$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: SmucLNpuUbv5ijIdw0d4jW86htsXYIApRP1w0tBmS6Q= Subject key identifier: 3B:24:8F:54:BE:9F:1B:63:26:A4:4A:D3:4A:31:1A:15:23:B2:53:0E Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 06EA Signing time: Sat 18 Oct 2025 23:24:30 +0000 Manifest this update: Sat 18 Oct 2025 23:24:29 +0000 Manifest next update: Sat 25 Oct 2025 23:24:29 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: +8CAGRHwMuursYbmHkFKDR+Z1Oli9xpE+kfUW4s60ao=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: oHlo3Sofjys47IZ2Ei8IuoMAeL8C2VUTJUZO9aDUVcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Oct 18 23:24:29 2025 GMT Not After : Oct 25 23:24:29 2025 GMT Subject: CN=68f421ad-04b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:0b:a1:5a:09:06:bb:1c:c7:26:33:a4:96: 87:fc:62:0b:5b:9f:1c:0c:ec:9f:13:7e:2d:d4:b2: 35:54:dc:3a:73:d0:cd:b9:87:94:e1:dd:ef:55:c4: 08:43:5e:0b:d6:5a:f4:ea:73:3b:54:b6:9f:92:07: 47:32:f4:c2:18:5d:a3:d4:14:fe:53:b9:f2:ec:a7: 2e:f5:4b:ed:ee:70:07:c6:ac:f9:26:21:b0:94:a6: f0:d9:66:fa:f7:22:fb:20:74:e9:a6:97:7e:9d:d1: 0d:40:31:cd:3b:85:ed:b5:ca:a3:bf:21:e5:91:98: 20:78:12:1a:e5:f5:0c:40:b4:6c:6f:23:59:89:93: 9d:71:1b:da:9e:39:25:4d:2f:e7:8e:ee:bf:10:a0: 00:64:c9:9c:e1:70:21:70:42:8a:c7:c6:25:62:9d: 10:db:18:f4:48:9b:53:76:7e:e1:fe:c3:26:3a:b5: b8:3c:f0:52:c1:57:d3:2c:e9:b8:15:fa:8c:c1:0a: 0a:d2:25:1e:d2:c0:57:5a:c7:4e:55:6d:60:da:1e: e8:68:18:99:85:e9:89:3c:d2:81:11:cb:15:fc:98: a7:b2:df:07:7f:5c:4d:6f:42:02:7e:b6:d0:f8:75: 9d:fc:2b:66:53:7c:a1:e9:89:c8:06:26:c7:1d:27: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:24:8F:54:BE:9F:1B:63:26:A4:4A:D3:4A:31:1A:15:23:B2:53:0E X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d4:77:4f:63:0e:4e:7c:46:24:f8:e3:9f:3a:34:62:39:07: 4a:4c:15:a9:b3:db:b5:92:83:d0:06:03:bb:ce:0b:68:e9:e2: da:c8:b7:ed:9d:8b:0f:3c:46:ab:42:0c:e6:a6:c1:6a:6e:9a: 62:27:46:2b:ee:21:43:75:6b:fc:0e:3c:72:7a:63:98:cf:e6: 12:13:49:82:04:42:0f:f9:de:58:55:ce:d9:44:72:b1:03:a6: 75:8c:c7:9c:c1:1c:24:f7:47:28:7d:e0:c8:8a:5a:f6:21:e1: 0d:60:64:29:cc:6e:a8:00:f9:87:15:b3:f5:80:81:53:61:12: 99:b5:27:fd:9b:6d:7f:8e:fa:8e:4b:6b:9f:72:b9:29:99:ee: 98:0d:ad:cb:72:75:06:ac:b8:e0:fb:e5:03:01:00:ea:59:a8: f6:b0:b1:b4:e7:cd:96:53:ed:67:67:2b:c7:36:4f:fc:72:d9: c9:02:86:16:88:6d:28:d0:01:f1:a9:89:df:e8:01:a8:27:f6: b9:10:a9:f0:a6:d9:09:f4:90:04:aa:44:ea:ab:08:d0:f3:54: 14:79:be:f3:75:3e:f3:92:98:0c:f2:99:09:e3:33:46:bb:0d: a3:20:be:34:ab:4e:78:98:b1:7b:42:58:e4:13:af:9f:e3:74: 62:97:e2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjUxMDE4MjMyNDI5WhcNMjUxMDI1MjMyNDI5WjAYMRYwFAYD VQQDEw02OGY0MjFhZC0wNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cELoVoJBrscxyYzpJaH/GILW58cDOyfE34t1LI1VNw6c9DNuYeU4d3vVcQI Q14L1lr06nM7VLafkgdHMvTCGF2j1BT+U7ny7Kcu9Uvt7nAHxqz5JiGwlKbw2Wb6 9yL7IHTpppd+ndENQDHNO4XttcqjvyHlkZggeBIa5fUMQLRsbyNZiZOdcRvanjkl TS/nju6/EKAAZMmc4XAhcEKKx8YlYp0Q2xj0SJtTdn7h/sMmOrW4PPBSwVfTLOm4 FfqMwQoK0iUe0sBXWsdOVW1g2h7oaBiZhemJPNKBEcsV/Jinst8Hf1xNb0ICfrbQ +HWd/CtmU3yh6YnIBibHHSdj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDskj1S+ nxtjJqRK00oxGhUjslMOMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/1HdPYw5OfEYk+OOfOjRiOQdKTBWps9u1koPQBgO7zgto6eLayLft nYsPPEarQgzmpsFqbppiJ0Yr7iFDdWv8DjxyemOYz+YSE0mCBEIP+d5YVc7ZRHKx A6Z1jMecwRwk90cofeDIilr2IeENYGQpzG6oAPmHFbP1gIFTYRKZtSf9m21/jvqO S2ufcrkpme6YDa3LcnUGrLjg++UDAQDqWaj2sLG0582WU+1nZyvHNk/8ctnJAoYW iG0o0AHxqYnf6AGoJ/a5EKnwptkJ9JAEqkTqqwjQ81QUeb7zdT7zkpgM8pkJ4zNG uw2jIL40q054mLF7QljkE6+f43Ril+Ib -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:53 2025 by rpki-client