$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: FqYz6UJRcceSWIiG2lDjU/AH08f4DUHL7VjFI4SWWwE= Subject key identifier: 12:96:53:A9:41:BA:60:51:EE:16:0D:B6:7B:95:9B:B3:98:A8:49:A8 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0BC9 Signing time: Sat 18 Oct 2025 19:44:19 +0000 Manifest this update: Sat 18 Oct 2025 19:44:18 +0000 Manifest next update: Sat 25 Oct 2025 19:44:18 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: cAV7UYfi4PThej7sZAzWfBfrgeHb4ARuXdS+lletYkw=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Oct 18 19:44:18 2025 GMT Not After : Oct 25 19:44:18 2025 GMT Subject: CN=68f3ee12-73a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:fa:d1:7c:e8:3e:4d:32:3e:b5:a8:20:d1: a8:69:ab:4f:63:80:29:2a:fa:2d:44:c0:fa:3a:77: 11:1a:9b:73:85:fc:81:3e:f4:9f:98:24:0a:0f:53: 5b:03:0d:86:bb:95:50:4c:f0:d2:92:cb:5b:81:bf: d6:b8:c4:3e:ea:33:ba:78:0c:b2:81:3f:b3:57:39: cd:2b:eb:1e:4f:9e:bf:09:06:f5:0e:88:49:4d:3d: 78:38:1d:b1:5f:2f:e3:c5:e4:33:cc:3f:77:b5:1f: 29:72:95:ba:22:d1:36:5f:ef:fd:51:e7:81:2f:16: 63:57:55:e7:61:26:7e:40:5b:71:a9:f8:e8:83:f3: 20:cd:76:b9:97:c7:fa:6f:55:da:39:a5:cd:80:19: aa:7c:e2:c8:42:7d:ea:58:ca:04:f3:ad:2a:72:7d: 3c:15:8e:3f:64:3e:36:ca:5d:7d:ed:4b:12:18:7e: e0:46:33:d0:b7:d5:d1:11:e6:ab:5f:c6:df:cd:48: 8d:e0:70:6b:ba:0f:37:ae:ae:1c:55:a0:95:1c:2b: 80:62:19:57:d2:1e:81:07:4e:56:7b:37:f6:c3:c9: 86:53:08:e1:73:1c:63:8d:51:8a:5f:3b:96:72:99: 9b:f8:6d:5b:a7:cb:9e:c4:5d:50:3d:ce:67:eb:ff: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:96:53:A9:41:BA:60:51:EE:16:0D:B6:7B:95:9B:B3:98:A8:49:A8 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:36:57:85:5c:2e:7f:fc:52:36:98:24:98:3a:1c:e3:6c:10: 39:bb:c7:ea:79:01:8e:7a:d2:32:4e:aa:6c:0a:ea:51:bc:da: d6:b4:f2:9b:29:0d:b6:0d:59:e5:2c:53:a4:a2:69:58:ef:bb: 98:4b:1a:ec:f7:7e:e9:5b:db:55:aa:93:17:b2:e6:95:00:2e: 48:0a:41:56:02:46:b4:3d:41:47:a3:ef:64:d0:f9:1d:f4:7e: dd:29:42:8b:04:fc:8e:21:b5:f1:24:d8:db:4c:60:ec:d6:1d: b0:03:61:19:17:2f:d4:d7:af:9e:d6:2f:fb:d8:7f:88:72:56: b0:b4:7b:74:1b:ef:68:99:f7:cc:2d:80:c8:91:41:0a:f8:ed: b0:fa:56:0b:b3:7b:b9:b0:71:15:92:4c:02:c7:dd:65:27:b6: c0:e7:17:ea:e3:d3:e5:db:c5:6b:54:d0:75:00:c5:b1:96:3f: 1c:6f:28:2f:83:bf:3f:7f:62:6e:4f:dc:11:5c:2f:34:6d:f2: 2c:85:0a:1a:8e:52:40:40:55:92:66:59:d6:eb:fd:26:1c:4e: 8d:dd:f6:f1:33:00:a3:be:75:0a:98:77:10:79:54:54:97:7b: 30:20:a5:58:12:18:9a:de:b7:30:6d:70:b5:76:83:d7:d4:3b: 45:61:6e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUxMDE4MTk0NDE4WhcNMjUxMDI1MTk0NDE4WjAYMRYwFAYD VQQDEw02OGYzZWUxMi03M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFL60XzoPk0yPrWoINGoaatPY4ApKvotRMD6OncRGptzhfyBPvSfmCQKD1Nb Aw2Gu5VQTPDSkstbgb/WuMQ+6jO6eAyygT+zVznNK+seT56/CQb1DohJTT14OB2x Xy/jxeQzzD93tR8pcpW6ItE2X+/9UeeBLxZjV1XnYSZ+QFtxqfjog/MgzXa5l8f6 b1XaOaXNgBmqfOLIQn3qWMoE860qcn08FY4/ZD42yl197UsSGH7gRjPQt9XREear X8bfzUiN4HBrug83rq4cVaCVHCuAYhlX0h6BB05Wezf2w8mGUwjhcxxjjVGKXzuW cpmb+G1bp8uexF1QPc5n6/9pfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKWU6lB umBR7hYNtnuVm7OYqEmoMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADNleFXC5//FI2mCSYOhzjbBA5u8fqeQGOetIyTqpsCupRvNrWtPKb KQ22DVnlLFOkomlY77uYSxrs937pW9tVqpMXsuaVAC5ICkFWAka0PUFHo+9k0Pkd 9H7dKUKLBPyOIbXxJNjbTGDs1h2wA2EZFy/U16+e1i/72H+IclawtHt0G+9omffM LYDIkUEK+O2w+lYLs3u5sHEVkkwCx91lJ7bA5xfq49Pl28VrVNB1AMWxlj8cbygv g78/f2JuT9wRXC80bfIshQoajlJAQFWSZlnW6/0mHE6N3fbxMwCjvnUKmHcQeVRU l3swIKVYEhia3rcwbXC1doPX1DtFYW7I -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:55 2025 by rpki-client