$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: ajpPkFNQ3LdrvtFJeC2Al1jrneOqKnaR9+AwJcSnmBc= Subject key identifier: A9:C4:08:58:9D:5F:5B:3C:6C:FB:9E:E1:3A:85:FC:9A:D6:62:11:B8 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 14C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 14AB Signing time: Sat 18 Oct 2025 17:21:16 +0000 Manifest this update: Sat 18 Oct 2025 17:21:15 +0000 Manifest next update: Sat 25 Oct 2025 17:21:15 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: KiY+1lVPwkraACeGklPw6H9jWOMLpvUNO0FhG4j0xBs=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5321 (0x14c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Oct 18 17:21:15 2025 GMT Not After : Oct 25 17:21:15 2025 GMT Subject: CN=68f3cc8c-5f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:90:e9:93:88:2b:d4:e6:86:2d:da:24:7b: f4:33:dd:f6:22:31:6c:39:68:30:e5:78:18:24:82: 63:98:30:c3:1e:4c:c3:13:24:d7:ef:07:9b:c7:e0: 57:ff:8f:8d:18:1a:96:05:03:15:7d:b7:b9:ae:20: 6c:33:eb:d5:0a:26:ec:38:2e:bb:dc:85:cb:95:87: 0e:28:f0:6a:2c:0a:12:07:13:66:4d:e5:b7:48:5a: a5:72:98:50:23:97:90:7e:bc:8a:d9:36:74:6b:fe: 5f:0a:f3:38:01:dc:03:28:30:39:cb:f4:95:fa:11: 05:09:f8:b1:af:76:f1:c7:0f:c2:6e:46:25:ec:a7: 87:94:6e:dc:47:63:b1:3e:8c:33:4e:d5:dc:62:30: f9:04:47:67:e9:b7:8a:45:e9:04:86:16:aa:c4:16: e0:31:39:ca:d6:ff:20:59:77:6e:dd:a7:8b:e1:64: 31:72:93:fd:58:1f:60:6f:10:6c:84:f6:6d:95:c3: 4d:67:5c:97:fb:38:d1:29:32:97:8d:2e:81:c5:8a: 4f:e4:1c:1d:d1:46:58:dd:ae:1d:71:50:66:bc:e4: 65:60:0d:d9:85:13:3a:4f:cf:30:dd:6e:42:c8:62: 91:ba:5b:94:3f:31:cd:da:0c:e4:73:22:55:ca:1c: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:08:58:9D:5F:5B:3C:6C:FB:9E:E1:3A:85:FC:9A:D6:62:11:B8 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:99:eb:c0:2f:ee:08:f3:14:cf:d5:f4:03:41:75:ea:72:1c: e1:69:fa:94:cf:5b:74:92:ef:f8:f4:d9:ff:b3:e3:07:f5:e5: 92:a0:06:70:f7:6b:c6:fd:7d:2d:6e:b5:4d:22:dd:de:db:0a: 87:0a:8e:74:ae:91:ec:c3:91:22:b4:63:c5:26:97:84:fb:64: 5e:57:35:83:15:96:69:82:d4:7e:b2:ad:c7:13:0b:38:b6:ad: 1c:7f:97:af:76:75:ae:b8:55:e3:93:53:ab:b5:7d:e1:0d:16: bc:36:c5:5c:0a:82:3e:a0:96:18:21:11:c6:13:27:d2:19:d0: 56:ea:fa:53:ed:19:07:0a:62:55:a2:00:43:54:8a:c8:dd:d8: 34:99:35:04:1b:70:ef:19:92:d3:16:75:dc:68:61:74:16:20: 5f:f9:3c:d2:41:ff:8c:47:84:d2:27:bc:80:98:21:f9:86:19: fb:60:79:bb:49:62:6e:1f:a4:78:06:d5:5c:40:11:04:51:9d: b9:4e:e0:56:87:04:ec:21:e5:dd:51:8e:7c:9e:7f:3c:a8:45: e0:cf:ba:00:e3:cc:ca:b9:1d:32:7e:a2:54:a1:01:af:4a:31: 19:0f:e9:a3:a5:6d:28:0b:16:4b:24:00:8c:87:15:4a:ad:bb: 00:08:70:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUxMDE4MTcyMTE1WhcNMjUxMDI1MTcyMTE1WjAYMRYwFAYD VQQDEw02OGYzY2M4Yy01ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1mQ6ZOIK9Tmhi3aJHv0M932IjFsOWgw5XgYJIJjmDDDHkzDEyTX7webx+BX /4+NGBqWBQMVfbe5riBsM+vVCibsOC673IXLlYcOKPBqLAoSBxNmTeW3SFqlcphQ I5eQfryK2TZ0a/5fCvM4AdwDKDA5y/SV+hEFCfixr3bxxw/CbkYl7KeHlG7cR2Ox PowzTtXcYjD5BEdn6beKRekEhhaqxBbgMTnK1v8gWXdu3aeL4WQxcpP9WB9gbxBs hPZtlcNNZ1yX+zjRKTKXjS6BxYpP5Bwd0UZY3a4dcVBmvORlYA3ZhRM6T88w3W5C yGKRuluUPzHN2gzkcyJVyhyuCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnECFid X1s8bPue4TqF/JrWYhG4MB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBimevAL+4I8xTP1fQDQXXqchzhafqUz1t0ku/49Nn/s+MH9eWSoAZw 92vG/X0tbrVNIt3e2wqHCo50rpHsw5EitGPFJpeE+2ReVzWDFZZpgtR+sq3HEws4 tq0cf5evdnWuuFXjk1OrtX3hDRa8NsVcCoI+oJYYIRHGEyfSGdBW6vpT7RkHCmJV ogBDVIrI3dg0mTUEG3DvGZLTFnXcaGF0FiBf+TzSQf+MR4TSJ7yAmCH5hhn7YHm7 SWJuH6R4BtVcQBEEUZ25TuBWhwTsIeXdUY58nn88qEXgz7oA48zKuR0yfqJUoQGv SjEZD+mjpW0oCxZLJACMhxVKrbsACHBV -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:52 2025 by rpki-client