$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: 8jIi99z2+oTVfG/Vm0C1PKjvvoPPghbI8jlbWLQ1dQ8= Subject key identifier: 92:09:54:75:8A:F1:B0:85:89:EB:57:9F:13:40:B0:78:F6:39:B3:1A Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 02CB Signing time: Mon 03 Nov 2025 01:22:22 +0000 Manifest this update: Mon 03 Nov 2025 01:22:22 +0000 Manifest next update: Mon 10 Nov 2025 01:22:22 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: SxcypGuRszvgOGSHLSpPg7G5y4+fsBiRxz3ckpncvjc=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: Pomp25euWUzW6bLzCINDqzM6FpJj6K+BUv6uncbVybw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Nov 3 01:22:22 2025 GMT Not After : Nov 10 01:22:22 2025 GMT Subject: CN=690803ce-9d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:d4:a0:01:73:d7:60:8a:e5:ff:8e:10:4d: b4:be:b8:18:6c:ac:25:11:51:10:be:ac:3d:d4:c4: a5:bd:68:1d:ba:79:27:f4:5f:f1:94:cd:3b:d9:25: 13:bc:4a:61:08:37:e3:ab:92:ad:c8:1f:3f:4f:f4: 28:7a:5b:fc:5a:25:8c:a2:8e:ce:ef:1a:98:30:b9: ba:56:a9:0c:64:f2:f4:94:14:02:02:56:80:99:d6: 64:e4:88:f6:bd:5e:fa:dc:d7:f8:68:56:31:6c:91: c8:ca:10:4e:bd:ac:1c:1a:60:af:db:cb:b7:e3:40: 49:a2:d6:cf:74:18:01:7c:aa:00:4d:dc:a3:3c:f9: c7:40:0e:b6:22:ff:e0:1d:a6:9b:20:62:4c:e2:30: 6d:e0:3b:c0:f6:6e:a6:4d:2c:65:e5:9b:f4:14:b3: 9f:d4:7e:b6:5f:a6:4c:42:73:b2:12:ba:bb:0e:2b: fc:06:d0:a3:5c:09:8d:36:23:71:43:53:cf:f3:44: 68:ff:88:9f:8a:33:fe:16:90:83:2b:96:9a:a5:e6: 11:e5:ba:2e:0f:fe:bf:d8:50:da:2f:c4:e4:4f:aa: ce:0d:31:63:b6:99:6d:44:b6:55:1a:9e:96:8a:4e: 3d:71:9f:44:71:9b:6c:09:d6:82:0b:92:02:1f:40: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:54:75:8A:F1:B0:85:89:EB:57:9F:13:40:B0:78:F6:39:B3:1A X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e2:5b:d8:e2:46:e9:0f:67:cf:3f:4a:84:f5:0d:5f:ed:d0: 3d:01:ac:92:d1:83:ea:fe:79:dc:aa:db:2d:bf:c0:e9:d1:86: 61:ce:56:4a:38:d2:33:20:32:ab:ac:8d:97:46:11:9b:05:ef: 7a:3f:5f:f4:be:cd:fc:de:5d:a4:0f:84:21:e4:0e:5e:e9:2d: 94:cf:63:ca:77:7d:5f:cf:68:6e:6e:98:ac:4c:ef:e4:6d:2d: dd:13:59:6b:29:59:d3:60:47:0b:2e:6d:ce:ca:fe:49:83:68: 08:a3:cf:a3:68:0f:5a:0e:cf:b4:41:74:31:55:f3:ea:9a:5f: cf:6a:3b:6f:f4:be:dd:40:44:fe:db:cb:5b:c7:92:2e:2b:19: b3:b9:27:22:1a:6d:59:a4:6d:3c:3b:ef:0c:2f:c1:a5:0d:6d: a0:0f:4a:cf:87:1d:9f:de:15:4e:07:bc:96:dc:1f:28:24:82: df:6b:c1:88:4a:7f:90:05:bc:ca:f9:30:a1:dc:4e:ec:f0:da: 7a:92:aa:bc:6b:9c:cb:66:65:86:cf:98:03:53:92:cb:0d:3e: 3b:49:19:d5:6c:fa:e3:79:e9:83:b6:ac:e5:f6:0d:52:1e:76: 38:15:0c:1e:30:6b:30:78:22:1a:c1:eb:14:97:96:8b:ce:51: bc:10:09:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUxMTAzMDEyMjIyWhcNMjUxMTEwMDEyMjIyWjAYMRYwFAYD VQQDEw02OTA4MDNjZS05ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL3UoAFz12CK5f+OEE20vrgYbKwlEVEQvqw91MSlvWgdunkn9F/xlM072SUT vEphCDfjq5KtyB8/T/Qoelv8WiWMoo7O7xqYMLm6VqkMZPL0lBQCAlaAmdZk5Ij2 vV763Nf4aFYxbJHIyhBOvawcGmCv28u340BJotbPdBgBfKoATdyjPPnHQA62Iv/g HaabIGJM4jBt4DvA9m6mTSxl5Zv0FLOf1H62X6ZMQnOyErq7Div8BtCjXAmNNiNx Q1PP80Ro/4ifijP+FpCDK5aapeYR5bouD/6/2FDaL8TkT6rODTFjtpltRLZVGp6W ik49cZ9EcZtsCdaCC5ICH0DjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIJVHWK 8bCFietXnxNAsHj2ObMaMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS4lvY4kbpD2fPP0qE9Q1f7dA9AayS0YPq/nncqtstv8Dp0YZhzlZK ONIzIDKrrI2XRhGbBe96P1/0vs383l2kD4Qh5A5e6S2Uz2PKd31fz2hubpisTO/k bS3dE1lrKVnTYEcLLm3Oyv5Jg2gIo8+jaA9aDs+0QXQxVfPqml/Pajtv9L7dQET+ 28tbx5IuKxmzuSciGm1ZpG08O+8ML8GlDW2gD0rPhx2f3hVOB7yW3B8oJILfa8GI Sn+QBbzK+TCh3E7s8Np6kqq8a5zLZmWGz5gDU5LLDT47SRnVbPrjeemDtqzl9g1S HnY4FQweMGsweCIawesUl5aLzlG8EAmQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:31 2025 by rpki-client