$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: dVwn5OkzW+PjZsvIfPnsNsUGqRAAot7ir5F/fmkVKT0= Subject key identifier: EF:66:61:DA:66:25:52:92:57:AB:69:27:28:27:BB:96:37:31:61:C7 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0DED Signing time: Sat 18 Oct 2025 18:31:09 +0000 Manifest this update: Sat 18 Oct 2025 18:31:09 +0000 Manifest next update: Sat 25 Oct 2025 18:31:09 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: yT2pOGsci/eWgC8jS0UznHvoCtwiP1rNwISyeMK72i4=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Oct 18 18:31:09 2025 GMT Not After : Oct 25 18:31:09 2025 GMT Subject: CN=68f3dced-a47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:48:ee:58:60:0a:98:1f:63:39:65:75:6d: 0b:7b:26:65:df:f4:c5:a0:05:5d:6f:d9:74:81:e0: 37:d5:a6:06:9b:39:c1:e2:66:c3:9c:f1:22:34:8e: 01:0c:92:c1:88:44:38:e5:08:dd:f7:33:cc:68:49: d4:d9:20:6b:52:85:b6:87:33:71:35:e6:48:42:32: e5:82:b5:a2:71:55:44:5f:25:57:2e:8f:95:c5:19: d6:04:f9:d6:b8:37:f3:30:03:5a:43:18:9d:eb:01: 14:76:9f:0f:7e:cc:89:03:18:7a:5b:cc:e5:37:8e: 59:46:8e:d7:5c:e9:8e:61:b2:6f:23:df:c9:11:58: 64:d5:6a:f4:27:2d:2f:9e:bb:53:14:ca:28:cd:7c: d0:ba:c6:e4:6f:99:b2:eb:3e:e5:7d:86:26:c5:aa: a2:a7:a1:87:d3:9c:70:00:b9:d7:eb:c6:65:45:23: 7e:75:a5:f9:aa:bb:fe:76:d5:b7:f2:df:0e:73:39: 2b:73:a7:0e:07:ba:98:5e:5f:aa:cb:27:50:a1:db: 74:6e:1d:c0:45:7d:22:83:ab:02:fa:be:6e:0b:d7: 39:e5:64:b2:31:23:f0:2c:10:e8:c5:20:83:d6:70: a1:f0:84:b3:c8:b0:17:da:03:35:ec:33:c5:22:16: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:61:DA:66:25:52:92:57:AB:69:27:28:27:BB:96:37:31:61:C7 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:2d:44:ce:36:2f:ab:e5:9d:25:48:70:a1:93:20:b6:68: 2a:74:33:67:c1:ea:a1:00:9f:2d:60:44:52:dc:32:dc:8c:66: 89:18:40:5c:8b:6e:2f:12:cf:83:a9:87:67:01:67:f5:eb:62: 3e:31:e6:85:65:9b:82:e0:eb:b1:a6:c4:8d:0e:d8:78:04:4f: 11:b2:f4:16:c2:bf:27:01:74:83:6b:1a:07:e3:ef:60:21:35: 22:ce:0b:2f:20:8d:b3:25:c5:61:90:87:91:61:f6:bc:32:68: 50:b3:c0:05:a8:e0:66:37:82:d0:4a:53:f8:89:c1:94:f6:2c: db:56:03:80:97:79:33:47:5a:67:ed:9e:7a:32:27:d2:64:b7: ab:77:bd:4f:cc:f5:47:54:3e:ad:6d:65:2e:bb:e8:2f:77:e4: 86:0c:b3:3d:25:0a:49:77:5c:73:f9:8d:97:dc:fc:f7:1a:b9: f9:11:97:a4:c7:c3:a5:73:49:52:db:88:8d:c5:1a:4c:17:20: 63:94:68:c8:1e:bb:f1:f1:17:50:7c:2b:f7:c0:f3:ef:85:70: 89:27:8d:e3:33:77:d9:32:dc:85:d0:13:c1:8f:0f:e9:6d:fc: 02:3c:7d:6b:b2:c0:a6:a4:c2:21:ea:d3:1c:06:ef:d6:37:6e: b3:3b:f9:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUxMDE4MTgzMTA5WhcNMjUxMDI1MTgzMTA5WjAYMRYwFAYD VQQDEw02OGYzZGNlZC1hNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIBI7lhgCpgfYzlldW0LeyZl3/TFoAVdb9l0geA31aYGmznB4mbDnPEiNI4B DJLBiEQ45Qjd9zPMaEnU2SBrUoW2hzNxNeZIQjLlgrWicVVEXyVXLo+VxRnWBPnW uDfzMANaQxid6wEUdp8PfsyJAxh6W8zlN45ZRo7XXOmOYbJvI9/JEVhk1Wr0Jy0v nrtTFMoozXzQusbkb5my6z7lfYYmxaqip6GH05xwALnX68ZlRSN+daX5qrv+dtW3 8t8Oczkrc6cOB7qYXl+qyydQodt0bh3ARX0ig6sC+r5uC9c55WSyMSPwLBDoxSCD 1nCh8ISzyLAX2gM17DPFIhblPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9mYdpm JVKSV6tpJygnu5Y3MWHHMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAinS1EzjYvq+WdJUhwoZMgtmgqdDNnweqhAJ8tYERS3DLcjGaJGEBc i24vEs+DqYdnAWf162I+MeaFZZuC4OuxpsSNDth4BE8RsvQWwr8nAXSDaxoH4+9g ITUizgsvII2zJcVhkIeRYfa8MmhQs8AFqOBmN4LQSlP4icGU9izbVgOAl3kzR1pn 7Z56MifSZLerd71PzPVHVD6tbWUuu+gvd+SGDLM9JQpJd1xz+Y2X3Pz3Grn5EZek x8Olc0lS24iNxRpMFyBjlGjIHrvx8RdQfCv3wPPvhXCJJ43jM3fZMtyF0BPBjw/p bfwCPH1rssCmpMIh6tMcBu/WN26zO/k2 -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:07 2025 by rpki-client