$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: 0tkvxoQ4XtK3ILwIRUbVSgSiwqkASSEbmrBqg/VzLAU= Subject key identifier: 4C:70:4B:43:13:8D:BB:92:0C:43:3C:89:C2:FF:3B:7B:AA:7B:8B:98 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B70 Signing time: Sat 18 Oct 2025 19:56:29 +0000 Manifest this update: Sat 18 Oct 2025 19:56:29 +0000 Manifest next update: Sat 25 Oct 2025 19:56:29 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: 69gHAdCzqWS0ozztGIF/ooQcrsksnsgcnd7JELuGQcE=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Oct 18 19:56:29 2025 GMT Not After : Oct 25 19:56:29 2025 GMT Subject: CN=68f3f0ed-a940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:d5:52:39:81:e7:bd:79:27:bc:7a:07:6e: 12:69:05:1c:f0:d5:0e:44:df:77:6e:2c:1e:8b:aa: fe:4d:2d:2a:51:d0:df:ca:d1:01:b0:54:b6:3c:66: c6:fd:d3:f2:c9:c3:76:0d:17:aa:f9:33:52:08:d8: 74:5b:16:e7:26:cc:18:41:ae:fb:cd:22:f2:0e:46: db:08:30:b8:70:f8:f1:22:fa:19:8c:5e:13:d8:59: dd:23:d2:9c:a4:21:d0:03:02:27:cd:15:cc:e8:37: 29:41:10:a1:67:f0:c8:52:23:a5:86:4f:d0:6c:b0: ac:c4:fb:16:d5:0c:d4:3c:5e:86:5b:c2:86:b7:cf: 1a:3c:b7:ef:51:ee:9b:28:df:cc:29:4d:64:b4:6a: 1b:9a:9b:62:82:7e:61:ae:f9:46:09:48:c2:ac:c7: 3f:f5:a5:d7:8b:18:f3:23:6c:c0:17:a5:80:e6:56: ee:a0:29:19:9a:af:2c:68:b2:15:88:6d:75:4e:72: 5a:71:b3:7e:6c:e6:c4:65:a2:12:14:5d:3e:d9:2c: a9:71:7f:6f:75:7a:6c:ff:0f:d5:eb:ef:45:9f:12: 0c:e8:81:12:53:a4:b7:9f:98:7d:2d:d6:c7:88:01: 03:c8:6f:78:66:8c:b2:52:e1:cb:eb:2d:5d:e6:1a: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:70:4B:43:13:8D:BB:92:0C:43:3C:89:C2:FF:3B:7B:AA:7B:8B:98 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:9c:f6:b4:50:77:38:72:71:6a:bc:b6:87:8a:79:22:f2: 8d:7e:54:93:fe:e4:44:fd:c3:6f:a1:7b:89:1a:2d:56:bb:1a: bc:55:8b:9a:79:e7:ea:65:e3:04:81:ab:27:73:78:ff:b9:10: a9:f0:0f:32:0e:4c:50:70:20:8e:2b:61:12:da:95:2c:39:9a: d3:99:df:3a:29:4f:1d:92:c5:59:9f:d3:10:17:2c:af:e4:85: 5e:a9:62:8c:56:7d:72:b9:ad:c6:4e:95:34:66:84:3a:63:f5: 2a:eb:90:61:4c:8e:3e:a9:6d:da:d9:0a:c2:ee:02:78:98:d8: 11:f2:62:6c:91:08:85:08:fa:a4:da:77:eb:0b:a6:0a:3b:83: 91:2e:03:8d:b9:7e:d9:09:a8:b8:2f:d6:83:c3:63:69:35:e6: a1:4b:39:a7:c2:95:c9:46:f7:02:69:49:8b:18:b7:8c:ca:17: e9:a8:02:86:9f:2a:30:b3:5c:9a:0d:df:c8:9a:5d:f4:10:dc: 7b:b9:7c:1b:1a:86:0b:ee:bd:67:8f:1e:b6:11:0e:fc:2f:4b: 0d:da:d7:28:06:db:78:53:95:6a:e3:5c:07:1b:0f:5f:e5:81: 8b:d1:c6:d5:53:6a:9a:1f:78:cd:a5:a7:c7:e4:ec:7c:fe:ab: 6f:19:c4:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUxMDE4MTk1NjI5WhcNMjUxMDI1MTk1NjI5WjAYMRYwFAYD VQQDEw02OGYzZjBlZC1hOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorPVUjmB5715J7x6B24SaQUc8NUORN93biwei6r+TS0qUdDfytEBsFS2PGbG /dPyycN2DReq+TNSCNh0WxbnJswYQa77zSLyDkbbCDC4cPjxIvoZjF4T2FndI9Kc pCHQAwInzRXM6DcpQRChZ/DIUiOlhk/QbLCsxPsW1QzUPF6GW8KGt88aPLfvUe6b KN/MKU1ktGobmptign5hrvlGCUjCrMc/9aXXixjzI2zAF6WA5lbuoCkZmq8saLIV iG11TnJacbN+bObEZaISFF0+2SypcX9vdXps/w/V6+9FnxIM6IESU6S3n5h9LdbH iAEDyG94ZoyyUuHL6y1d5hpwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExwS0MT jbuSDEM8icL/O3uqe4uYMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmC5z2tFB3OHJxary2h4p5IvKNflST/uRE/cNvoXuJGi1Wuxq8VYua eefqZeMEgasnc3j/uRCp8A8yDkxQcCCOK2ES2pUsOZrTmd86KU8dksVZn9MQFyyv 5IVeqWKMVn1yua3GTpU0ZoQ6Y/Uq65BhTI4+qW3a2QrC7gJ4mNgR8mJskQiFCPqk 2nfrC6YKO4ORLgONuX7ZCai4L9aDw2NpNeahSzmnwpXJRvcCaUmLGLeMyhfpqAKG nyows1yaDd/Iml30ENx7uXwbGoYL7r1njx62EQ78L0sN2tcoBtt4U5Vq41wHGw9f 5YGL0cbVU2qaH3jNpafH5Ox8/qtvGcRF -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:49 2025 by rpki-client