$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: KXoYA3eJLHEhmyIiGFZ80L2DDKMejvhZ8w5m/PX1NMY= Subject key identifier: 32:C0:BB:A8:A5:95:11:72:BA:BE:1E:68:A6:EE:A7:68:E3:74:AC:C8 Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 07BC Signing time: Sat 18 Oct 2025 22:40:54 +0000 Manifest this update: Sat 18 Oct 2025 22:40:54 +0000 Manifest next update: Sat 25 Oct 2025 22:40:54 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: U3foAQu1NCxMwAIV1p2GL2SNmDiu3JnjxjJFILUagjQ=) 2: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: I9RDWTqokuHw9TsN7dqHWL1mxEAi762R7COmcfJ37Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Oct 18 22:40:54 2025 GMT Not After : Oct 25 22:40:54 2025 GMT Subject: CN=68f41776-d3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:4b:28:6a:29:ac:89:98:f4:11:82:af:cb: 70:23:2e:b2:a8:df:d2:4e:ac:5a:12:17:b9:26:9e: 02:57:2a:f8:77:93:c1:b5:05:6e:a7:49:90:d0:fb: c4:55:b9:4f:a0:a5:6c:e6:6a:74:d8:85:e8:39:8c: 99:65:bf:eb:87:d8:e5:00:fc:27:34:3a:7a:6e:80: e8:ff:3a:0c:26:e7:c9:fb:5f:1a:24:92:3f:8a:a1: 7c:45:c3:c1:23:aa:97:11:24:29:3e:14:80:9e:6e: 2e:de:4f:9c:13:10:7e:d6:86:5d:82:45:34:8e:c4: ad:e2:7f:bb:ba:fd:1d:be:02:4e:f0:1b:f7:e4:ad: 1e:90:ce:0d:ba:0b:e0:f8:35:e4:fb:60:cc:8c:2f: fa:df:62:74:13:71:72:16:2d:83:d7:6c:fa:c0:f4: 8e:c9:74:68:4a:9d:4b:66:f1:66:29:98:42:4f:75: 19:62:a3:d9:dd:d1:76:51:62:d8:cb:4c:82:d6:57: 54:a3:99:99:63:b1:6c:49:19:f9:c4:e7:c6:ab:2f: fa:53:ee:6e:17:0e:c8:4d:1c:6a:00:66:3d:64:a4: f8:6f:33:3d:73:e4:bd:05:71:82:22:98:e5:5c:ea: ff:3a:fa:a3:a5:7a:69:69:9f:14:d8:e7:4c:6c:ff: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C0:BB:A8:A5:95:11:72:BA:BE:1E:68:A6:EE:A7:68:E3:74:AC:C8 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:13:d4:71:c6:10:f5:2a:1e:7c:9c:ea:d6:f8:ab:fe:4e:f6: 66:77:a4:78:54:bc:2e:5e:4a:15:f2:10:6a:42:cf:75:8a:44: c4:1c:ee:68:36:3d:8c:1a:4e:41:44:3e:e6:8f:49:4b:39:85: d3:fe:a5:85:3a:91:46:c4:13:dd:01:f5:fd:3c:b7:9d:2b:56: 2d:4a:f8:94:7e:4d:59:24:d9:04:eb:1f:a5:7f:96:35:16:e7: e6:be:6c:85:af:46:3d:46:ba:95:10:a4:5a:a6:57:5e:56:17: e2:cc:3a:a7:18:a7:ed:fe:49:95:d2:0b:a7:ea:44:83:49:f0: e3:53:32:21:d5:68:38:a9:75:33:2d:9b:0b:00:cd:62:56:9e: 59:30:c0:91:39:15:b5:23:e4:44:48:bd:c8:15:e6:3f:e2:61: 8a:94:3e:b0:95:da:2b:64:df:b8:64:be:3d:4a:c7:42:b1:0d: 56:2e:a2:54:16:6a:d0:51:21:af:83:e6:b5:12:29:ac:f7:12: 01:0a:6c:a8:49:81:b6:00:41:cc:ef:e6:9e:e9:25:9a:d9:7b: 6a:d6:b3:49:50:6f:45:91:72:3e:df:8b:99:55:c8:e9:f2:9b: 6f:8f:3a:17:be:89:4f:d6:a9:d4:a7:31:16:68:01:a9:fc:00: 39:66:ec:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUxMDE4MjI0MDU0WhcNMjUxMDI1MjI0MDU0WjAYMRYwFAYD VQQDEw02OGY0MTc3Ni1kM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutxLKGoprImY9BGCr8twIy6yqN/STqxaEhe5Jp4CVyr4d5PBtQVup0mQ0PvE VblPoKVs5mp02IXoOYyZZb/rh9jlAPwnNDp6boDo/zoMJufJ+18aJJI/iqF8RcPB I6qXESQpPhSAnm4u3k+cExB+1oZdgkU0jsSt4n+7uv0dvgJO8Bv35K0ekM4Nugvg +DXk+2DMjC/632J0E3FyFi2D12z6wPSOyXRoSp1LZvFmKZhCT3UZYqPZ3dF2UWLY y0yC1ldUo5mZY7FsSRn5xOfGqy/6U+5uFw7ITRxqAGY9ZKT4bzM9c+S9BXGCIpjl XOr/OvqjpXppaZ8U2OdMbP+RpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLAu6il lRFyur4eaKbup2jjdKzIMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGE9RxxhD1Kh58nOrW+Kv+TvZmd6R4VLwuXkoV8hBqQs91ikTEHO5o Nj2MGk5BRD7mj0lLOYXT/qWFOpFGxBPdAfX9PLedK1YtSviUfk1ZJNkE6x+lf5Y1 FufmvmyFr0Y9RrqVEKRapldeVhfizDqnGKft/kmV0gun6kSDSfDjUzIh1Wg4qXUz LZsLAM1iVp5ZMMCRORW1I+RESL3IFeY/4mGKlD6wldorZN+4ZL49SsdCsQ1WLqJU FmrQUSGvg+a1Eims9xIBCmyoSYG2AEHM7+ae6SWa2Xtq1rNJUG9FkXI+34uZVcjp 8ptvjzoXvolP1qnUpzEWaAGp/AA5ZuwE -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:18 2025 by rpki-client