$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json) Hash identifier: 5AFiM7DsaJdMN9m6gtdLbLdlbgfOwWUyr374OF/GYGw= Subject key identifier: FA:A3:CB:97:20:B5:99:BC:43:23:E9:F3:39:CB:42:DE:C5:98:78:4E Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft Manifest number: 56 Signing time: Mon 03 Nov 2025 07:10:59 +0000 Manifest this update: Mon 03 Nov 2025 07:10:58 +0000 Manifest next update: Mon 10 Nov 2025 07:10:58 +0000 Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: Xz9ufh9QvoPoJle52aAurg5VHoEhrFtqrg/ZTcBqnPg=) 2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Validity Not Before: Nov 3 07:10:58 2025 GMT Not After : Nov 10 07:10:58 2025 GMT Subject: CN=69085583-4230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:53:6e:f5:96:f0:5c:fb:14:b8:7f:3d:a8: d7:24:3a:dc:77:14:31:f4:94:6f:80:84:3e:6a:02: b8:cb:70:be:6d:9d:92:33:6a:56:21:61:4a:4a:17: 82:55:7d:8a:bd:df:89:b3:ec:e8:47:be:60:4e:29: 3f:7d:a9:a0:4b:16:b1:c1:ca:58:16:73:b0:f2:f2: 10:c8:cc:5b:a2:dc:5e:fc:49:9f:1b:30:08:f3:f5: 4a:2e:e6:c0:28:84:db:89:04:45:f3:14:e9:1f:3c: 12:f3:d7:1c:2d:ea:ee:4a:e2:e4:35:15:41:33:37: 28:c6:76:ae:d6:25:08:ee:b7:47:07:2b:65:ba:61: 6b:2e:83:df:96:79:58:81:54:98:42:38:cc:1a:54: 73:61:8e:19:3f:69:2c:11:a3:62:86:05:71:6e:d9: 27:e0:cf:24:d0:98:15:ad:17:25:f2:31:60:33:26: f8:4a:5c:a2:ac:1f:9e:fb:a6:7c:44:87:a0:6b:0c: bc:b9:31:ce:78:f9:c2:b1:85:d0:a4:ed:9f:f0:55: 9f:58:43:0c:53:fe:fd:99:d0:d8:71:fe:4b:30:67: 29:0f:f3:eb:d8:ad:a5:09:e4:6f:93:b7:09:81:92: 9e:10:d1:f6:30:1b:bb:3b:2d:25:2b:79:3b:eb:f7: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A3:CB:97:20:B5:99:BC:43:23:E9:F3:39:CB:42:DE:C5:98:78:4E X509v3 Authority Key Identifier: keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0b:3f:28:95:08:77:37:68:8a:f3:c6:fb:21:05:19:d8:bc: 10:8b:9d:0c:0f:60:93:f2:bb:b8:6b:5d:0d:90:cc:90:98:b9: cf:97:ab:8e:76:d9:1f:3c:c3:89:aa:df:8e:f0:75:bc:1d:d6: c2:e7:09:5c:ec:d8:3e:74:50:90:4c:8a:ab:9a:4e:cd:8b:da: dd:d1:0f:3b:4b:16:e3:fa:76:cb:0f:80:af:f7:a3:ae:bb:0a: e2:d8:e5:f9:8a:91:e2:66:54:c9:63:53:ce:38:1c:44:ef:89: de:b8:71:1b:50:bf:99:86:d0:7d:80:19:f6:1e:5c:a0:fe:66: eb:a9:b4:2f:00:59:1c:07:cb:a0:01:20:87:a4:9c:5b:37:e8: eb:7d:97:d5:59:a1:33:c8:9a:e1:77:f0:28:63:ef:a4:a9:b1: c7:6a:9d:4e:9c:d2:36:77:4e:fa:7a:4f:de:17:cc:7c:86:da: 61:38:ea:1e:22:04:b9:6b:5a:2a:35:ad:02:20:a1:da:53:ba: ec:a8:4f:31:54:40:6a:e2:16:1a:4d:f5:c5:77:1c:56:3c:eb: a7:66:aa:aa:fb:f5:aa:db:0f:28:2b:3c:5b:69:af:64:1f:a8: 1d:17:19:15:e6:32:6f:2d:0e:09:bd:51:b5:cc:bd:04:71:f4: aa:4f:52:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUY2NDExMC8GA1UEBRMoQjNFRUNGMTY3MjU2MTQ0QTQ2QTFEQUI0OEI4MDgwRDc5 MEQyMDQzQzAeFw0yNTExMDMwNzEwNThaFw0yNTExMTAwNzEwNThaMBgxFjAUBgNV BAMTDTY5MDg1NTgzLTQyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH5VNu9ZbwXPsUuH89qNckOtx3FDH0lG+AhD5qArjLcL5tnZIzalYhYUpKF4JV fYq934mz7OhHvmBOKT99qaBLFrHBylgWc7Dy8hDIzFui3F78SZ8bMAjz9Uou5sAo hNuJBEXzFOkfPBLz1xwt6u5K4uQ1FUEzNyjGdq7WJQjut0cHK2W6YWsug9+WeViB VJhCOMwaVHNhjhk/aSwRo2KGBXFu2SfgzyTQmBWtFyXyMWAzJvhKXKKsH577pnxE h6BrDLy5Mc54+cKxhdCk7Z/wVZ9YQwxT/v2Z0Nhx/kswZykP8+vYraUJ5G+TtwmB kp4Q0fYwG7s7LSUreTvr993FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+qPLlyC1 mbxDI+nzOctC3sWYeE4wHwYDVR0jBBgwFoAUs+7PFnJWFEpGodq0i4CA15DSBDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RjY0L0ExRTBEODNBMzQ2 NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy03UEZuSldGRXBHb2RxMGk0Q0ExNURTQkR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RjY0L0ExRTBEODNBMzQ2NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVw R29kcTBpNENBMTVEU0JEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsLPyiVCHc3aIrzxvshBRnYvBCLnQwPYJPyu7hrXQ2QzJCYuc+Xq452 2R88w4mq347wdbwd1sLnCVzs2D50UJBMiquaTs2L2t3RDztLFuP6dssPgK/3o667 CuLY5fmKkeJmVMljU844HETvid64cRtQv5mG0H2AGfYeXKD+ZuuptC8AWRwHy6AB IIeknFs36Ot9l9VZoTPImuF38Chj76SpscdqnU6c0jZ3Tvp6T94XzHyG2mE46h4i BLlrWio1rQIgodpTuuyoTzFUQGriFhpN9cV3HFY866dmqqr79arbDygrPFtpr2Qf qB0XGRXmMm8tDgm9UbXMvQRx9KpPUvU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:22 2025 by rpki-client