$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json) Hash identifier: hSDzefk2zYxyvKkQjMje0PnpYLVUcuSmA7UPsq4XeII= Subject key identifier: AD:A0:4F:7D:CA:53:45:85:04:61:E7:D6:77:5E:14:5A:0A:59:F5:D1 Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft Manifest number: 0699 Signing time: Sat 18 Oct 2025 14:53:45 +0000 Manifest this update: Sat 18 Oct 2025 14:53:44 +0000 Manifest next update: Sat 25 Oct 2025 14:53:44 +0000 Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: FhhkfDpYVFtcCIU9l7SemBR0+JkBfPVXRfl3KKsvzH0=) 2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: oxmHGKf/WSOT7WzpjdLiOn3oXWfHw/6ypS3n/mBbPHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Validity Not Before: Oct 18 14:53:44 2025 GMT Not After : Oct 25 14:53:44 2025 GMT Subject: CN=68f3a9f8-0873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:a5:53:ac:7f:a3:85:b8:b3:be:1f:20:df: ec:a6:52:4b:44:95:07:61:bf:91:ca:f4:00:c2:c6: 8b:c8:95:d6:99:36:97:15:51:c4:6c:bb:f2:47:8e: 5a:ab:01:00:5f:49:89:bd:60:44:95:b0:f1:20:c6: bf:54:42:17:59:b5:d4:60:72:b5:4a:ad:29:0b:77: a0:f5:bd:f5:71:cc:e0:22:81:2a:3f:ad:9b:ca:13: ea:a7:a4:ca:82:b1:3d:48:97:d6:96:3d:83:27:67: c7:03:b3:ff:47:dc:6b:c8:00:6c:af:89:60:18:bf: 9e:68:52:a8:b9:76:a0:8f:ae:67:16:71:56:ef:70: 5e:e5:fa:29:2a:f2:9b:c5:d6:bc:92:e9:eb:c8:cc: eb:3e:5f:c3:f5:f8:55:d1:a9:ec:24:c1:73:25:ba: e3:81:9a:5a:42:ee:6a:d4:cc:80:58:b6:b5:79:64: ae:a8:b6:a1:db:2d:11:bb:72:e6:c6:d6:f6:0f:dd: ff:ba:a7:82:c2:3c:83:fa:92:14:c4:ad:92:54:3f: b9:6b:ca:cc:be:99:a5:b4:66:50:c4:8e:db:65:eb: a3:7a:3a:d5:03:e3:ba:12:96:2f:dc:50:a7:82:37: 26:8f:75:a1:e1:3e:a5:9f:da:92:e1:9e:f6:65:53: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A0:4F:7D:CA:53:45:85:04:61:E7:D6:77:5E:14:5A:0A:59:F5:D1 X509v3 Authority Key Identifier: keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:65:ca:0c:e3:34:d2:e6:8f:83:fb:98:b0:db:b9:ce:e5:88: 00:96:e2:a4:d5:a2:6d:d5:69:a5:bb:36:76:76:77:31:6a:8c: 9b:d3:46:a6:47:ff:e1:a7:3a:b7:78:89:7b:54:2a:fb:0c:83: 27:4c:ae:f3:5f:7b:0c:d2:c7:67:88:b5:83:fa:45:fa:2f:09: 7a:cd:99:9b:0d:6e:9c:46:97:4b:e7:bd:20:66:34:e5:41:da: 44:a7:a0:2e:58:52:b6:c5:4d:e7:ba:94:29:82:e2:9f:28:94: d4:ac:b2:c2:b7:1e:bb:67:dc:15:55:a8:f2:d5:c2:39:d8:6d: c6:ba:a7:e4:5d:9e:11:e4:9f:8c:59:bb:16:1a:ac:7d:2d:d8: b6:38:1f:d0:de:51:5e:f8:18:f2:b5:14:a7:c6:b7:13:51:da: 9a:2f:c2:49:8e:7c:9f:a9:a0:e7:9d:9f:82:ce:7b:29:97:19: 97:30:c0:51:49:00:a2:55:c2:b9:ab:ae:9e:c0:21:2f:96:c6: c6:15:22:23:e9:de:2a:ee:58:5f:d0:d8:bf:c6:30:01:61:6c: c5:0e:08:67:47:cc:b4:8a:62:b8:92:4d:4d:6c:f0:f1:32:4e: 22:6a:60:81:83:56:b8:7d:28:ba:44:6c:4b:bb:4e:5c:eb:0f: 8e:a3:44:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4 MUIxRDhERkQwHhcNMjUxMDE4MTQ1MzQ0WhcNMjUxMDI1MTQ1MzQ0WjAYMRYwFAYD VQQDEw02OGYzYTlmOC0wODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU6lU6x/o4W4s74fIN/splJLRJUHYb+RyvQAwsaLyJXWmTaXFVHEbLvyR45a qwEAX0mJvWBElbDxIMa/VEIXWbXUYHK1Sq0pC3eg9b31cczgIoEqP62byhPqp6TK grE9SJfWlj2DJ2fHA7P/R9xryABsr4lgGL+eaFKouXagj65nFnFW73Be5fopKvKb xda8kunryMzrPl/D9fhV0ansJMFzJbrjgZpaQu5q1MyAWLa1eWSuqLah2y0Ru3Lm xtb2D93/uqeCwjyD+pIUxK2SVD+5a8rMvpmltGZQxI7bZeujejrVA+O6EpYv3FCn gjcmj3Wh4T6ln9qS4Z72ZVMyHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2gT33K U0WFBGHn1ndeFFoKWfXRMB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDRFMC84MzQ1NzExNjhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldo NmlBcFpwbXVtU2lCc2RqZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ZcoM4zTS5o+D+5iw27nO5YgAluKk1aJt1WmluzZ2dncxaoyb00am R//hpzq3eIl7VCr7DIMnTK7zX3sM0sdniLWD+kX6Lwl6zZmbDW6cRpdL570gZjTl QdpEp6AuWFK2xU3nupQpguKfKJTUrLLCtx67Z9wVVajy1cI52G3GuqfkXZ4R5J+M WbsWGqx9Ldi2OB/Q3lFe+BjytRSnxrcTUdqaL8JJjnyfqaDnnZ+CznsplxmXMMBR SQCiVcK5q66ewCEvlsbGFSIj6d4q7lhf0Ni/xjABYWzFDghnR8y0imK4kk1NbPDx Mk4iamCBg1a4fSi6RGxLu05c6w+Oo0Rz -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:08 2025 by rpki-client