$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: 3VSfzm27Bw4QPazN5yHESc1r4GhFM5OWBxDNfnLa9ZQ= Subject key identifier: 12:39:A5:AD:91:B4:CA:E5:C9:17:9F:D8:68:A0:CC:58:BA:77:8F:2C Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0ACC Signing time: Sat 18 Oct 2025 20:23:50 +0000 Manifest this update: Sat 18 Oct 2025 20:23:50 +0000 Manifest next update: Sat 25 Oct 2025 20:23:50 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: 59Q6083iiZ/S8LEKTr/gjYB0x6vroe9xM2XHXvuqNtg=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: Oct 18 20:23:50 2025 GMT Not After : Oct 25 20:23:50 2025 GMT Subject: CN=68f3f756-3a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:f6:5e:13:14:03:86:fc:16:da:fc:0a:dd: a9:b9:eb:fc:b1:76:e2:9f:c1:db:ff:92:cd:f0:fb: 22:4a:cf:98:39:09:a3:c4:1e:18:5e:f2:0c:ef:5a: 19:a2:b1:74:13:4d:aa:60:60:46:34:2e:6a:85:95: 95:9d:d0:c5:5f:12:30:56:64:72:9a:42:05:fd:a4: 79:fe:fd:8e:fe:12:bb:0c:88:99:c3:71:37:69:a6: 41:d3:85:c9:44:88:aa:33:25:77:4d:aa:bc:39:f3: fb:28:31:e4:45:64:6d:6b:ec:f6:b6:ef:df:69:7b: 8f:9d:41:eb:ee:9a:96:0a:4f:a6:00:77:c5:ba:de: 7e:9b:6f:10:3e:f9:62:e2:e4:de:e1:4f:b9:67:47: bd:0b:10:a2:68:c8:50:e0:c3:29:80:5a:92:b4:3d: 1b:67:4b:80:ec:0f:11:3e:7d:9d:27:44:59:5b:32: 35:3b:96:7b:a4:69:56:f2:97:e6:8f:86:41:98:65: b8:a7:f8:90:86:74:92:09:bb:42:d3:e6:b7:6c:ad: f5:94:a8:c5:69:7d:76:40:f1:24:b7:15:02:30:3d: 26:2f:2b:8d:70:b3:74:8b:90:ab:0d:7c:82:31:91: 77:ae:5d:fa:cd:7a:2f:ce:c8:07:32:b3:50:49:2c: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:39:A5:AD:91:B4:CA:E5:C9:17:9F:D8:68:A0:CC:58:BA:77:8F:2C X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:20:4d:2e:c7:0b:12:89:03:76:f5:82:dd:25:cf:38:47:99: 2a:86:18:c7:f2:70:17:20:5a:ba:ed:7d:77:3b:a5:70:da:19: 5a:d0:28:5b:cf:b0:7b:2f:05:e8:5b:0f:99:90:41:46:c3:24: cb:fa:e7:51:82:72:6a:a7:a0:13:98:08:e4:57:9c:3b:03:e4: 5e:68:f6:eb:48:ad:4f:38:33:9d:4d:ff:17:65:a4:00:57:43: 4a:48:65:82:fc:e0:9d:b5:4c:ee:44:d2:f0:3c:d5:68:3e:01: 53:0b:47:61:dd:1b:eb:f9:99:76:71:ee:b1:21:89:c5:1b:7d: 4c:f8:2b:65:02:69:81:9a:3c:2b:42:e5:b6:b8:1f:c4:26:4f: fe:2e:de:36:e2:48:bf:ac:42:2c:45:28:9c:e5:3a:cc:87:41: 56:6d:75:06:f8:28:74:c2:1b:c2:e5:09:2c:37:d4:ca:15:c1: bb:37:ab:79:3f:ea:34:46:fd:99:d6:71:6a:64:7c:4e:95:f2: 3a:24:42:58:94:6d:19:98:52:80:1c:66:27:c0:d5:3d:1a:ea: 4c:10:a3:b0:5b:0d:6f:a2:e8:96:f2:17:85:bd:2e:36:15:c6: 43:62:7c:b7:7d:36:7e:23:77:26:f1:83:51:4b:31:ee:b2:fc: ec:8a:62:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUxMDE4MjAyMzUwWhcNMjUxMDI1MjAyMzUwWjAYMRYwFAYD VQQDEw02OGYzZjc1Ni0zYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7r2XhMUA4b8Ftr8Ct2puev8sXbin8Hb/5LN8PsiSs+YOQmjxB4YXvIM71oZ orF0E02qYGBGNC5qhZWVndDFXxIwVmRymkIF/aR5/v2O/hK7DIiZw3E3aaZB04XJ RIiqMyV3Taq8OfP7KDHkRWRta+z2tu/faXuPnUHr7pqWCk+mAHfFut5+m28QPvli 4uTe4U+5Z0e9CxCiaMhQ4MMpgFqStD0bZ0uA7A8RPn2dJ0RZWzI1O5Z7pGlW8pfm j4ZBmGW4p/iQhnSSCbtC0+a3bK31lKjFaX12QPEktxUCMD0mLyuNcLN0i5CrDXyC MZF3rl36zXovzsgHMrNQSSzyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI5pa2R tMrlyRef2GigzFi6d48sMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWIE0uxwsSiQN29YLdJc84R5kqhhjH8nAXIFq67X13O6Vw2hla0Chb z7B7LwXoWw+ZkEFGwyTL+udRgnJqp6ATmAjkV5w7A+ReaPbrSK1PODOdTf8XZaQA V0NKSGWC/OCdtUzuRNLwPNVoPgFTC0dh3Rvr+Zl2ce6xIYnFG31M+CtlAmmBmjwr QuW2uB/EJk/+Lt424ki/rEIsRSic5TrMh0FWbXUG+Ch0whvC5QksN9TKFcG7N6t5 P+o0Rv2Z1nFqZHxOlfI6JEJYlG0ZmFKAHGYnwNU9GupMEKOwWw1vouiW8heFvS42 FcZDYny3fTZ+I3cm8YNRSzHusvzsimLD -----END CERTIFICATE-----Generated at Mon Oct 20 14:03:32 2025 by rpki-client