$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: mNpXwRt52r9H8D4FlpLSHKxDIWNDDyDPKMZ4XLitpXo= Subject key identifier: 35:A3:5A:24:66:7E:35:06:D0:CE:73:D9:00:8E:43:68:08:14:8B:9A Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 9F Signing time: Fri 24 Oct 2025 14:29:27 +0000 Manifest this update: Fri 24 Oct 2025 14:29:26 +0000 Manifest next update: Fri 31 Oct 2025 14:29:26 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: LJQbnDGBF64aW9aQKFdkkhF/nbkJ7H07zHKmmqRCH8Y=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: RGDwrnHLpwoltlbpIvS3zEQYJokw21O0scCTRV6lF5o=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: ASozTCqLLf2W3v4/3oV7UOvO2kqTmGagQ7fGwleiFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Oct 24 14:29:26 2025 GMT Not After : Oct 31 14:29:26 2025 GMT Subject: CN=68fb8d47-33d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:1d:a4:04:39:08:35:ef:6b:df:8a:f6:4c: cc:62:b7:68:49:45:e3:c7:d9:1d:cc:3a:52:5a:ef: 7c:a5:f3:36:2d:36:97:f3:a5:b0:23:86:8a:55:9c: e7:ea:78:d0:73:a5:cd:f3:5a:04:f7:91:b3:fb:07: 76:ed:7c:d3:85:d6:35:8e:87:de:8d:41:9a:52:49: f5:d9:c4:20:e8:55:2a:26:b8:24:35:85:a7:d8:c5: 7a:97:92:8f:31:c8:52:9e:76:67:0d:1e:63:a3:e3: 59:a7:fc:c7:88:a8:da:b8:43:12:6e:94:cb:67:d7: 0e:61:45:8b:39:2b:c7:78:4d:23:07:df:8a:71:4a: ac:8f:66:81:34:5d:53:33:f0:18:2e:2a:7e:c1:18: fe:4e:9a:8c:30:e5:b8:41:92:99:2b:9a:55:87:90: 25:34:1c:e5:8d:38:f0:40:21:7b:f4:a9:3e:29:8b: 96:c0:78:45:78:df:fa:4c:eb:09:08:ac:d7:1b:c9: f0:0f:8e:50:ec:9c:9e:d8:3d:cc:52:7a:bf:75:b3: 37:f1:7f:da:31:6a:7c:1f:40:55:0f:fc:92:fa:47: c3:9d:cc:a6:1b:fb:8b:78:70:f7:dd:69:9a:d5:a5: 75:e9:02:70:80:70:d8:e6:0a:8f:2b:5b:8b:64:da: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:5A:24:66:7E:35:06:D0:CE:73:D9:00:8E:43:68:08:14:8B:9A X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0e:13:84:fc:db:b9:97:a9:f8:4f:2c:4d:d4:74:09:92:ff: 32:16:68:0c:0a:24:37:89:29:f8:b0:6a:39:5e:22:bd:3e:a4: 40:c4:44:d1:4c:20:41:fc:ca:76:d2:de:ac:b6:c7:8d:0e:b1: 79:dd:40:b8:32:1f:30:f6:f4:05:a2:53:3a:0f:24:09:e2:5e: 5b:46:1d:bd:04:d5:69:9d:1c:6b:8b:b5:95:bc:a9:42:10:62: 16:de:71:a6:d0:67:c5:b0:56:2e:a4:ad:91:e9:2c:bf:89:10: f2:d3:67:e5:21:db:e0:de:df:47:89:0c:b2:a4:65:67:f8:2a: bf:13:bd:be:4f:92:f6:8d:16:9b:9d:55:b4:c2:69:85:3d:89: b5:79:97:4e:1a:a9:bd:a6:4f:42:66:26:95:eb:3d:5d:ab:93: 1c:8d:2a:7c:2d:77:79:8f:d7:23:82:b5:1b:69:8f:b7:ac:69: 34:1b:b3:27:0f:d7:6d:0d:36:86:d7:36:48:06:45:73:a5:ad: ec:ba:6f:4e:aa:7e:89:b7:45:7b:68:ae:83:2b:ed:8b:1f:9a: ce:af:11:26:66:7a:74:e7:24:dd:12:f3:ab:3d:a2:dc:6a:a2: 1f:c1:f0:e6:2c:84:98:1d:4b:3f:cf:77:fb:32:dc:ea:20:f8: 5d:1f:9d:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjUxMDI0MTQyOTI2WhcNMjUxMDMxMTQyOTI2WjAYMRYwFAYD VQQDEw02OGZiOGQ0Ny0zM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/QdpAQ5CDXva9+K9kzMYrdoSUXjx9kdzDpSWu98pfM2LTaX86WwI4aKVZzn 6njQc6XN81oE95Gz+wd27XzThdY1jofejUGaUkn12cQg6FUqJrgkNYWn2MV6l5KP MchSnnZnDR5jo+NZp/zHiKjauEMSbpTLZ9cOYUWLOSvHeE0jB9+KcUqsj2aBNF1T M/AYLip+wRj+TpqMMOW4QZKZK5pVh5AlNBzljTjwQCF79Kk+KYuWwHhFeN/6TOsJ CKzXG8nwD45Q7Jye2D3MUnq/dbM38X/aMWp8H0BVD/yS+kfDncymG/uLeHD33Wma 1aV16QJwgHDY5gqPK1uLZNp6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWjWiRm fjUG0M5z2QCOQ2gIFIuaMB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7DhOE/Nu5l6n4TyxN1HQJkv8yFmgMCiQ3iSn4sGo5XiK9PqRAxETR TCBB/Mp20t6stseNDrF53UC4Mh8w9vQFolM6DyQJ4l5bRh29BNVpnRxri7WVvKlC EGIW3nGm0GfFsFYupK2R6Sy/iRDy02flIdvg3t9HiQyypGVn+Cq/E72+T5L2jRab nVW0wmmFPYm1eZdOGqm9pk9CZiaV6z1dq5McjSp8LXd5j9cjgrUbaY+3rGk0G7Mn D9dtDTaG1zZIBkVzpa3sum9Oqn6Jt0V7aK6DK+2LH5rOrxEmZnp05yTdEvOrPaLc aqIfwfDmLISYHUs/z3f7MtzqIPhdH513 -----END CERTIFICATE-----Generated at Sat Oct 25 11:24:15 2025 by rpki-client