$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: uqN4+7FMSRu3OPdQVaZaH7kmdNNO5DRSxgRc0/7MXDA= Subject key identifier: A7:DD:83:BA:88:63:01:D4:6A:7E:28:5C:EF:33:7F:34:E9:49:D5:59 Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0E7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0E71 Signing time: Mon 20 Oct 2025 18:15:19 +0000 Manifest this update: Mon 20 Oct 2025 18:15:19 +0000 Manifest next update: Mon 27 Oct 2025 18:15:19 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: Zr4cqSkdOpsd1E9swdPY8PrsYvY4sGR5buM4EHg+lo4=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: KLPJPe472S0O1L4BKJwaeNcAQbh5Hn42irMA5av03NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3708 (0xe7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Oct 20 18:15:19 2025 GMT Not After : Oct 27 18:15:19 2025 GMT Subject: CN=68f67c37-6e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bd:2d:64:65:a0:70:7a:55:20:81:72:ce:6e: 9d:97:61:43:c2:e4:8f:5b:a7:61:8b:d3:d6:61:81: 1d:06:94:d4:b6:9c:9a:7e:f5:74:b4:f4:bd:60:64: 97:f2:d1:3f:db:d6:57:d4:8b:cc:2d:55:7a:1e:13: 76:71:c3:c7:35:8c:f5:6b:d2:1c:53:80:0b:24:34: 31:67:4e:3c:d5:15:85:ff:87:fc:17:8c:28:33:65: ff:51:46:c0:7f:98:61:23:3b:85:9d:c7:f7:40:d7: 3b:30:07:43:89:7d:02:c4:55:a7:a9:0d:f9:2b:1f: 93:80:79:67:dd:01:47:d2:c1:c1:50:01:77:14:05: ae:a9:86:52:b9:a4:8c:87:fb:e3:db:d0:e7:00:11: d5:22:53:ac:e5:b5:e3:4c:d6:b2:eb:0e:99:22:17: 4c:dd:54:aa:31:6a:00:46:24:f1:24:bf:2b:cf:f1: 79:38:b4:22:db:6c:c7:85:c2:11:12:0c:8c:be:d3: a6:9f:bf:55:0e:89:08:fd:d8:15:f4:33:0b:96:1b: bd:3b:16:99:cb:90:8b:72:03:aa:5a:0a:bc:70:53: 72:8c:9f:29:3c:b9:6d:55:eb:69:3a:87:6a:d3:1a: ac:6f:49:61:fb:a9:b2:77:1c:8b:ee:99:b7:a4:74: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DD:83:BA:88:63:01:D4:6A:7E:28:5C:EF:33:7F:34:E9:49:D5:59 X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:be:fa:1c:e6:b1:10:01:08:47:9c:08:96:ad:1f:cd:e5:f1: 77:8e:ff:c7:01:13:94:59:36:b5:29:b7:eb:31:8d:d1:b5:1f: ec:fc:ad:83:73:5a:dd:ea:8a:c7:45:65:a6:b5:d8:a9:92:82: ff:78:f0:a2:d3:d8:2c:ec:52:2d:c4:ca:ab:ff:97:66:1f:0a: 3b:4e:d1:a1:be:c2:50:da:30:65:69:79:c1:f3:92:b6:02:4e: e7:4e:c6:6c:c5:f0:26:ef:e3:e3:fb:30:8a:aa:1f:3d:e1:09: 3f:c7:e3:b4:c6:10:b0:92:4a:d2:b0:84:b2:61:9d:d7:94:a4: ed:52:b4:24:77:86:91:ea:35:14:5d:e3:3b:67:9a:3c:ec:2d: a0:f7:69:2e:d0:b7:f4:c1:57:df:56:5f:1b:2c:08:f1:11:f6: 53:0e:cf:8e:d6:94:21:cd:7e:6c:6c:02:72:23:3f:1b:d1:16: 9f:d7:cc:17:27:da:5a:a4:74:79:31:98:c2:9c:49:5d:52:52: db:39:03:82:61:99:fc:1e:b7:5b:e4:4d:30:18:fe:6c:75:6b: 19:36:76:0b:bd:56:22:0c:68:13:12:f1:f4:fa:f2:c8:d2:a8: 5d:0e:f9:40:a8:19:78:17:cb:51:73:0e:ba:27:57:a6:83:06: 31:08:50:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjUxMDIwMTgxNTE5WhcNMjUxMDI3MTgxNTE5WjAYMRYwFAYD VQQDEw02OGY2N2MzNy02ZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9b0tZGWgcHpVIIFyzm6dl2FDwuSPW6dhi9PWYYEdBpTUtpyafvV0tPS9YGSX 8tE/29ZX1IvMLVV6HhN2ccPHNYz1a9IcU4ALJDQxZ0481RWF/4f8F4woM2X/UUbA f5hhIzuFncf3QNc7MAdDiX0CxFWnqQ35Kx+TgHln3QFH0sHBUAF3FAWuqYZSuaSM h/vj29DnABHVIlOs5bXjTNay6w6ZIhdM3VSqMWoARiTxJL8rz/F5OLQi22zHhcIR EgyMvtOmn79VDokI/dgV9DMLlhu9OxaZy5CLcgOqWgq8cFNyjJ8pPLltVetpOodq 0xqsb0lh+6mydxyL7pm3pHRTnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfdg7qI YwHUan4oXO8zfzTpSdVZMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTvvoc5rEQAQhHnAiWrR/N5fF3jv/HAROUWTa1KbfrMY3RtR/s/K2D c1rd6orHRWWmtdipkoL/ePCi09gs7FItxMqr/5dmHwo7TtGhvsJQ2jBlaXnB85K2 Ak7nTsZsxfAm7+Pj+zCKqh894Qk/x+O0xhCwkkrSsISyYZ3XlKTtUrQkd4aR6jUU XeM7Z5o87C2g92ku0Lf0wVffVl8bLAjxEfZTDs+O1pQhzX5sbAJyIz8b0Raf18wX J9papHR5MZjCnEldUlLbOQOCYZn8Hrdb5E0wGP5sdWsZNnYLvVYiDGgTEvH0+vLI 0qhdDvlAqBl4F8tRcw66J1emgwYxCFDh -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:46 2025 by rpki-client