$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: W1PFO64mq1QIhSYjRnJBcZpaUaeLIeg1abcgxa9wPrY= Subject key identifier: 7B:23:49:DF:08:FC:A9:3E:5B:61:9F:85:67:B3:BA:86:E7:03:E7:E7 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 040D Signing time: Sun 19 Oct 2025 02:20:51 +0000 Manifest this update: Sun 19 Oct 2025 02:20:50 +0000 Manifest next update: Sun 26 Oct 2025 02:20:50 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: MHPtCXOEvR3A1V/YuwooGTASSFZlX4qOSPuaTNzEfSU=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Oct 19 02:20:50 2025 GMT Not After : Oct 26 02:20:50 2025 GMT Subject: CN=68f44b03-5129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:fb:2e:ba:48:d3:99:9d:c5:02:ff:1a:34: ac:7a:65:6b:64:16:c9:39:1a:09:dc:e4:77:6d:2c: c4:82:7e:f6:fe:3c:bd:19:97:0e:b4:45:46:e3:35: 59:21:ba:10:d5:29:23:93:6f:dd:a3:c1:34:f1:16: 98:6b:1c:fe:d8:ba:17:28:a5:71:b8:5c:07:1e:1a: 10:60:31:e3:8d:83:66:a4:26:01:89:36:da:0a:3e: f6:c0:29:89:b7:32:b8:ef:d2:6a:31:e7:08:7e:cb: 81:c1:98:9d:3c:d4:67:7f:46:62:85:d3:5d:c4:82: fa:5b:e8:6e:6c:73:66:f9:a1:d1:65:b5:4d:36:ac: e3:51:a4:b7:5a:cf:08:07:94:8d:c2:c0:f2:84:ad: 3a:b6:4c:be:9b:43:94:d7:04:c5:b5:9f:4b:3b:2f: 3c:4e:6e:da:2c:07:f1:e0:8f:62:35:7e:fa:16:88: d6:8b:6b:a4:12:a6:92:d9:42:cb:73:3a:8c:68:9f: 76:88:f3:e3:cc:d9:75:9b:26:7f:40:8d:d4:a5:69: 05:89:c2:d3:e5:b9:94:fc:52:51:ea:0f:bd:c6:28: 9d:7e:27:d4:b3:06:d0:75:4a:c0:7b:bc:18:35:11: be:c2:34:16:b6:db:d6:9f:48:42:09:51:93:47:ab: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:23:49:DF:08:FC:A9:3E:5B:61:9F:85:67:B3:BA:86:E7:03:E7:E7 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cd:7c:4c:57:af:8f:a3:23:e9:de:95:1c:18:d6:68:42:4e: 59:7a:fa:66:e8:d6:13:53:b1:9e:4a:c2:7e:67:7a:cb:69:14: 56:fa:f9:ae:cf:e3:99:e1:ab:4a:2b:7f:c5:e0:68:b3:fd:28: b2:d5:5a:4f:dc:67:fe:79:08:45:15:cd:77:de:e2:13:f2:90: 36:03:27:c2:db:d7:b6:e9:45:eb:c5:84:74:46:01:cd:c6:6c: 44:fe:7a:20:48:3e:2a:bc:72:5a:1a:4f:9a:cc:46:c4:eb:37: 2b:12:d7:af:f6:b3:f0:a7:db:25:4c:e2:98:d1:72:04:b3:a1: 48:ee:a8:7f:29:ee:9f:a1:41:a4:c9:e3:cc:77:c7:46:7a:5b: 83:8f:ac:cd:43:be:9e:95:06:7e:27:80:e6:d5:93:13:e6:d5: a4:de:71:eb:6c:21:90:fe:cc:ad:88:55:67:87:15:e6:a6:f3: a8:36:fb:1f:47:9f:bc:21:bd:48:bf:c1:1a:75:5c:7a:18:2a: 35:59:67:c4:04:31:73:60:a5:58:09:0a:80:ed:0a:33:b2:85: a2:74:29:a1:af:1a:06:67:f2:c9:06:2a:9a:8d:c4:53:cc:5c: 0e:7e:d3:3b:69:e2:ed:98:e9:dd:6a:af:4e:e5:76:ba:1c:0d: 51:64:2f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUxMDE5MDIyMDUwWhcNMjUxMDI2MDIyMDUwWjAYMRYwFAYD VQQDEw02OGY0NGIwMy01MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt/7LrpI05mdxQL/GjSsemVrZBbJORoJ3OR3bSzEgn72/jy9GZcOtEVG4zVZ IboQ1Skjk2/do8E08RaYaxz+2LoXKKVxuFwHHhoQYDHjjYNmpCYBiTbaCj72wCmJ tzK479JqMecIfsuBwZidPNRnf0ZihdNdxIL6W+hubHNm+aHRZbVNNqzjUaS3Ws8I B5SNwsDyhK06tky+m0OU1wTFtZ9LOy88Tm7aLAfx4I9iNX76FojWi2ukEqaS2ULL czqMaJ92iPPjzNl1myZ/QI3UpWkFicLT5bmU/FJR6g+9xiidfifUswbQdUrAe7wY NRG+wjQWttvWn0hCCVGTR6uNNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsjSd8I /Kk+W2GfhWezuobnA+fnMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCczXxMV6+PoyPp3pUcGNZoQk5Zevpm6NYTU7GeSsJ+Z3rLaRRW+vmu z+OZ4atKK3/F4Giz/Siy1VpP3Gf+eQhFFc133uIT8pA2AyfC29e26UXrxYR0RgHN xmxE/nogSD4qvHJaGk+azEbE6zcrEtev9rPwp9slTOKY0XIEs6FI7qh/Ke6foUGk yePMd8dGeluDj6zNQ76elQZ+J4Dm1ZMT5tWk3nHrbCGQ/sytiFVnhxXmpvOoNvsf R5+8Ib1Iv8EadVx6GCo1WWfEBDFzYKVYCQqA7QozsoWidCmhrxoGZ/LJBiqajcRT zFwOftM7aeLtmOndaq9O5Xa6HA1RZC9m -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:59 2025 by rpki-client