:1c:2b:6a:44:d1: 4d:4e:d0:af:90:69:5c:7f:fc:05:42:14:f2:7f:34: 74:81:ff:38:c5:aa:5d:ea:56:05:35:f1:7d:e5:79: d7:71:83:74:5a:cb:a4:ad:f3:f0:48:12:00:4b:e6: 84:ac:9f:74:b7:05:f7:13:48:19:30:1b:ac:4e:e6: a6:89:70:0f:10:63:91:28:d8:10:26:f6:77:74:a0: 7b:d1:1c:75:a6:d4:c7:67:d8:02:70:99:f3:67:26: a2:21:f0:cb:17:20:a1:23:a2:1a:d2:7f:2e:63:58: 73:fe:16:4c:a8:6c:e7:a4:9e:3d:8a:88:6d:cd:c8: 90:b7:30:b9:f4:ed:42:4e:d8:f2:84:d3:9b:c2:39: c5:b7:e3:19:47:a7:4c:4b:43:2d:2f:76:6d:89:4b: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0E:2A:27:A3:2B:15:E0:82:B2:38:99:9D:C7:19:62:E5:D6:79:80 X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:6f:83:83:1a:e7:b0:8b:f1:0e:31:f9:b5:0e:89:02:fd:89: f1:f8:73:2f:a9:68:83:b5:0e:40:3b:68:0f:92:99:84:34:0a: 69:75:92:d8:3d:c7:a6:8f:f4:a7:1f:e9:ca:81:95:f7:c3:70: ea:95:79:08:dc:de:55:6a:ed:96:f4:f0:87:35:b1:72:a6:d5: a9:db:5f:e5:d1:bc:a0:60:6b:20:61:55:48:53:7f:ef:da:69: 4f:ab:30:ec:0b:4b:b6:e6:81:2e:ca:a4:18:e3:b2:50:07:04: 29:35:34:04:b8:8d:df:29:1e:f7:a9:da:bc:d3:39:46:e5:c3: 41:0d:5b:56:42:82:73:32:30:cb:c5:94:39:78:16:db:82:f8: cd:3c:10:f7:07:ec:2a:20:a8:10:ce:ea:4e:ff:9c:9a:0b:58: f6:a5:b5:d1:4d:40:12:84:9e:b1:da:29:4d:9d:f0:ee:41:af: 9f:a8:56:d9:ea:58:44:17:70:57:ca:f4:9a:fd:93:29:a2:e4: 1a:3c:63:9e:86:d5:6d:a9:8f:94:ab:0b:8a:74:a7:49:d5:83: 4c:17:13:d4:8e:c3:93:12:b4:f2:63:fb:4a:d9:22:9f:ae:2d: ce:8a:a7:07:75:f3:38:e5:d2:96:95:c0:fe:ec:d6:10:bc:f6: 0f:21:da:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUxMDE5MDQzNDE1WhcNMjUxMDI2MDQzNDE1WjAYMRYwFAYD VQQDEw02OGY0NmE0Ny0zMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxISSAVZph6yejwG2gcegRSTy2OUlLZVOz0WlKBcIMwZdOI3DLbrX/dQUnco WVKXbucuvoiBrEkz9ir3BhL57vgi1Pj38KRCK4Q3EywMYXeVjGA9lDz0BU7fUILF MGGVrmAGHCtqRNFNTtCvkGlcf/wFQhTyfzR0gf84xapd6lYFNfF95XnXcYN0Wsuk rfPwSBIAS+aErJ90twX3E0gZMBusTuamiXAPEGORKNgQJvZ3dKB70Rx1ptTHZ9gC cJnzZyaiIfDLFyChI6Ia0n8uY1hz/hZMqGznpJ49iohtzciQtzC59O1CTtjyhNOb wjnFt+MZR6dMS0MtL3ZtiUseOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgOKiej KxXggrI4mZ3HGWLl1nmAMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBb4ODGuewi/EOMfm1DokC/Ynx+HMvqWiDtQ5AO2gPkpmENAppdZLY Pcemj/SnH+nKgZX3w3DqlXkI3N5Vau2W9PCHNbFyptWp21/l0bygYGsgYVVIU3/v 2mlPqzDsC0u25oEuyqQY47JQBwQpNTQEuI3fKR73qdq80zlG5cNBDVtWQoJzMjDL xZQ5eBbbgvjNPBD3B+wqIKgQzupO/5yaC1j2pbXRTUAShJ6x2ilNnfDuQa+fqFbZ 6lhEF3BXyvSa/ZMpouQaPGOehtVtqY+UqwuKdKdJ1YNMFxPUjsOTErTyY/tK2SKf ri3OiqcHdfM45dKWlcD+7NYQvPYPIdrB -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:13 2025 by rpki-client