$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft File: V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json) Hash identifier: +X3exuFulbIKddpmwcRK02u6xvbtyr1gjymNqR0v4WI= Subject key identifier: 58:43:98:19:C1:2E:44:83:65:61:37:41:45:C2:A1:32:25:43:6C:61 Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 Certificate issuer: /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Certificate serial: 27DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft Manifest number: 27D5 Signing time: Sat 18 Oct 2025 15:50:26 +0000 Manifest this update: Sat 18 Oct 2025 15:50:26 +0000 Manifest next update: Sat 25 Oct 2025 15:50:26 +0000 Files and hashes: 1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: ZCQkdo1ARtO3bqs6ZpNkPAcp+rT/NHp/ifsQIpJKJ/I=) 2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: 0PS4/rj5Rh5J9qWit0urM3xL4w3DPtmcsnvl2FziSAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10205 (0x27dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Validity Not Before: Oct 18 15:50:26 2025 GMT Not After : Oct 25 15:50:26 2025 GMT Subject: CN=68f3b742-7569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:a5:27:af:a5:ba:12:a1:27:f3:b2:76:e5: 33:a5:27:cc:59:e1:60:11:1e:eb:db:0f:32:fc:c0: ce:f9:d0:fa:d5:df:eb:0b:a4:f3:30:00:a3:2c:07: ee:82:cf:ed:17:33:59:9c:13:96:e0:83:bc:b5:a7: e8:8d:04:71:d0:eb:60:2d:ed:9a:9d:2a:a0:e5:80: 81:92:07:4c:ac:f9:5f:4a:5e:b5:cf:fa:cf:89:f8: bc:04:46:ed:64:57:22:33:04:e9:23:e6:51:90:16: 39:4f:f4:01:6d:f6:88:8e:70:51:61:b4:a4:8a:eb: 00:e6:43:46:a0:91:2b:8a:4b:96:77:aa:2d:2c:32: 0b:cc:5f:26:6c:0b:2f:c8:9c:9e:b5:f3:5b:14:ec: 67:ad:cf:75:d0:72:05:a9:f2:21:09:88:2a:5a:bd: 22:87:cd:cd:68:eb:95:df:57:d6:2d:d3:00:a4:22: d9:98:28:7d:3f:cb:f1:13:41:4e:84:ed:96:cc:b4: 06:6c:4c:cc:0a:ce:89:2e:bc:30:bd:0b:af:2e:1f: 07:4f:1f:e5:ed:64:ce:9a:24:82:8d:94:f9:ff:93: c3:25:f6:7c:f8:8c:56:cd:48:f8:5a:5c:dc:d5:f2: 4c:64:5f:1e:e2:dd:72:62:15:ad:e8:f7:c3:f0:c0: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:98:19:C1:2E:44:83:65:61:37:41:45:C2:A1:32:25:43:6C:61 X509v3 Authority Key Identifier: keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b9:6e:62:50:60:6e:e7:d7:8e:82:57:f5:5d:62:39:de:2f: cf:7a:dc:1d:97:b0:90:be:6e:4f:9a:a0:ed:5c:fc:4b:0e:0e: 7a:ed:3b:86:c1:fa:dc:b2:b4:77:c4:37:42:7c:7a:88:01:06: fa:52:16:58:4d:27:36:fd:5d:9e:be:96:61:c8:61:d0:97:ec: a1:35:9b:aa:6b:80:47:98:e1:b4:99:50:dc:df:81:75:92:dc: c5:6a:f9:db:76:e0:cf:08:27:13:e1:a2:fd:16:f5:1d:7c:5a: 3f:72:f7:08:8e:54:14:6b:d7:33:9c:96:ec:83:2b:9b:73:49: 7a:d0:9a:b5:98:83:9b:22:64:b4:20:ad:2f:68:15:d4:43:f3: 1c:8c:3d:01:03:0f:4b:12:3a:7d:76:4b:06:c1:49:5c:f4:05: c7:5c:45:31:62:46:e7:cd:c1:ab:a8:02:21:c8:7d:83:6b:4b: a1:b0:98:58:10:a3:3b:f8:0d:8c:82:39:05:b5:18:61:b9:b9: 3b:4f:a2:e5:85:60:50:de:86:14:4a:fe:e9:b3:5c:ee:56:43: d9:a2:31:c7:9e:98:38:cb:be:b3:6d:50:0e:06:09:78:f1:18: 33:30:f7:40:30:89:41:63:1b:11:39:13:01:65:25:f2:f0:5e: 5f:c2:e1:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUyN0UxMTAvBgNVBAUTKDU3QjY4NzI3NEIzMzE5RUQ5MDcxQjk2NjE1OEY5QjhB QjY0QUU2RjcwHhcNMjUxMDE4MTU1MDI2WhcNMjUxMDI1MTU1MDI2WjAYMRYwFAYD VQQDEw02OGYzYjc0Mi03NTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YqlJ6+luhKhJ/OyduUzpSfMWeFgER7r2w8y/MDO+dD61d/rC6TzMACjLAfu gs/tFzNZnBOW4IO8tafojQRx0OtgLe2anSqg5YCBkgdMrPlfSl61z/rPifi8BEbt ZFciMwTpI+ZRkBY5T/QBbfaIjnBRYbSkiusA5kNGoJErikuWd6otLDILzF8mbAsv yJyetfNbFOxnrc910HIFqfIhCYgqWr0ih83NaOuV31fWLdMApCLZmCh9P8vxE0FO hO2WzLQGbEzMCs6JLrwwvQuvLh8HTx/l7WTOmiSCjZT5/5PDJfZ8+IxWzUj4Wlzc 1fJMZF8e4t1yYhWt6PfD8MBHhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhDmBnB LkSDZWE3QUXCoTIlQ2xhMB8GA1UdIwQYMBaAFFe2hydLMxntkHG5ZhWPm4q2Sub3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTI3RS9FOEE4OENCQUFC NzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdlMlFjYmxtRlktYmlyWks1 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y3YUhKMHN6R2UyUWNibG1GWS1iaXJaSzV2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTI3RS9FOEE4OENCQUFCNzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdl MlFjYmxtRlktYmlyWks1dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0uW5iUGBu59eOglf1XWI53i/Petwdl7CQvm5PmqDtXPxLDg567TuG wfrcsrR3xDdCfHqIAQb6UhZYTSc2/V2evpZhyGHQl+yhNZuqa4BHmOG0mVDc34F1 ktzFavnbduDPCCcT4aL9FvUdfFo/cvcIjlQUa9cznJbsgyubc0l60Jq1mIObImS0 IK0vaBXUQ/McjD0BAw9LEjp9dksGwUlc9AXHXEUxYkbnzcGrqAIhyH2Da0uhsJhY EKM7+A2MgjkFtRhhubk7T6LlhWBQ3oYUSv7ps1zuVkPZojHHnpg4y76zbVAOBgl4 8RgzMPdAMIlBYxsRORMBZSXy8F5fwuEn -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:27 2025 by rpki-client