$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json) Hash identifier: 4u0AyXNc0Y3/8GUzadJk9XEnilUsWw3m7c/dlAl6W/E= Subject key identifier: 27:EE:E7:6F:22:5B:D9:75:84:2C:7E:42:6B:99:4A:87:27:6C:A4:4E Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Certificate serial: 180D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft Manifest number: 17F4 Signing time: Sat 18 Oct 2025 16:57:10 +0000 Manifest this update: Sat 18 Oct 2025 16:57:10 +0000 Manifest next update: Sat 25 Oct 2025 16:57:10 +0000 Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: 5q8jG29cmyzXG5z/5zx8Yfc8kNaqyieHe9QwZb2XpzA=) 2: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=) 3: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6157 (0x180d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Validity Not Before: Oct 18 16:57:10 2025 GMT Not After : Oct 25 16:57:10 2025 GMT Subject: CN=68f3c6e6-72e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:6c:60:41:a4:cb:23:ae:29:c3:cb:ef:fc: cf:37:25:97:9e:72:a5:98:4d:b2:5e:f1:7b:fb:9a: 61:16:d2:e2:9c:c5:81:0f:bd:81:2b:7c:0c:5f:ae: 23:04:78:59:1a:d7:e8:7c:84:af:7e:90:6d:a2:fd: 13:73:c7:59:d4:c5:9f:66:0d:8e:4a:0a:51:dc:3f: f0:bc:af:31:f6:19:05:11:e8:b1:89:36:58:10:d8: fb:1c:3c:c3:22:c7:c4:e7:f9:c2:f5:cf:5d:8d:e2: cf:ec:ae:77:22:3f:ff:2f:9b:31:0f:03:2a:0b:02: cd:f9:7a:76:10:06:81:e3:57:fe:a2:e9:5c:c4:31: 75:b7:86:98:9f:af:b0:45:45:18:a1:95:2f:32:7a: 9e:0d:27:66:61:c6:d0:b6:51:c8:24:84:ec:95:cc: 43:1e:19:a6:8c:d3:d0:cc:0f:dd:21:d6:bc:fb:3d: 8c:ea:67:b1:c3:19:ef:32:fb:a4:e9:6b:c7:67:c6: 46:5d:57:ca:4a:eb:0b:22:5c:ff:15:c5:eb:63:24: a5:35:3c:67:7d:e4:ba:e5:f1:cc:18:35:57:d0:f5: 06:4d:a2:41:69:91:bd:4b:8c:03:eb:d2:6e:20:e4: ff:2f:40:f2:9b:a5:35:ae:d0:12:d8:0d:b5:34:75: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EE:E7:6F:22:5B:D9:75:84:2C:7E:42:6B:99:4A:87:27:6C:A4:4E X509v3 Authority Key Identifier: keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:99:03:df:cd:59:c4:61:70:3b:42:f0:36:0d:14:14:78:99: 15:d9:52:ac:19:18:7b:71:5e:67:17:99:1a:bd:ec:51:ce:ca: 02:db:2a:82:10:23:1d:75:29:34:91:58:d2:21:59:81:89:90: 2a:59:44:cb:be:db:0f:52:08:49:b3:04:4c:b4:0c:5c:12:24: a5:1c:0f:8f:e4:6b:e4:51:5c:69:7a:74:b3:a2:67:c7:57:75: aa:ee:87:34:bc:4f:62:a3:a2:86:51:b7:77:97:fc:a3:ac:00: 01:4c:a9:68:44:05:df:ac:fd:01:e8:2e:ee:a8:d3:39:f8:d8: 77:c1:a2:2f:05:4e:04:4d:69:d5:84:0b:d7:57:6f:c0:cd:2c: 0a:11:1a:21:dc:79:36:f2:91:7d:78:72:81:2b:6c:f0:e9:2b: a0:12:c1:70:cb:ae:c3:e3:08:25:62:7e:f7:53:b1:9b:f3:89: 06:53:67:40:42:d7:9d:26:c4:d9:66:e1:92:dd:61:e2:a5:8f: d0:48:eb:29:f6:93:c8:48:a1:76:39:f7:6b:45:d8:0f:a9:fd: af:f7:cd:da:9a:d4:73:80:ec:c4:b5:8d:cb:6d:c1:8f:0e:39: 28:76:53:0c:f7:97:30:95:32:e2:0e:f4:35:b4:70:27:24:50: 8a:65:c8:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3 MTJBQzE0MDcwHhcNMjUxMDE4MTY1NzEwWhcNMjUxMDI1MTY1NzEwWjAYMRYwFAYD VQQDEw02OGYzYzZlNi03MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2hsYEGkyyOuKcPL7/zPNyWXnnKlmE2yXvF7+5phFtLinMWBD72BK3wMX64j BHhZGtfofISvfpBtov0Tc8dZ1MWfZg2OSgpR3D/wvK8x9hkFEeixiTZYENj7HDzD IsfE5/nC9c9djeLP7K53Ij//L5sxDwMqCwLN+Xp2EAaB41f+oulcxDF1t4aYn6+w RUUYoZUvMnqeDSdmYcbQtlHIJITslcxDHhmmjNPQzA/dIda8+z2M6mexwxnvMvuk 6WvHZ8ZGXVfKSusLIlz/FcXrYySlNTxnfeS65fHMGDVX0PUGTaJBaZG9S4wD69Ju IOT/L0Dym6U1rtAS2A21NHV7CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfu528i W9l1hCx+QmuZSocnbKROMB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDREQi8zQTMxNURDRUNEMDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3Vu Zlo4N2N0Xzk3Q0J4S3NGQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfmQPfzVnEYXA7QvA2DRQUeJkV2VKsGRh7cV5nF5kavexRzsoC2yqC ECMddSk0kVjSIVmBiZAqWUTLvtsPUghJswRMtAxcEiSlHA+P5GvkUVxpenSzomfH V3Wq7oc0vE9io6KGUbd3l/yjrAABTKloRAXfrP0B6C7uqNM5+Nh3waIvBU4ETWnV hAvXV2/AzSwKERoh3Hk28pF9eHKBK2zw6SugEsFwy67D4wglYn73U7Gb84kGU2dA QtedJsTZZuGS3WHipY/QSOsp9pPISKF2OfdrRdgPqf2v983amtRzgOzEtY3LbcGP DjkodlMM95cwlTLiDvQ1tHAnJFCKZcgB -----END CERTIFICATE-----Generated at Mon Oct 20 04:14:56 2025 by rpki-client