$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: ayhsH1dYkAs9bs9pGkPgrdoydyTVJdv6SBINY5y1dVU= Subject key identifier: DC:46:82:13:12:EF:51:90:13:88:2B:DB:09:F9:FF:31:15:73:6F:D9 Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0C94 Signing time: Sun 02 Nov 2025 18:21:15 +0000 Manifest this update: Sun 02 Nov 2025 18:21:14 +0000 Manifest next update: Sun 09 Nov 2025 18:21:14 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: TT+T4mnsL+1ZT00+brZoB/HxnpZhEzWu9SV6unW3IX4=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Nov 2 18:21:14 2025 GMT Not After : Nov 9 18:21:14 2025 GMT Subject: CN=6907a11a-d0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:72:28:cd:bc:72:38:f1:5f:70:ec:c3:79: 14:83:35:1b:0e:67:85:c1:8e:39:43:83:51:2c:52: 43:4c:ed:02:1c:6c:e2:49:35:1d:a7:0e:37:24:fb: 15:d9:d0:dc:bc:3b:cc:e5:9c:28:02:29:82:99:a8: 84:aa:41:5f:3d:d7:ca:72:e5:99:7c:fc:a7:fe:41: 66:a8:86:9f:7c:5f:05:e1:78:fd:38:84:5f:1e:8d: 41:35:76:30:06:27:89:e4:50:e7:a3:03:f5:f1:73: 5d:5e:c0:cb:67:50:12:a4:d3:04:d9:5e:59:38:e2: 85:ef:ac:71:51:cc:ed:0f:0d:f4:c9:7b:38:05:f5: 30:95:d2:e5:00:a0:cc:c0:26:8a:66:3b:6f:7e:39: b9:95:d2:ad:2e:2b:31:ef:82:41:e3:8d:13:f3:77: 52:d1:73:32:a1:29:94:87:66:dc:70:23:04:9e:24: e0:f8:49:9e:ad:c2:99:a4:14:37:32:93:98:96:93: 65:1a:9d:e7:47:4b:c6:5d:7c:8a:a6:56:43:bb:e5: c0:61:d2:e0:d8:12:ef:aa:e5:93:65:79:da:ad:f0: a7:6b:a1:41:a1:91:c6:e2:2a:e6:98:30:1d:ad:f3: c4:23:8a:6b:6a:73:d7:c6:17:c8:bd:74:14:07:f3: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:46:82:13:12:EF:51:90:13:88:2B:DB:09:F9:FF:31:15:73:6F:D9 X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8e:61:ca:4f:50:27:c0:12:18:a2:80:c3:11:88:d8:3b:44: c3:20:a6:df:3d:8e:d4:53:f9:09:08:37:22:14:fe:43:54:89: b9:2c:98:e7:94:01:b9:86:2e:7b:8f:c4:2a:77:65:81:93:98: c6:22:d0:87:9f:e6:26:d3:18:6a:3b:70:74:67:98:55:27:97: db:83:27:1f:3f:a6:4c:a8:ad:22:1f:5c:c0:57:13:da:54:d9: 3f:4e:75:dd:e9:83:de:b3:f5:26:44:09:11:e3:a3:4b:71:7b: 5d:b4:f9:12:e0:2c:d7:6b:b6:96:48:05:1a:a5:68:98:b6:01: 96:2c:8b:cc:97:81:ab:07:ac:e6:31:8f:92:54:4d:d1:93:2d: 84:ca:33:7b:01:99:cc:2f:cb:ee:4e:e4:05:17:e6:58:1e:a9: 04:02:07:d8:ab:65:6f:c1:33:3c:2f:93:1a:42:5a:8d:ce:6c: c9:73:9d:9f:50:4c:ad:d0:b1:89:a4:a5:2c:fb:18:b1:f6:22: 01:94:9d:66:6b:e7:b6:af:6c:23:ab:99:99:f5:63:62:f5:f2: 95:55:a8:81:48:c2:e3:81:6f:6b:f7:0f:bd:fc:b2:01:1b:c8: b8:cf:ce:59:30:92:12:3f:4b:80:23:d4:fb:b5:55:66:aa:0c: b7:68:2c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUxMTAyMTgyMTE0WhcNMjUxMTA5MTgyMTE0WjAYMRYwFAYD VQQDEw02OTA3YTExYS1kMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAFyKM28cjjxX3Dsw3kUgzUbDmeFwY45Q4NRLFJDTO0CHGziSTUdpw43JPsV 2dDcvDvM5ZwoAimCmaiEqkFfPdfKcuWZfPyn/kFmqIaffF8F4Xj9OIRfHo1BNXYw BieJ5FDnowP18XNdXsDLZ1ASpNME2V5ZOOKF76xxUcztDw30yXs4BfUwldLlAKDM wCaKZjtvfjm5ldKtLisx74JB440T83dS0XMyoSmUh2bccCMEniTg+EmercKZpBQ3 MpOYlpNlGp3nR0vGXXyKplZDu+XAYdLg2BLvquWTZXnarfCna6FBoZHG4irmmDAd rfPEI4pranPXxhfIvXQUB/NjeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxGghMS 71GQE4gr2wn5/zEVc2/ZMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2jmHKT1AnwBIYooDDEYjYO0TDIKbfPY7UU/kJCDciFP5DVIm5LJjn lAG5hi57j8Qqd2WBk5jGItCHn+Ym0xhqO3B0Z5hVJ5fbgycfP6ZMqK0iH1zAVxPa VNk/TnXd6YPes/UmRAkR46NLcXtdtPkS4CzXa7aWSAUapWiYtgGWLIvMl4GrB6zm MY+SVE3Rky2EyjN7AZnML8vuTuQFF+ZYHqkEAgfYq2VvwTM8L5MaQlqNzmzJc52f UEyt0LGJpKUs+xix9iIBlJ1ma+e2r2wjq5mZ9WNi9fKVVaiBSMLjgW9r9w+9/LIB G8i4z85ZMJISP0uAI9T7tVVmqgy3aCyR -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:16 2025 by rpki-client