$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json) Hash identifier: NEo/Jlm1gmyE70xrQ52oQJGd4tzVVzUgXh06jzerue0= Subject key identifier: A4:F1:B0:DB:FE:78:DC:BC:47:7D:12:78:9A:67:8E:7E:64:4A:78:F2 Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft Manifest number: 21 Signing time: Sun 19 Oct 2025 11:19:46 +0000 Manifest this update: Sun 19 Oct 2025 11:19:46 +0000 Manifest next update: Sun 26 Oct 2025 11:19:46 +0000 Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: X8IQcQ1IVEZaKgQqQF4LhtNZs5LLST8F/jpgDWUeFSE=) 2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC Validity Not Before: Oct 19 11:19:46 2025 GMT Not After : Oct 26 11:19:46 2025 GMT Subject: CN=68f4c952-5ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:da:e0:59:31:35:13:37:be:eb:5f:a6:3e: dc:01:5a:fe:b9:e7:1e:5d:ea:a0:93:99:b8:12:60: 72:3a:fe:65:bd:88:81:ff:3a:86:8d:6d:5f:cb:fa: 54:8f:cb:70:4f:9e:43:1f:af:45:6c:c5:7e:84:2e: 66:47:c7:2d:08:30:06:81:46:82:a0:84:64:6e:c2: 4e:f5:0f:0b:fa:36:e8:45:43:5c:72:3f:84:15:c8: ba:a8:04:ea:12:90:84:8f:18:96:59:a5:e5:e4:1a: f6:30:0d:a7:26:18:01:29:4a:89:f0:b9:a0:47:00: 7e:cc:5c:a5:7a:a8:52:a3:26:41:09:e9:16:1e:ca: 69:11:a5:8b:a1:86:0c:ce:45:10:62:31:ed:09:6d: 81:a5:36:bf:94:ab:18:a2:a2:b7:58:33:8b:84:d2: 0a:6b:aa:27:55:cb:c7:28:42:9d:92:83:e8:a8:c1: 92:d8:d1:a6:a1:26:50:8a:c0:69:62:c3:ef:6c:31: 61:43:df:da:f9:3b:48:ab:c0:c6:ce:2a:d6:38:20: c1:26:d3:aa:64:f4:05:6e:c2:c9:96:25:9e:4f:f5: 2f:eb:63:b0:db:2d:63:61:4f:06:1c:c0:5f:bd:9d: a4:ac:a1:45:bc:86:f1:c2:0f:c9:d8:13:8f:d9:17: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F1:B0:DB:FE:78:DC:BC:47:7D:12:78:9A:67:8E:7E:64:4A:78:F2 X509v3 Authority Key Identifier: keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:83:34:0c:74:a1:3c:27:f4:ad:d0:ac:1d:8f:db:ef:6a:25: ad:d0:e1:96:c6:ed:b3:5a:c1:ec:9d:5a:88:90:7f:e3:09:92: 56:bd:ca:d0:30:2e:de:ab:cf:56:74:21:77:71:e1:97:f6:60: 4b:b4:af:18:25:df:f3:df:f0:7b:2a:fd:f3:0d:fc:95:90:b4: 7c:18:5b:a5:0a:10:df:4d:16:59:f8:77:2b:7b:81:06:fe:2a: a2:43:91:3d:a4:c9:f8:df:a1:ae:ab:79:67:b1:ec:83:6e:8b: 11:c6:90:0a:cb:2f:5b:4e:04:8c:99:d1:de:de:4d:d8:7c:ca: 68:3d:00:bf:19:06:2d:03:58:b3:a3:4d:88:cc:5b:ab:92:d7: 83:ed:1a:9e:f3:35:51:9d:e0:45:f8:95:93:9d:e9:be:8e:d5: 88:80:1b:df:3f:5f:e1:10:08:80:f9:5c:55:d7:21:fe:9b:9b: 22:24:de:da:11:c5:7f:52:84:78:ef:70:cb:d2:b1:c1:2b:12: 8f:87:3c:e8:a1:86:9c:95:92:df:2b:80:4a:ac:7e:34:1e:d5: 32:2a:87:e1:ce:90:46:0d:69:dc:19:16:34:26:89:e9:57:59: ca:86:a9:ab:42:df:15:28:09:17:f7:6f:1b:36:32:86:a5:25: b2:fa:2b:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTlGMjExMC8GA1UEBRMoRUYwMjI1RjkxQ0ZFNDY3RjEzQkQ5MUU2QzlBMUI5REZB NzNCQjFFQzAeFw0yNTEwMTkxMTE5NDZaFw0yNTEwMjYxMTE5NDZaMBgxFjAUBgNV BAMTDTY4ZjRjOTUyLTVhZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDahtrgWTE1Eze+61+mPtwBWv655x5d6qCTmbgSYHI6/mW9iIH/OoaNbV/L+lSP y3BPnkMfr0VsxX6ELmZHxy0IMAaBRoKghGRuwk71Dwv6NuhFQ1xyP4QVyLqoBOoS kISPGJZZpeXkGvYwDacmGAEpSonwuaBHAH7MXKV6qFKjJkEJ6RYeymkRpYuhhgzO RRBiMe0JbYGlNr+UqxiiordYM4uE0gprqidVy8coQp2Sg+iowZLY0aahJlCKwGli w+9sMWFD39r5O0irwMbOKtY4IMEm06pk9AVuwsmWJZ5P9S/rY7DbLWNhTwYcwF+9 naSsoUW8hvHCD8nYE4/ZF2ZhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpPGw2/54 3LxHfRJ4mmeOfmRKePIwHwYDVR0jBBgwFoAU7wIl+Rz+Rn8TvZHmyaG536c7seww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOUYyLzBDNzgxRkQwN0Q4 QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44VHZaSG15YUc1MzZjN3Nl dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3dJbC1Sei1SbjhUdlpIbXlhRzUzNmM3c2V3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OUYyLzBDNzgxRkQwN0Q4QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44 VHZaSG15YUc1MzZjN3Nldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKDNAx0oTwn9K3QrB2P2+9qJa3Q4ZbG7bNaweydWoiQf+MJkla9ytAw Lt6rz1Z0IXdx4Zf2YEu0rxgl3/Pf8Hsq/fMN/JWQtHwYW6UKEN9NFln4dyt7gQb+ KqJDkT2kyfjfoa6reWex7INuixHGkArLL1tOBIyZ0d7eTdh8ymg9AL8ZBi0DWLOj TYjMW6uS14PtGp7zNVGd4EX4lZOd6b6O1YiAG98/X+EQCID5XFXXIf6bmyIk3toR xX9ShHjvcMvSscErEo+HPOihhpyVkt8rgEqsfjQe1TIqh+HOkEYNadwZFjQmielX WcqGqatC3xUoCRf3bxs2MoalJbL6K0s= -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:12 2025 by rpki-client