$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json) Hash identifier: UQx9ErZFrE1nxQe/ap1gN9gu9BUP9Pub0MRcxYy7u5c= Subject key identifier: 2E:9C:E8:A0:44:B6:42:83:39:8F:1D:E3:B6:1F:E9:FE:6B:10:7A:0A Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1 Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft Manifest number: 0D Signing time: Sun 19 Oct 2025 11:35:25 +0000 Manifest this update: Sun 19 Oct 2025 11:35:24 +0000 Manifest next update: Sun 26 Oct 2025 11:35:24 +0000 Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: Hv9dwcRMVQx1BoF2AWpvUZ/JJKL98RMNCO5Qqa0oSgs=) 2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: OC380MFsyyoyM7tX6fVQV1xbBPX87Cl75OkK9UhRng4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1 Validity Not Before: Oct 19 11:35:24 2025 GMT Not After : Oct 26 11:35:24 2025 GMT Subject: CN=68f4ccfc-ca0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:ea:b6:9c:f8:79:69:93:bb:f5:4d:65:a9: 26:53:e7:33:80:9c:51:f2:30:60:c4:a9:46:5e:33: 5e:08:3d:e0:21:e6:02:49:a1:22:c5:8c:08:66:40: cf:11:2e:f0:ad:8f:64:d4:cd:40:58:d4:e7:fe:e4: f5:5c:34:ac:c4:9b:23:cd:ed:46:85:f3:4d:42:17: 21:89:f9:61:78:5c:b9:d7:8c:25:f2:a2:35:5b:c4: 07:8a:a5:33:c1:4e:c7:55:c4:85:fc:e6:72:f4:38: 56:ba:af:ba:21:ff:3d:75:64:57:91:45:fa:d5:1d: f8:4d:6c:e1:1c:f6:62:d8:dd:58:f6:fc:be:49:d2: 96:9e:09:13:5a:0c:94:f0:12:9a:44:f2:09:46:a8: c2:6b:72:68:5d:0e:6c:a0:88:9b:fc:98:79:59:f3: 40:b2:ef:44:7a:03:06:19:28:48:33:5a:b5:cb:1c: 78:c4:d4:fd:61:58:5f:ca:11:52:65:0a:a4:a4:d4: 67:0c:de:88:b6:e9:dd:9e:03:36:56:f0:4b:1f:70: ff:55:4e:22:6b:6c:fd:a5:84:e4:26:07:67:79:92: d7:fd:ea:59:23:b9:fe:6b:c5:72:f9:c2:e7:72:9e: dc:38:a4:5b:74:65:b1:19:9a:31:22:9d:e3:c7:df: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:E8:A0:44:B6:42:83:39:8F:1D:E3:B6:1F:E9:FE:6B:10:7A:0A X509v3 Authority Key Identifier: keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:59:b4:75:f3:99:69:84:6c:20:44:db:99:8a:f6:d7:19:ca: 66:d3:7f:63:87:2f:7d:00:5d:75:cd:ee:41:60:8c:ec:fb:12: 3c:80:62:c9:6e:0a:ac:21:2a:23:0b:93:f7:cd:4e:63:74:fa: 63:64:71:82:57:80:3e:b5:64:b8:66:8d:d5:aa:14:e9:59:5f: 7c:68:87:4b:ae:d3:17:30:76:94:02:d6:1f:98:78:3b:24:55: a3:8d:af:16:96:4d:da:28:34:d7:a1:2e:29:bb:31:14:ec:a2: d2:9d:c4:c3:d9:94:3f:c2:ac:0d:22:cc:d8:97:bf:9f:79:b3: 93:73:6c:4f:4f:85:83:ac:44:ee:08:1a:8e:67:4d:d1:cd:10: 3c:18:19:a8:63:e8:b2:15:cb:75:a5:8a:9b:2b:16:ef:1f:be: c1:da:dc:72:c6:61:96:fc:27:85:13:66:94:25:05:42:d5:39: fd:21:7f:cf:4d:89:58:bd:2f:6e:67:65:1a:ae:8e:86:f2:7d: 2d:b4:de:80:11:55:37:7a:55:52:97:df:a4:84:4a:d5:d4:68: 9a:90:dd:ca:1d:62:8b:b9:bc:6d:67:7b:1c:89:64:30:cd:54: ec:82:2b:89:9f:21:62:a0:d1:c1:2b:3e:22:96:f6:08:55:40: 34:e2:3f:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNDdCODU0MzY4NUQzMDFGRUVGOTBDRDEyRTUxNThGNzQw RDZCNkNCMTAeFw0yNTEwMTkxMTM1MjRaFw0yNTEwMjYxMTM1MjRaMBgxFjAUBgNV BAMTDTY4ZjRjY2ZjLWNhMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIouq2nPh5aZO79U1lqSZT5zOAnFHyMGDEqUZeM14IPeAh5gJJoSLFjAhmQM8R LvCtj2TUzUBY1Of+5PVcNKzEmyPN7UaF801CFyGJ+WF4XLnXjCXyojVbxAeKpTPB TsdVxIX85nL0OFa6r7oh/z11ZFeRRfrVHfhNbOEc9mLY3Vj2/L5J0paeCRNaDJTw EppE8glGqMJrcmhdDmygiJv8mHlZ80Cy70R6AwYZKEgzWrXLHHjE1P1hWF/KEVJl CqSk1GcM3oi26d2eAzZW8EsfcP9VTiJrbP2lhOQmB2d5ktf96lkjuf5rxXL5wudy ntw4pFt0ZbEZmjEinePH33DpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULpzooES2 QoM5jx3jth/p/msQegowHwYDVR0jBBgwFoAUR7hUNoXTAf7vkM0S5RWPdA1rbLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0VFQjgwOEI4OUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3dmtNMFM1UldQZEExcmJM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdoVU5vWFRBZjd2a00wUzVSV1BkQTFyYkxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0VFQjgwOEI4OUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3 dmtNMFM1UldQZEExcmJMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9ZtHXzmWmEbCBE25mK9tcZymbTf2OHL30AXXXN7kFgjOz7EjyAYslu CqwhKiMLk/fNTmN0+mNkcYJXgD61ZLhmjdWqFOlZX3xoh0uu0xcwdpQC1h+YeDsk VaONrxaWTdooNNehLim7MRTsotKdxMPZlD/CrA0izNiXv595s5NzbE9PhYOsRO4I Go5nTdHNEDwYGahj6LIVy3WlipsrFu8fvsHa3HLGYZb8J4UTZpQlBULVOf0hf89N iVi9L25nZRqujobyfS203oARVTd6VVKX36SEStXUaJqQ3codYou5vG1nexyJZDDN VOyCK4mfIWKg0cErPiKW9ghVQDTiP1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:10:09 2025 by rpki-client