$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json) Hash identifier: oQCZLjTG3802j88eHwpYorkyIpz39nvKn5RVF+66PaU= Subject key identifier: 7C:8F:7A:CF:50:83:3E:14:7B:AD:B5:A5:E4:EA:35:A0:E2:E5:6C:77 Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7 Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7 Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft Manifest number: 09DF Signing time: Mon 20 Oct 2025 20:44:32 +0000 Manifest this update: Mon 20 Oct 2025 20:44:31 +0000 Manifest next update: Mon 27 Oct 2025 20:44:31 +0000 Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: 0/iTTxnnU7r4M5+l5KtSycsfEgzkFKS9F9S33+jc2Ms=) 2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: ZKzXf/DOzsl1EKQee5k9LA/isQewfxrXPq7TVjAdiX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7 Validity Not Before: Oct 20 20:44:31 2025 GMT Not After : Oct 27 20:44:31 2025 GMT Subject: CN=68f69f2f-f1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:06:62:8b:1d:92:b6:d5:74:d5:7d:d2:2c: 08:09:0c:77:46:57:00:66:96:cb:f7:dc:60:c1:ca: e2:64:96:46:ae:bb:97:75:b5:dc:10:da:4d:84:80: 5c:8f:81:0f:06:05:6b:73:64:b3:3b:e5:33:94:d7: 7f:9e:08:78:1a:76:3a:ec:79:9e:68:9d:35:66:73: ee:9c:1e:f3:fa:fd:33:1c:95:b8:80:52:f1:ef:d5: 03:a4:61:75:64:73:05:fa:b6:0b:ae:3b:e0:5d:b5: 88:47:a2:e3:d1:4e:3a:50:b8:5e:35:2e:6c:a2:02: 23:41:b7:57:d6:ff:28:82:e8:45:1b:23:ec:63:66: b0:3a:e4:4e:a1:61:96:29:c8:6d:d5:8e:3a:21:02: 0c:1f:d7:3d:38:c9:66:78:90:eb:7f:2d:ea:24:b6: 0f:67:65:9d:c3:ef:f2:30:9d:25:f3:11:9a:85:ac: 97:e6:a8:e7:b1:fe:13:56:f0:b0:48:20:6f:c5:8f: af:67:6c:83:8c:ad:14:3c:53:5a:5a:aa:52:f7:b7: 77:d0:fd:3b:c0:9d:0a:85:0a:44:5f:1b:e0:57:04: 51:24:73:4e:79:93:dc:f9:85:51:79:55:0c:5f:56: 39:f7:d7:03:93:1f:3b:33:76:f8:45:c8:1c:6a:da: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8F:7A:CF:50:83:3E:14:7B:AD:B5:A5:E4:EA:35:A0:E2:E5:6C:77 X509v3 Authority Key Identifier: keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ec:fd:86:ce:bb:22:63:17:8e:70:ab:ae:6f:49:a8:e1:82: b6:b6:37:13:61:72:e0:fa:ab:dc:fd:e7:0a:0f:f2:ca:7f:11: ea:5b:52:e9:fc:1f:a0:be:b3:b4:78:73:7f:f7:04:ee:ef:2e: a5:75:3d:f1:ea:f9:64:bd:d8:12:1e:48:12:5b:ad:c2:9a:8f: f6:30:8c:78:9c:da:a1:97:6d:60:36:5d:61:67:de:63:be:38: 1c:ff:ab:66:3d:f1:46:9c:9b:c2:20:ba:4c:65:9e:bb:de:d8: 37:d9:5d:b9:38:2e:87:81:14:4b:0a:4e:48:aa:da:4c:73:5c: c7:03:17:15:e1:9c:8b:88:52:48:98:0e:cf:61:39:60:a1:c7: e6:08:86:4c:90:35:1c:3c:dd:97:0c:64:ec:dc:0b:e2:73:6e: cf:65:5c:e4:27:64:07:e2:26:c9:2a:38:52:35:74:d5:9c:68: 7d:16:9e:02:da:0f:77:ca:7e:0a:0a:b9:84:bc:1c:bb:47:52: 32:fb:4d:f2:9d:e4:97:65:83:30:2f:e0:45:9e:33:34:88:ba: 4c:0b:0a:48:6a:d8:d2:94:6e:18:1f:93:89:03:34:e8:f6:b2: 14:b9:2c:20:1c:fe:a6:be:44:e5:31:3b:7d:a2:a9:0c:12:4c: 43:75:31:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGNkMxMTAvBgNVBAUTKEVEQUYxRTlBNzlEOUZFQ0IxMDc4ODNBRkQzNzU3RkE4 RjcwQTMyRDcwHhcNMjUxMDIwMjA0NDMxWhcNMjUxMDI3MjA0NDMxWjAYMRYwFAYD VQQDEw02OGY2OWYyZi1mMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5F8GYosdkrbVdNV90iwICQx3RlcAZpbL99xgwcriZJZGrruXdbXcENpNhIBc j4EPBgVrc2SzO+UzlNd/ngh4GnY67HmeaJ01ZnPunB7z+v0zHJW4gFLx79UDpGF1 ZHMF+rYLrjvgXbWIR6Lj0U46ULheNS5sogIjQbdX1v8oguhFGyPsY2awOuROoWGW Kcht1Y46IQIMH9c9OMlmeJDrfy3qJLYPZ2Wdw+/yMJ0l8xGahayX5qjnsf4TVvCw SCBvxY+vZ2yDjK0UPFNaWqpS97d30P07wJ0KhQpEXxvgVwRRJHNOeZPc+YVReVUM X1Y599cDkx87M3b4RcgcatqVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyPes9Q gz4Ue621peTqNaDi5Wx3MB8GA1UdIwQYMBaAFO2vHpp52f7LEHiDr9N1f6j3CjLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY2Qy85RTMxRjNCMjhB QjMxMUVBOTNBNkJBM0VDNEY5QUUwMi83YThlbW5uWl9zc1FlSU92MDNWX3FQY0tN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhOGVtbm5aX3NzUWVJT3YwM1ZfcVBjS010Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkY2Qy85RTMxRjNCMjhBQjMxMUVBOTNBNkJBM0VDNEY5QUUwMi83YThlbW5uWl9z c1FlSU92MDNWX3FQY0tNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA97P2GzrsiYxeOcKuub0mo4YK2tjcTYXLg+qvc/ecKD/LKfxHqW1Lp /B+gvrO0eHN/9wTu7y6ldT3x6vlkvdgSHkgSW63Cmo/2MIx4nNqhl21gNl1hZ95j vjgc/6tmPfFGnJvCILpMZZ673tg32V25OC6HgRRLCk5IqtpMc1zHAxcV4ZyLiFJI mA7PYTlgocfmCIZMkDUcPN2XDGTs3Avic27PZVzkJ2QH4ibJKjhSNXTVnGh9Fp4C 2g93yn4KCrmEvBy7R1Iy+03yneSXZYMwL+BFnjM0iLpMCwpIatjSlG4YH5OJAzTo 9rIUuSwgHP6mvkTlMTt9oqkMEkxDdTHM -----END CERTIFICATE-----Generated at Tue Oct 21 02:09:15 2025 by rpki-client