$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: 6BzoaZ6G4yl0iQT8W4HvH36cgCXGLb62v2glOMJ5JNo= Subject key identifier: E9:DD:D7:A4:B1:3C:EE:F9:9E:7B:7D:EF:B7:C4:45:4F:F8:64:EF:A7 Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: AD Signing time: Mon 03 Nov 2025 06:11:22 +0000 Manifest this update: Mon 03 Nov 2025 06:11:21 +0000 Manifest next update: Mon 10 Nov 2025 06:11:21 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: r/RIAaEk1dXXHNJBbwCjLJoj84yykfu2mZUILy6lThY=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Nov 3 06:11:21 2025 GMT Not After : Nov 10 06:11:21 2025 GMT Subject: CN=6908478a-7d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:cf:34:5c:e1:ac:1c:7e:74:43:0d:42:f8: 20:4b:27:f1:8c:4d:46:a0:70:12:2c:b7:85:dc:c5: eb:b1:3e:09:76:ff:fa:9f:c5:3e:98:76:59:96:50: da:a2:5b:ab:65:33:3d:51:ed:c1:3d:15:01:aa:bd: 2d:2e:df:a0:1f:d5:37:72:ca:f4:03:3b:bd:c2:af: 11:fa:4b:f4:8f:d6:5d:fd:d5:05:63:72:2c:03:62: fb:ab:6c:97:a2:0f:c0:52:c7:d8:68:5e:c3:ac:e4: 4c:dc:b5:61:2d:cc:0f:8e:1f:c5:08:d0:86:eb:a9: 85:4f:36:0d:7d:b1:f6:e5:97:0a:c6:9e:c8:c5:78: 55:8f:18:c9:2d:12:cb:97:98:31:f1:4c:43:d3:26: 02:c9:5a:0b:02:60:77:3f:60:68:79:26:d6:41:21: 77:2e:0f:10:97:52:e2:f2:ef:e0:ac:db:2d:6a:10: 2f:d0:32:23:4d:a0:86:b1:9b:51:85:fe:40:61:fe: b8:01:55:75:69:39:1f:c0:c3:42:b0:8f:03:aa:83: 32:6b:d0:42:a3:b2:63:c8:7c:b7:ea:ba:0b:37:fb: 35:55:b2:8a:91:74:39:de:86:17:62:2c:95:e2:d9: 7a:10:66:14:9b:ca:6e:a7:bb:01:aa:f9:ab:92:17: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DD:D7:A4:B1:3C:EE:F9:9E:7B:7D:EF:B7:C4:45:4F:F8:64:EF:A7 X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:21:1d:56:0a:fb:de:4c:83:d4:b2:6a:26:ec:bb:d1:be:f0: 09:80:f0:69:b5:9e:d1:81:79:ad:7b:9e:6f:4f:11:7b:fe:6b: 14:8c:9e:aa:a0:c3:d9:5b:01:ef:4f:43:bf:b7:49:d0:ad:91: 2a:c0:c2:2d:de:b0:c0:5d:93:54:9c:58:31:ad:8c:1d:63:14: 87:6f:5d:d0:e7:fb:3f:b1:ad:eb:38:f2:b9:8d:42:e4:2c:e2: 1d:5c:68:e9:2e:79:45:f3:eb:12:fe:d5:75:0b:f9:39:86:bc: e5:c2:7b:61:7f:1f:f2:19:a6:c4:13:f9:bb:72:20:9e:f1:4c: 4d:d0:ff:87:71:31:6f:91:87:07:63:bc:f0:d0:43:9a:4d:ea: 14:cb:e2:2d:11:6c:2b:cc:27:54:04:cf:7b:db:51:d8:29:e2: f5:2f:da:97:f6:78:3b:6b:ac:7e:a5:15:0c:19:46:27:48:b1: 3d:c5:54:1b:1d:74:f7:64:1a:69:28:a2:3d:30:0b:65:3e:4e: 01:cd:07:23:31:28:2f:06:62:8c:09:de:86:2f:21:b3:c6:c7: ae:e2:68:f4:2d:19:2e:b8:6a:0e:b4:ce:c1:20:e0:70:cd:65: b3:c9:ff:52:4b:c9:8f:30:50:6c:4a:4d:e5:ef:6f:80:12:e1: 41:4d:9b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3NTcxMTAvBgNVBAUTKEQzQkE0NERBNUNCREMxQ0M1MTI1RTJDMTAwN0I2Q0RC N0REQ0RDODUwHhcNMjUxMTAzMDYxMTIxWhcNMjUxMTEwMDYxMTIxWjAYMRYwFAYD VQQDEw02OTA4NDc4YS03ZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxjPNFzhrBx+dEMNQvggSyfxjE1GoHASLLeF3MXrsT4Jdv/6n8U+mHZZllDa olurZTM9Ue3BPRUBqr0tLt+gH9U3csr0Azu9wq8R+kv0j9Zd/dUFY3IsA2L7q2yX og/AUsfYaF7DrORM3LVhLcwPjh/FCNCG66mFTzYNfbH25ZcKxp7IxXhVjxjJLRLL l5gx8UxD0yYCyVoLAmB3P2BoeSbWQSF3Lg8Ql1Li8u/grNstahAv0DIjTaCGsZtR hf5AYf64AVV1aTkfwMNCsI8DqoMya9BCo7JjyHy36roLN/s1VbKKkXQ53oYXYiyV 4tl6EGYUm8pup7sBqvmrkhd1zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnd16Sx PO75nnt977fERU/4ZO+nMB8GA1UdIwQYMBaAFNO6RNpcvcHMUSXiwQB7bNt93NyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc1Ny8zMjkzNENFQ0Iz N0ExMUVGOUMwN0M2NUJDNEY5QUUwMi8wN3BFMmx5OXdjeFJKZUxCQUh0czIzM2Mz SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc1Ny8zMjkzNENFQ0IzN0ExMUVGOUMwN0M2NUJDNEY5QUUwMi8wN3BFMmx5OXdj eFJKZUxCQUh0czIzM2MzSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgIR1WCvveTIPUsmom7LvRvvAJgPBptZ7RgXmte55vTxF7/msUjJ6q oMPZWwHvT0O/t0nQrZEqwMIt3rDAXZNUnFgxrYwdYxSHb13Q5/s/sa3rOPK5jULk LOIdXGjpLnlF8+sS/tV1C/k5hrzlwnthfx/yGabEE/m7ciCe8UxN0P+HcTFvkYcH Y7zw0EOaTeoUy+ItEWwrzCdUBM9721HYKeL1L9qX9ng7a6x+pRUMGUYnSLE9xVQb HXT3ZBppKKI9MAtlPk4BzQcjMSgvBmKMCd6GLyGzxseu4mj0LRkuuGoOtM7BIOBw zWWzyf9SS8mPMFBsSk3l72+AEuFBTZv3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:54 2025 by rpki-client