$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json) Hash identifier: hDIhTPEn6mch3BNmUb2g8ZehZ3KcW/HCbsHWEP/TmFQ= Subject key identifier: 0B:AA:A2:73:88:BE:6D:41:E4:AB:AB:85:C0:FA:06:24:57:20:3D:DA Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft Manifest number: 0F Signing time: Sun 19 Oct 2025 11:33:28 +0000 Manifest this update: Sun 19 Oct 2025 11:33:27 +0000 Manifest next update: Sun 26 Oct 2025 11:33:27 +0000 Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: nsPqQ1oM4nF4B43glIFbK+aPr1rC9ZuclcCAaLvq4ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Validity Not Before: Oct 19 11:33:27 2025 GMT Not After : Oct 26 11:33:27 2025 GMT Subject: CN=68f4cc87-e161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:35:3f:8d:51:58:02:c1:af:9e:29:db:3f: 0d:4d:e6:d7:7d:a1:21:d9:f9:2d:2b:40:fd:d6:7f: 86:da:9a:f9:1a:b1:fb:08:22:77:be:fc:a1:24:70: 59:59:9d:b5:07:d0:66:13:3c:a8:d6:13:ec:85:5f: 98:8c:ea:2c:48:77:d7:f4:c8:f5:42:cd:01:e8:7d: bb:e9:cb:f6:bd:5d:ec:74:2b:53:7b:15:98:2f:3b: c4:8c:77:51:a1:8a:e8:30:7c:e9:85:fe:5e:1a:7d: 7e:b0:af:f3:a3:b7:61:2a:89:b4:7a:e1:bb:d4:09: d3:82:4e:b7:7c:fd:6a:7a:62:7a:02:66:f8:fc:97: 13:f8:1f:9e:3b:2a:34:4e:91:37:a9:05:32:10:ca: a6:e4:7c:fe:02:03:76:d8:f5:73:5b:44:31:36:5c: 33:2a:46:bf:e0:8a:5a:27:0f:05:80:b8:e6:c5:f2: 1d:48:86:9a:19:30:ff:90:67:5f:02:62:1f:7b:b7: e5:29:10:e0:96:cb:01:55:22:02:0d:bb:27:ce:65: f3:98:a3:ac:5a:8d:c8:6b:52:ad:7c:cc:0d:95:4b: 1b:c9:1f:77:d4:2b:8d:aa:06:9f:2b:19:e8:7b:24: 53:44:a9:fa:c4:38:4d:be:5a:09:9e:94:03:8f:2c: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AA:A2:73:88:BE:6D:41:E4:AB:AB:85:C0:FA:06:24:57:20:3D:DA X509v3 Authority Key Identifier: keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:49:53:b4:d3:51:ca:67:3f:7e:5c:d0:73:32:23:99:dd:1f: bd:e8:d5:b1:64:38:27:98:73:3f:18:b4:9a:1e:ca:f9:74:4a: 3d:03:0e:d4:f2:b4:98:dc:f2:8b:93:e8:cf:57:9d:f1:f4:c1: a0:f1:30:eb:ce:62:29:b0:b2:cc:0b:0d:84:cd:32:4e:97:f4: 00:d1:37:a6:5b:e5:5a:01:56:c2:7c:55:52:62:96:ad:7a:ec: 6f:4d:11:40:75:6d:97:a1:98:b2:7f:45:f5:65:a6:32:11:77: e2:3d:a1:03:09:d4:65:89:d7:71:ef:bd:40:5f:86:a8:2d:7d: e7:d5:57:81:fa:5b:f0:94:34:dd:a0:31:20:c5:7c:6a:f1:6f: 97:05:f1:39:cb:de:eb:83:bf:af:bb:37:4a:1c:c4:b9:53:b9: db:f8:38:d6:92:59:5c:f0:71:2f:f7:36:d1:e2:30:ff:a6:61: 8a:61:3e:22:db:3c:03:5a:26:41:00:05:c6:db:4f:a0:89:cf: 33:11:91:e3:9e:24:a8:77:02:17:26:36:df:f6:a3:e6:54:22: 97:9f:7a:16:7e:ec:e8:ad:30:b8:ed:a3:02:03:58:4c:00:a7: 84:18:f2:6c:dc:8a:54:2c:4e:99:72:e4:ae:ac:e5:eb:51:cb: 8c:e8:4d:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5 NDZEOUU5MjAeFw0yNTEwMTkxMTMzMjdaFw0yNTEwMjYxMTMzMjdaMBgxFjAUBgNV BAMTDTY4ZjRjYzg3LWUxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC59DU/jVFYAsGvninbPw1N5td9oSHZ+S0rQP3Wf4bamvkasfsIIne+/KEkcFlZ nbUH0GYTPKjWE+yFX5iM6ixId9f0yPVCzQHofbvpy/a9Xex0K1N7FZgvO8SMd1Gh iugwfOmF/l4afX6wr/Ojt2EqibR64bvUCdOCTrd8/Wp6YnoCZvj8lxP4H547KjRO kTepBTIQyqbkfP4CA3bY9XNbRDE2XDMqRr/gilonDwWAuObF8h1IhpoZMP+QZ18C Yh97t+UpEOCWywFVIgINuyfOZfOYo6xajchrUq18zA2VSxvJH3fUK42qBp8rGeh7 JFNEqfrEOE2+WgmelAOPLHyRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC6qic4i+ bUHkq6uFwPoGJFcgPdowHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5 WkU3TFZDY0hYc3BSdG5wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMNJU7TTUcpnP35c0HMyI5ndH73o1bFkOCeYcz8YtJoeyvl0Sj0DDtTy tJjc8ouT6M9XnfH0waDxMOvOYimwsswLDYTNMk6X9ADRN6Zb5VoBVsJ8VVJilq16 7G9NEUB1bZehmLJ/RfVlpjIRd+I9oQMJ1GWJ13HvvUBfhqgtfefVV4H6W/CUNN2g MSDFfGrxb5cF8TnL3uuDv6+7N0ocxLlTudv4ONaSWVzwcS/3NtHiMP+mYYphPiLb PANaJkEABcbbT6CJzzMRkeOeJKh3AhcmNt/2o+ZUIpefehZ+7OitMLjtowIDWEwA p4QY8mzcilQsTply5K6s5etRy4zoTaI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:22:34 2025 by rpki-client