$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: gfPUMoSB4QTVtN7XbXCl1CdNUMV9Lp/zGqOdFOl2y8g= Subject key identifier: 3E:4B:C3:A5:7C:F9:5A:1F:CA:08:79:33:43:21:E2:A2:4B:44:8B:42 Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: AF Signing time: Wed 05 Nov 2025 06:20:33 +0000 Manifest this update: Wed 05 Nov 2025 06:20:33 +0000 Manifest next update: Wed 12 Nov 2025 06:20:33 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: kuGHuKmvIbF42rq4hzTNR08ELUHeU9Ht1MWpBjyIAX4=) 2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=) 3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=) 4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Nov 5 06:20:33 2025 GMT Not After : Nov 12 06:20:33 2025 GMT Subject: CN=690aecb1-5c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:3f:65:f9:5a:ec:2e:89:e4:96:fb:a8:55: bd:87:9d:86:d4:6c:99:b8:f8:c9:d2:41:11:0c:37: 91:af:3b:c9:d8:a1:ff:4c:af:e8:fe:72:37:a9:5e: d1:25:a9:11:59:8c:73:06:21:1a:30:c3:c5:3d:bc: c0:25:ce:ac:46:19:75:00:ea:31:42:0c:16:14:61: e0:f1:13:91:d3:85:06:3e:d7:6a:1b:10:8b:15:17: 8a:7b:42:2c:b2:08:a9:db:e2:e4:3a:d8:8a:95:22: 95:23:14:54:70:35:83:57:b1:b7:7a:d4:bc:f1:4d: 7e:9c:6d:4c:a5:b2:81:99:17:b7:e8:d7:7e:c3:1c: e4:b2:28:e3:64:61:2c:34:d3:15:ee:99:2a:5a:e8: c5:e4:50:d8:76:46:65:66:90:41:c4:33:3d:91:4b: 58:65:50:9c:da:7e:4b:a6:3f:b0:1e:4f:88:b7:17: 7d:a9:b6:f5:33:d3:da:64:21:1f:7e:7e:2e:d9:99: fc:56:cb:4c:59:a5:5f:d2:d4:aa:34:f3:fb:fe:1a: 34:10:92:35:43:3d:43:bb:13:1e:ec:b6:d8:0e:4a: d8:de:98:97:b0:f5:f9:fc:1f:6e:df:c1:db:5c:6b: 07:6f:9b:b3:bd:17:38:fa:16:f4:77:78:65:08:b4: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4B:C3:A5:7C:F9:5A:1F:CA:08:79:33:43:21:E2:A2:4B:44:8B:42 X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:53:3c:49:78:5a:d8:0d:e8:7b:a6:9c:eb:46:0d:25:54:72: bb:7c:a8:c9:40:1f:ec:91:a2:b9:5b:6a:75:33:ae:05:57:cc: 3d:a6:41:b7:20:0d:8c:4f:ab:f4:00:43:bc:41:49:9e:3a:7d: be:6f:a6:26:26:19:0e:1a:d5:ec:da:24:05:09:cf:2b:3f:83: bf:e6:46:5c:ac:80:69:27:b6:04:b8:ea:16:ab:65:27:d7:f7: 18:d7:9c:c0:fa:75:89:44:89:75:15:66:99:5d:7b:64:9f:00: c8:0e:2d:9d:a9:77:f3:2b:ad:ca:ea:66:c6:16:4d:53:3e:f9: b5:e5:ee:5d:21:f5:f2:96:71:b9:69:9f:dc:1e:b0:d1:9d:bc: 30:f1:53:21:2b:60:c8:9d:82:9b:9c:c4:43:38:ee:ed:e3:03: af:2e:d8:87:4d:26:d4:a6:10:77:b2:93:70:cf:00:b3:fd:06: 10:d1:0d:db:ae:00:0b:55:95:e2:29:87:16:af:fe:7d:7b:a2: 3a:84:ca:92:ec:a4:a3:52:e8:bf:a2:fa:f7:db:44:1f:67:ff: 63:af:46:35:08:01:81:75:47:48:3a:0f:9e:59:e3:b7:f5:06: 1f:73:4e:ca:3a:5d:d1:cc:83:09:21:d8:e4:3e:68:4c:92:de: c9:4d:ac:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw NjM0MDJERjEwHhcNMjUxMTA1MDYyMDMzWhcNMjUxMTEyMDYyMDMzWjAYMRYwFAYD VQQDEw02OTBhZWNiMS01YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XY/Zfla7C6J5Jb7qFW9h52G1GyZuPjJ0kERDDeRrzvJ2KH/TK/o/nI3qV7R JakRWYxzBiEaMMPFPbzAJc6sRhl1AOoxQgwWFGHg8ROR04UGPtdqGxCLFReKe0Is sgip2+LkOtiKlSKVIxRUcDWDV7G3etS88U1+nG1MpbKBmRe36Nd+wxzksijjZGEs NNMV7pkqWujF5FDYdkZlZpBBxDM9kUtYZVCc2n5Lpj+wHk+Itxd9qbb1M9PaZCEf fn4u2Zn8VstMWaVf0tSqNPP7/ho0EJI1Qz1DuxMe7LbYDkrY3piXsPX5/B9u38Hb XGsHb5uzvRc4+hb0d3hlCLRIowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5Lw6V8 +Vofygh5M0Mh4qJLRItCMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk SjVRODIzS24xSkVHTkFMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUzxJeFrYDeh7ppzrRg0lVHK7fKjJQB/skaK5W2p1M64FV8w9pkG3 IA2MT6v0AEO8QUmeOn2+b6YmJhkOGtXs2iQFCc8rP4O/5kZcrIBpJ7YEuOoWq2Un 1/cY15zA+nWJRIl1FWaZXXtknwDIDi2dqXfzK63K6mbGFk1TPvm15e5dIfXylnG5 aZ/cHrDRnbww8VMhK2DInYKbnMRDOO7t4wOvLtiHTSbUphB3spNwzwCz/QYQ0Q3b rgALVZXiKYcWr/59e6I6hMqS7KSjUui/ovr320QfZ/9jr0Y1CAGBdUdIOg+eWeO3 9QYfc07KOl3RzIMJIdjkPmhMkt7JTazI -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:26 2025 by rpki-client