$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: xlIksPastMZl3MxaXfAVnhKX/L4V2xtpEazYF5Oy9JE= Subject key identifier: 02:03:F4:35:01:D4:B9:28:D1:0A:C6:72:C0:9E:73:97:7F:CF:59:0C Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 014D Signing time: Sun 19 Oct 2025 07:02:54 +0000 Manifest this update: Sun 19 Oct 2025 07:02:54 +0000 Manifest next update: Sun 26 Oct 2025 07:02:54 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: H1FQChPQ9AS2sPMF3iq9oQ+bEHbZXPQAbC5mthbxyy4=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Oct 19 07:02:54 2025 GMT Not After : Oct 26 07:02:54 2025 GMT Subject: CN=68f48d1e-8ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:34:bd:b7:40:14:46:6f:b5:94:dd:76:cc: ca:55:9f:96:65:cf:d7:30:7c:d2:75:3a:f6:97:b5: dc:a0:14:76:a4:b0:50:d5:b1:28:70:84:96:e6:96: c4:e5:b4:ca:36:6f:67:ba:00:0c:ad:d5:c5:7e:de: b1:d5:1f:b2:e1:33:dd:b0:f4:72:69:a0:b0:ab:79: f1:d8:eb:7c:eb:b7:93:2b:98:a4:2e:d5:c5:c4:d1: 73:91:67:64:04:dc:5c:4c:d5:75:65:72:e7:82:eb: 2c:8b:3a:75:f9:23:6a:55:d6:ce:7e:8f:f7:11:58: 7b:42:d8:f9:64:cd:c6:70:69:8c:e2:47:e5:f5:f9: 78:af:8f:c4:bd:e4:73:8a:8a:9a:ee:2b:e7:d6:12: 8f:ec:78:f8:a4:fe:a2:98:c0:80:2c:e1:ac:ac:27: 6c:11:3c:61:f9:b0:b6:21:0a:36:92:1c:46:c0:c2: ee:9b:75:b1:7f:a3:55:d1:d9:97:4b:c7:de:e7:13: b9:1f:26:41:61:c4:31:be:85:85:68:a0:67:5a:28: 9a:ca:2c:c5:22:3c:a5:b2:fd:a4:d2:12:2a:e2:24: 69:b7:20:66:12:62:b6:23:96:78:7d:e1:d6:c9:1a: af:a0:ef:a8:51:0a:5b:60:78:e7:7f:af:8e:45:1f: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:F4:35:01:D4:B9:28:D1:0A:C6:72:C0:9E:73:97:7F:CF:59:0C X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:84:7f:71:55:5f:e2:8c:cb:31:45:3d:b8:58:34:cf:db:9b: 9e:79:d5:73:ee:73:96:91:7d:18:6d:b8:60:85:83:f9:0b:6a: ab:81:57:8e:00:68:ba:8b:33:34:4e:71:ba:ed:4b:4a:24:67: 92:67:9d:be:79:3d:2c:1d:38:c2:cd:3d:1b:51:b7:09:e9:5a: a7:b4:13:d7:f3:b1:7f:01:16:7d:8a:52:bb:5f:85:c3:cc:84: 04:29:c3:a1:aa:b4:05:8f:1d:2e:9d:c5:f4:bc:29:d0:3b:bd: fb:60:54:b1:3c:0f:6d:da:44:44:70:df:95:6f:de:3d:69:1b: 2f:f7:63:dd:36:76:f4:b2:54:43:d9:50:40:7d:3f:e2:53:8d: 6b:fd:b1:fe:4d:66:c2:00:9b:84:c2:23:c8:47:67:eb:ba:4a: 53:c7:ca:40:84:3c:c6:b4:cf:5f:17:1b:68:69:a3:7e:3e:06: 12:47:7b:d8:50:6a:30:0c:f1:ff:9a:86:4b:8d:ec:c9:55:35: 21:fc:b4:5f:80:fa:84:85:e9:56:d7:f1:02:6f:1c:ec:72:e4: dd:eb:ea:c9:cc:4f:d1:8b:09:96:ff:bb:f9:b6:e0:a3:06:e4: 9b:96:7f:ea:6c:50:86:c7:c7:95:90:16:c3:40:a9:26:f2:9a: bb:df:17:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUxMDE5MDcwMjU0WhcNMjUxMDI2MDcwMjU0WjAYMRYwFAYD VQQDEw02OGY0OGQxZS04ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TI0vbdAFEZvtZTddszKVZ+WZc/XMHzSdTr2l7XcoBR2pLBQ1bEocISW5pbE 5bTKNm9nugAMrdXFft6x1R+y4TPdsPRyaaCwq3nx2Ot867eTK5ikLtXFxNFzkWdk BNxcTNV1ZXLngussizp1+SNqVdbOfo/3EVh7Qtj5ZM3GcGmM4kfl9fl4r4/EveRz ioqa7ivn1hKP7Hj4pP6imMCALOGsrCdsETxh+bC2IQo2khxGwMLum3Wxf6NV0dmX S8fe5xO5HyZBYcQxvoWFaKBnWiiayizFIjylsv2k0hIq4iRptyBmEmK2I5Z4feHW yRqvoO+oUQpbYHjnf6+ORR9XTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAID9DUB 1Lko0QrGcsCec5d/z1kMMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArhH9xVV/ijMsxRT24WDTP25ueedVz7nOWkX0YbbhghYP5C2qrgVeO AGi6izM0TnG67UtKJGeSZ52+eT0sHTjCzT0bUbcJ6VqntBPX87F/ARZ9ilK7X4XD zIQEKcOhqrQFjx0uncX0vCnQO737YFSxPA9t2kREcN+Vb949aRsv92PdNnb0slRD 2VBAfT/iU41r/bH+TWbCAJuEwiPIR2frukpTx8pAhDzGtM9fFxtoaaN+PgYSR3vY UGowDPH/moZLjezJVTUh/LRfgPqEhelW1/ECbxzscuTd6+rJzE/RiwmW/7v5tuCj BuSbln/qbFCGx8eVkBbDQKkm8pq73xcZ -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:04 2025 by rpki-client