$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: D2DMmi0D4BGYEy7C8w6HRPU4AwI6T8RxRBslJ/g9uGU= Subject key identifier: F0:95:F7:08:0E:DD:F4:29:72:01:8E:F1:1F:FD:C7:D6:1D:51:4D:3C Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 350B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 34EC Signing time: Sat 18 Oct 2025 15:25:50 +0000 Manifest this update: Sat 18 Oct 2025 15:25:50 +0000 Manifest next update: Sat 25 Oct 2025 15:25:50 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: 54p/SGvUXwElIWXaJswOjp6D5SDj4N3mxMQOBe+acuk=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13579 (0x350b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Oct 18 15:25:50 2025 GMT Not After : Oct 25 15:25:50 2025 GMT Subject: CN=68f3b17e-0ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:b6:1e:8c:80:db:77:fa:11:cc:b9:0e:1e: 4e:08:b5:66:a9:29:24:a7:0f:b4:68:7f:67:41:dc: e4:35:62:4d:f6:97:ef:38:a5:b1:6f:c7:d4:e0:1c: d0:04:59:fa:7e:cf:b7:a7:5a:27:ec:49:14:ec:b6: 71:9c:9e:90:f7:f3:f5:4b:c0:c8:43:56:05:7e:f3: 62:6d:38:45:34:f7:03:b9:90:a2:fd:a9:5a:2b:7a: 42:27:8a:29:bb:ec:65:81:11:bb:3c:7a:d4:01:b0: b5:e3:ac:c1:03:1f:8d:6a:83:0c:c0:b0:a7:4a:e0: 82:6e:12:3b:88:10:e5:2c:1c:b0:53:2e:9a:a8:12: 35:a8:f9:ce:21:8b:ba:d4:89:bb:74:d2:22:7f:c8: da:66:ff:cb:06:cb:ee:64:42:bb:09:ab:75:7c:ae: 2f:71:f9:8a:2d:4d:51:cf:61:41:ae:3d:cf:f3:6f: 65:fa:8d:1e:86:fc:fa:f7:9b:11:4a:e5:fa:06:aa: fb:aa:02:11:50:cf:75:a6:cb:8b:2a:3b:30:a6:4c: ff:ac:d0:59:fa:b0:8a:7c:18:ab:b2:dc:9a:fa:73: 75:1a:26:8e:c8:fc:d9:f6:56:99:2a:2b:5e:c5:5a: 02:eb:2a:89:48:ba:c4:c1:eb:91:90:4a:f3:03:bf: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:F7:08:0E:DD:F4:29:72:01:8E:F1:1F:FD:C7:D6:1D:51:4D:3C X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:01:84:43:12:ed:f8:b5:87:ee:1b:e4:4a:5f:48:17:b0:d3: 39:63:57:fc:6a:37:d1:33:28:ef:c7:7b:ee:12:55:1c:4a:e9: 68:7a:ed:30:21:d0:5a:7d:37:32:1c:4f:af:d9:95:0f:2c:35: ac:4d:f7:6e:e9:3e:f3:2c:52:d3:fa:ee:54:83:ee:b8:e3:4c: b1:fa:8c:32:6f:b2:68:f1:44:79:52:73:8e:5b:cd:bd:19:d9: ed:77:5f:70:2a:fe:75:bd:90:d1:eb:04:30:fc:6f:55:59:16: cb:26:f7:00:16:19:76:a2:cd:7e:cb:ac:c0:c3:dc:df:ec:22: f7:ab:d6:70:ee:17:5f:09:19:32:0a:f3:01:b9:fa:d8:92:0e: 78:bb:bb:65:6f:85:43:56:f6:2a:54:94:11:90:ef:62:61:6b: b3:f9:af:c5:78:ed:d8:8c:bd:80:30:da:65:41:df:5a:4e:ad: d8:00:2f:e2:9f:0e:7a:1a:02:8b:ee:35:4e:63:e6:e5:56:5e: b7:af:2e:9f:3c:a1:29:93:e0:ce:d9:a8:77:97:b4:b2:19:28: 5d:69:90:aa:71:68:1a:04:32:bf:1e:e6:93:ff:0e:d8:1e:df: 53:ff:3b:39:f5:d2:b4:c2:9a:91:82:bf:5d:6b:a0:39:2d:8f: 78:03:c9:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUxMDE4MTUyNTUwWhcNMjUxMDI1MTUyNTUwWjAYMRYwFAYD VQQDEw02OGYzYjE3ZS0wYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WG2HoyA23f6Ecy5Dh5OCLVmqSkkpw+0aH9nQdzkNWJN9pfvOKWxb8fU4BzQ BFn6fs+3p1on7EkU7LZxnJ6Q9/P1S8DIQ1YFfvNibThFNPcDuZCi/alaK3pCJ4op u+xlgRG7PHrUAbC146zBAx+NaoMMwLCnSuCCbhI7iBDlLBywUy6aqBI1qPnOIYu6 1Im7dNIif8jaZv/LBsvuZEK7Cat1fK4vcfmKLU1Rz2FBrj3P829l+o0ehvz695sR SuX6Bqr7qgIRUM91psuLKjswpkz/rNBZ+rCKfBirstya+nN1GiaOyPzZ9laZKite xVoC6yqJSLrEweuRkErzA79vBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCV9wgO 3fQpcgGO8R/9x9YdUU08MB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhAYRDEu34tYfuG+RKX0gXsNM5Y1f8ajfRMyjvx3vuElUcSuloeu0w IdBafTcyHE+v2ZUPLDWsTfdu6T7zLFLT+u5Ug+6440yx+owyb7Jo8UR5UnOOW829 Gdntd19wKv51vZDR6wQw/G9VWRbLJvcAFhl2os1+y6zAw9zf7CL3q9Zw7hdfCRky CvMBufrYkg54u7tlb4VDVvYqVJQRkO9iYWuz+a/FeO3YjL2AMNplQd9aTq3YAC/i nw56GgKL7jVOY+blVl63ry6fPKEpk+DO2ah3l7SyGShdaZCqcWgaBDK/HuaT/w7Y Ht9T/zs59dK0wpqRgr9da6A5LY94A8kM -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:44 2025 by rpki-client