$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: tjxYvENrTV9NYdAQi6VfxoBNMU4rZYVs227vG+W20pU= Subject key identifier: 5D:BD:F1:BA:47:D2:F9:97:B0:82:62:DC:75:83:C2:35:95:D4:51:66 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01F6 Signing time: Wed 05 Nov 2025 02:43:55 +0000 Manifest this update: Wed 05 Nov 2025 02:43:55 +0000 Manifest next update: Wed 12 Nov 2025 02:43:55 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: kGQ8kEIgj/S1t16XDaeSDpwnxGk3FAhWvzm65SuEdHo=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Nov 5 02:43:55 2025 GMT Not After : Nov 12 02:43:55 2025 GMT Subject: CN=690ab9eb-ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:33:56:41:59:bc:39:19:2c:3a:e6:bc:fb: 87:de:e0:bb:ee:82:90:e8:d6:5f:59:1b:71:a8:44: d3:41:e6:7d:de:9d:98:e9:a3:57:49:e2:73:28:ec: 1f:0a:d2:7d:da:f4:cb:bf:56:b6:f3:da:2b:7c:a9: 57:1c:2e:cf:ec:26:3d:a5:31:ba:49:7f:31:10:a4: 65:64:2b:e1:ac:9b:0d:30:6f:e3:f8:dd:cb:9f:db: 9e:08:76:58:20:aa:44:7e:f7:c8:d2:73:1d:fb:55: 82:d6:d2:9c:ee:b9:3c:16:02:a4:5e:ea:6b:31:96: 5f:48:31:b2:f1:29:6a:52:52:67:60:41:bb:d0:3f: 2f:f9:ad:19:8d:93:40:cb:02:a9:f8:92:c3:23:06: c1:c6:4a:41:2f:e0:23:f0:67:9c:3c:09:89:dc:e2: bb:42:0f:7a:b4:25:a6:81:81:b7:5e:06:ae:89:db: 00:9c:32:48:1e:56:43:87:4d:a0:71:5d:b2:30:a1: 69:38:dc:c0:dc:d4:ed:00:94:b0:08:cc:93:1d:a9: e6:cd:a5:06:fb:12:db:ae:38:11:80:78:c4:b5:48: 18:ba:32:f3:4a:d9:bd:30:a5:d9:3e:37:cd:56:a6: 9d:e7:53:50:03:f8:c1:d7:25:33:8c:d7:b9:51:f5: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BD:F1:BA:47:D2:F9:97:B0:82:62:DC:75:83:C2:35:95:D4:51:66 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f4:6c:70:e9:2a:b9:8d:08:f9:0d:23:c5:10:28:5e:0c:51: 9e:b4:06:68:9d:98:17:85:64:c4:b1:23:96:a3:eb:7b:fe:40: c9:17:d8:5a:28:86:2a:f7:41:9f:03:5d:3d:b8:c9:86:3c:c7: 36:aa:55:53:1a:cf:dc:b1:ca:1f:0a:06:1d:e3:14:71:1d:27: 81:86:a5:a8:28:af:b4:7e:a7:83:61:f3:4f:70:2a:5c:fe:8d: 7b:ed:60:7f:87:16:df:b1:e7:b7:fe:f6:11:04:52:82:4a:d0: d2:74:6c:95:de:ff:69:7d:cb:c3:96:fd:a8:79:ec:f0:80:2c: 0d:93:4c:2f:85:49:d9:0c:67:59:10:3f:72:c9:2c:47:14:6d: 4f:f2:73:eb:19:36:14:02:ff:6a:53:a9:38:8c:fc:b3:3b:97: c3:e5:8a:1d:89:0a:e5:96:53:46:ac:2d:87:87:bf:a9:ce:7b: 42:cd:c6:ae:b7:0e:49:23:1a:eb:be:0e:74:15:43:61:1c:17: 61:9e:96:4a:9e:f0:67:6a:d8:b0:09:24:de:44:c9:d5:41:7d: db:da:c1:c1:c9:47:37:5f:e6:ad:fe:21:04:92:13:74:45:e6: 48:c1:98:8f:88:e4:0f:7e:79:bb:4a:d7:af:72:a8:c8:52:64: db:21:b6:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUxMTA1MDI0MzU1WhcNMjUxMTEyMDI0MzU1WjAYMRYwFAYD VQQDEw02OTBhYjllYi1mZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lIzVkFZvDkZLDrmvPuH3uC77oKQ6NZfWRtxqETTQeZ93p2Y6aNXSeJzKOwf CtJ92vTLv1a289orfKlXHC7P7CY9pTG6SX8xEKRlZCvhrJsNMG/j+N3Ln9ueCHZY IKpEfvfI0nMd+1WC1tKc7rk8FgKkXuprMZZfSDGy8SlqUlJnYEG70D8v+a0ZjZNA ywKp+JLDIwbBxkpBL+Aj8GecPAmJ3OK7Qg96tCWmgYG3XgauidsAnDJIHlZDh02g cV2yMKFpONzA3NTtAJSwCMyTHanmzaUG+xLbrjgRgHjEtUgYujLzStm9MKXZPjfN Vqad51NQA/jB1yUzjNe5UfU9fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF298bpH 0vmXsIJi3HWDwjWV1FFmMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg9Gxw6Sq5jQj5DSPFECheDFGetAZonZgXhWTEsSOWo+t7/kDJF9ha KIYq90GfA109uMmGPMc2qlVTGs/cscofCgYd4xRxHSeBhqWoKK+0fqeDYfNPcCpc /o177WB/hxbfsee3/vYRBFKCStDSdGyV3v9pfcvDlv2oeezwgCwNk0wvhUnZDGdZ ED9yySxHFG1P8nPrGTYUAv9qU6k4jPyzO5fD5YodiQrlllNGrC2Hh7+pzntCzcau tw5JIxrrvg50FUNhHBdhnpZKnvBnatiwCSTeRMnVQX3b2sHByUc3X+at/iEEkhN0 ReZIwZiPiOQPfnm7StevcqjIUmTbIbZz -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:18 2025 by rpki-client