$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: TxGBK/XhPP6BkqOi75AxSlBP0vmqANZvrXdgrC/oEck= Subject key identifier: 60:AD:85:74:69:19:04:79:02:AA:C0:9A:C5:82:F5:42:32:97:D3:54 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0BE7 Signing time: Sat 18 Oct 2025 19:41:29 +0000 Manifest this update: Sat 18 Oct 2025 19:41:29 +0000 Manifest next update: Sat 25 Oct 2025 19:41:29 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: 42gfWSx49N7dyJiYf4HEefEdQey/T3MG21F1m0QgtJI=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Oct 18 19:41:29 2025 GMT Not After : Oct 25 19:41:29 2025 GMT Subject: CN=68f3ed69-f094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e2:a4:44:ef:1d:19:e9:c6:21:9b:5b:f5:80: a3:20:91:86:a7:ed:a5:f0:9e:49:91:59:13:b6:e7: 3a:09:5f:b1:e1:b7:f6:66:22:33:c1:db:a7:52:0c: 18:6c:bb:12:ae:07:f5:70:05:38:43:00:bd:a3:04: c1:51:84:7e:bb:fe:26:44:58:c9:df:50:9c:73:2e: 70:26:af:4d:11:1d:25:ae:bb:c5:e6:ca:ce:0c:5d: 52:6b:6a:ae:0c:59:4a:26:0e:f0:ef:26:49:d6:af: 6b:5d:e8:c4:f1:d4:f7:fc:3f:01:98:8b:33:dc:15: 5d:9f:0a:28:bd:ad:e9:2e:b6:b3:ec:b2:bd:30:b3: 16:f5:b4:fd:93:62:47:73:ac:3f:fd:1a:2d:2c:85: 84:0f:23:07:61:03:80:07:5a:0f:89:de:54:47:3a: c4:32:cd:21:40:7e:a5:8c:74:ba:99:8d:6c:fa:74: 3a:e5:08:2f:96:15:40:f4:65:77:8c:d5:dd:9c:1a: c2:7a:50:d6:91:6f:a0:c5:cc:39:e4:b7:ac:c7:23: 49:3a:44:aa:48:32:0f:c4:d4:d9:3b:95:82:c4:cd: 52:c0:56:9f:2f:06:18:d1:e6:9c:79:f0:1a:9d:67: 14:4c:4e:43:57:c1:16:b8:43:fa:65:18:13:d8:4c: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:85:74:69:19:04:79:02:AA:C0:9A:C5:82:F5:42:32:97:D3:54 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:58:37:88:22:6d:b9:19:c1:28:bc:1b:3f:0e:27:61:1a:be: 1a:62:43:c0:0c:24:aa:2d:ff:91:be:69:62:ef:e1:6a:0b:10: 7d:05:55:91:a6:a4:aa:09:35:de:8a:d5:69:36:94:35:cc:2b: 45:35:67:8e:ae:21:a0:92:51:49:fb:fb:a5:f7:cd:28:9d:6b: d8:d3:d5:a5:f2:8a:49:3c:59:21:79:7d:39:af:1e:0d:29:43: a3:ac:9d:df:da:b0:d8:d8:23:52:14:8b:7f:97:8d:e8:95:a7: ab:7b:4b:d3:86:77:68:b2:ad:00:77:09:12:39:cc:9a:1d:c4: df:3c:40:73:4e:e6:03:e7:8a:3a:91:d7:d8:d1:e4:34:6b:90: d1:60:e7:77:b3:4d:53:db:03:8a:ff:07:cd:f3:80:a6:fc:64: b2:34:46:64:65:5b:4d:66:17:e2:bc:1e:82:0f:01:1d:76:e7: f4:d0:1b:00:54:04:aa:45:d1:b5:ca:b2:94:3d:b5:31:a2:55: 4c:3f:89:f7:12:57:50:5d:c3:06:41:bc:af:85:86:2a:c9:ba: 71:e2:53:d3:f0:97:d4:37:c9:d5:64:0a:86:85:2e:15:5c:1a: 70:da:aa:02:67:93:29:15:88:bd:6d:99:7f:8b:54:7b:78:84: 24:a7:78:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjUxMDE4MTk0MTI5WhcNMjUxMDI1MTk0MTI5WjAYMRYwFAYD VQQDEw02OGYzZWQ2OS1mMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+KkRO8dGenGIZtb9YCjIJGGp+2l8J5JkVkTtuc6CV+x4bf2ZiIzwdunUgwY bLsSrgf1cAU4QwC9owTBUYR+u/4mRFjJ31Cccy5wJq9NER0lrrvF5srODF1Sa2qu DFlKJg7w7yZJ1q9rXejE8dT3/D8BmIsz3BVdnwoova3pLraz7LK9MLMW9bT9k2JH c6w//RotLIWEDyMHYQOAB1oPid5URzrEMs0hQH6ljHS6mY1s+nQ65QgvlhVA9GV3 jNXdnBrCelDWkW+gxcw55LesxyNJOkSqSDIPxNTZO5WCxM1SwFafLwYY0eacefAa nWcUTE5DV8EWuEP6ZRgT2ExC9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCthXRp GQR5AqrAmsWC9UIyl9NUMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8WDeIIm25GcEovBs/DidhGr4aYkPADCSqLf+Rvmli7+FqCxB9BVWR pqSqCTXeitVpNpQ1zCtFNWeOriGgklFJ+/ul980onWvY09Wl8opJPFkheX05rx4N KUOjrJ3f2rDY2CNSFIt/l43olaere0vThndosq0AdwkSOcyaHcTfPEBzTuYD54o6 kdfY0eQ0a5DRYOd3s01T2wOK/wfN84Cm/GSyNEZkZVtNZhfivB6CDwEdduf00BsA VASqRdG1yrKUPbUxolVMP4n3EldQXcMGQbyvhYYqybpx4lPT8JfUN8nVZAqGhS4V XBpw2qoCZ5MpFYi9bZl/i1R7eIQkp3gK -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:55 2025 by rpki-client