$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft File: B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json) Hash identifier: T0hAJsh+fRQePivstIr2R8l1/FcY6Pumpy6QaG5BLfc= Subject key identifier: C2:06:8B:84:C2:16:FE:7C:61:00:8D:4A:85:4C:B6:C6:4C:4E:56:26 Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59 Certificate issuer: /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft Manifest number: 0230 Signing time: Sun 19 Oct 2025 04:09:16 +0000 Manifest this update: Sun 19 Oct 2025 04:09:16 +0000 Manifest next update: Sun 26 Oct 2025 04:09:16 +0000 Files and hashes: 1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: Zaa+315UIXDtrKS99aY7i7a+kpRFIue4ME+WUQArfSY=) 2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: lJnZtZDQNzdO0qp1p8vNJySg5lDyaZrljj6ja2HApOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659 Validity Not Before: Oct 19 04:09:16 2025 GMT Not After : Oct 26 04:09:16 2025 GMT Subject: CN=68f4646c-4c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:92:b2:ce:5c:63:d3:73:23:ab:a1:8b:18: 72:1a:04:69:f7:a2:e5:df:ea:14:dd:d2:09:ae:ef: 0f:6b:1b:12:78:f8:3f:c4:d7:8c:a8:4e:02:59:cf: da:38:d8:d5:ce:6d:4f:32:e6:64:82:92:f3:32:4c: ef:d4:e5:3a:77:cf:a0:f2:12:3b:b7:e3:87:00:76: cc:c8:b2:82:05:65:e3:b7:4f:29:0f:e9:80:86:8b: 94:0e:4d:fd:09:45:98:17:e1:32:fa:89:7b:85:b9: 57:0a:10:11:7a:31:8a:34:21:a1:09:b0:b1:6b:6f: 07:29:09:15:96:a0:fd:aa:e5:37:0d:5d:c2:af:f3: 31:3f:35:26:38:04:e4:ee:de:17:4b:63:db:74:39: 26:5d:68:22:1e:d9:f6:76:24:04:10:00:de:5a:a1: 4b:c7:b0:6a:d7:f8:32:a8:f6:30:ee:65:bc:97:71: 77:ad:c4:4d:e7:b3:2f:03:7d:22:b6:10:0e:d6:a5: 4f:b9:9b:4d:4d:4c:74:f6:cf:3d:42:a9:b4:84:7d: 09:0e:04:14:57:d3:d6:f8:95:96:5c:34:89:d7:ae: 99:08:13:62:0f:c5:ba:cb:a0:97:90:14:1c:79:bb: 62:4a:0c:8e:e5:19:d9:f6:86:8d:24:ce:a5:2b:ac: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:8B:84:C2:16:FE:7C:61:00:8D:4A:85:4C:B6:C6:4C:4E:56:26 X509v3 Authority Key Identifier: keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:8b:70:ed:49:30:38:0e:cd:54:20:f3:07:14:e2:74:3b:cb: 3f:07:ba:99:fa:3d:0b:ac:b9:dc:37:1e:2c:91:11:38:eb:78: f2:cf:8a:ae:0a:70:a7:f6:b3:c4:0c:ad:ba:df:03:80:f4:dd: 02:75:a0:88:a0:b2:4a:39:be:34:f8:f9:b9:f2:7f:ec:fd:e8: 1a:e4:e4:1d:11:32:2e:42:0e:87:bc:e8:01:dd:82:cf:26:c4: 3b:8d:23:c6:e7:83:73:76:cf:5c:97:be:99:eb:7f:27:16:ca: b2:99:9a:64:7b:80:21:08:85:e0:6c:f6:93:4b:47:c0:87:29: 1b:82:32:33:3f:70:3c:ac:8c:c0:64:53:aa:bf:39:05:ae:81: 09:ff:f3:e8:c7:be:09:ca:78:97:11:20:9d:78:f3:86:2f:b8: 81:53:78:6c:61:4e:78:02:50:88:f8:17:45:fa:6d:d1:bc:cb: 8d:a1:ee:e2:0e:f8:66:4a:d3:39:8f:10:50:b4:86:ab:d6:83: e9:4c:e8:32:bb:38:3e:64:30:73:b6:16:d4:ec:44:0c:69:49: db:21:9f:28:d6:43:f5:c4:6e:3d:a3:9f:55:15:89:4f:eb:d7: 9c:fe:b1:d8:ab:1a:16:75:17:40:c1:3a:54:e8:b2:63:f5:ec: 7f:bf:28:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZFNDkxMTAvBgNVBAUTKDA3QjYzQjVEQzE2QzdCNEFFOTdBQkQwMDg2QTMxNTZE NUQ3NDQ2NTkwHhcNMjUxMDE5MDQwOTE2WhcNMjUxMDI2MDQwOTE2WjAYMRYwFAYD VQQDEw02OGY0NjQ2Yy00YzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ySSss5cY9NzI6uhixhyGgRp96Ll3+oU3dIJru8PaxsSePg/xNeMqE4CWc/a ONjVzm1PMuZkgpLzMkzv1OU6d8+g8hI7t+OHAHbMyLKCBWXjt08pD+mAhouUDk39 CUWYF+Ey+ol7hblXChARejGKNCGhCbCxa28HKQkVlqD9quU3DV3Cr/MxPzUmOATk 7t4XS2PbdDkmXWgiHtn2diQEEADeWqFLx7Bq1/gyqPYw7mW8l3F3rcRN57MvA30i thAO1qVPuZtNTUx09s89Qqm0hH0JDgQUV9PW+JWWXDSJ166ZCBNiD8W6y6CXkBQc ebtiSgyO5RnZ9oaNJM6lK6x3QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIGi4TC Fv58YQCNSoVMtsZMTlYmMB8GA1UdIwQYMBaAFAe2O13BbHtK6Xq9AIajFW1ddEZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkU0OS9CMzNBQTdBNjUz ODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2UwcnBlcjBBaHFNVmJWMTBS bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3WTdYY0ZzZTBycGVyMEFocU1WYlYxMFJsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkU0OS9CMzNBQTdBNjUzODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2Uw cnBlcjBBaHFNVmJWMTBSbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAji3DtSTA4Ds1UIPMHFOJ0O8s/B7qZ+j0LrLncNx4skRE463jyz4qu CnCn9rPEDK263wOA9N0CdaCIoLJKOb40+Pm58n/s/ega5OQdETIuQg6HvOgB3YLP JsQ7jSPG54Nzds9cl76Z638nFsqymZpke4AhCIXgbPaTS0fAhykbgjIzP3A8rIzA ZFOqvzkFroEJ//Pox74JyniXESCdePOGL7iBU3hsYU54AlCI+BdF+m3RvMuNoe7i DvhmStM5jxBQtIar1oPpTOgyuzg+ZDBzthbU7EQMaUnbIZ8o1kP1xG49o59VFYlP 69ec/rHYqxoWdRdAwTpU6LJj9ex/vyi6 -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:11 2025 by rpki-client