$ rpki-client -vvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft File: a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json) Hash identifier: QwKwrBRwnt2gGj404SB5bMvQynEJ9NhWOnTnThKu/xw= Subject key identifier: 79:96:6F:8B:19:45:93:C3:19:47:AC:96:4C:C6:C0:21:BD:CC:38:7C Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41 Certificate issuer: /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941 Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft Manifest number: 0791 Signing time: Sun 02 Nov 2025 21:28:00 +0000 Manifest this update: Sun 02 Nov 2025 21:27:59 +0000 Manifest next update: Sun 09 Nov 2025 21:27:59 +0000 Files and hashes: 1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: GtQ09BSEycG0c0Wan6RUp9VMswlQn90WdD9m8j1F5XE=) 2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: /eGyMyfZrwg+tW0iicICs4kHkYiGhwJp9BCaRgreCno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941 Validity Not Before: Nov 2 21:27:59 2025 GMT Not After : Nov 9 21:27:59 2025 GMT Subject: CN=6907cce0-7ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f7:52:44:1f:9d:76:01:65:2f:91:87:d6:c9: 32:78:5e:8e:9b:48:4a:28:0c:11:1b:88:c1:bd:3b: b8:37:e8:7f:6a:8e:74:bf:07:02:51:ec:11:23:de: 0f:60:85:57:bb:2f:18:f9:d6:34:f0:ab:27:d5:56: ec:f3:f4:73:c2:0b:3e:80:8a:90:29:3c:7f:b4:ab: 72:6c:3d:3c:54:6e:37:93:27:01:02:d6:4c:b8:5a: fe:97:66:b8:68:1b:c6:71:93:6c:8e:27:25:c6:b4: d1:b3:94:e2:16:dc:de:14:bc:d9:c8:39:6b:a6:85: 41:32:e0:0f:14:33:c3:46:c2:d8:29:06:bb:76:c4: 88:6d:e4:67:6b:1a:2d:6e:94:c8:3d:0f:f7:3e:92: 5c:7c:40:9b:f6:29:7f:99:f0:c2:0f:e2:be:f9:49: bb:36:d1:a1:d9:69:f7:61:94:a6:af:16:ba:05:1c: 85:68:a7:04:3e:bd:2b:c2:81:e2:86:c6:2b:87:61: 05:2d:6e:5c:e2:46:b1:44:b1:ae:1e:37:04:d0:61: 87:2b:26:5e:c4:ec:ac:6f:4b:92:ed:de:55:8d:b6: 73:e8:54:c4:49:c1:d3:55:f3:4a:85:21:19:c2:2b: 62:58:d4:a3:7d:e9:11:52:9f:21:28:f9:44:b2:71: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:96:6F:8B:19:45:93:C3:19:47:AC:96:4C:C6:C0:21:BD:CC:38:7C X509v3 Authority Key Identifier: keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:51:59:a9:62:1d:04:96:ea:eb:b5:db:1d:d4:9c:45:fa:a8: d2:0f:08:48:23:44:15:3e:e5:e5:78:0d:20:0d:dd:26:1c:b1: 08:a7:0f:7f:c0:dd:5f:32:15:c9:dd:1c:ab:51:cf:82:4a:2a: e8:ca:ab:79:49:57:a1:4e:14:2e:ec:b5:4a:1c:99:f9:b7:64: 32:61:f7:42:ca:56:68:9d:76:4b:30:ac:76:c7:3d:4b:c3:5a: ab:80:26:9a:a6:98:f2:be:10:80:ab:ab:11:6a:f3:90:d1:f8: cc:90:06:51:63:28:85:08:28:f3:43:00:27:da:2f:52:e5:d3: c2:22:a9:6a:a0:cb:33:e7:b5:45:ee:fd:16:71:a8:2b:29:15: 7c:5a:90:01:53:0a:46:17:03:c5:c5:35:a0:59:bf:0f:03:24: ab:c6:e8:6e:41:56:b5:64:46:81:8f:b8:c5:ad:5b:cc:14:2b: 80:f4:03:54:30:3a:40:a8:d6:cf:48:0b:13:71:40:74:12:5a: dc:65:bd:6e:08:1b:9a:5c:28:44:95:a2:45:87:b2:9d:51:fd: 1c:58:ec:ba:48:35:93:3b:6c:91:e0:a6:18:4d:d8:a8:56:59: bd:68:8b:7f:68:fc:bb:a4:32:03:a8:44:49:57:b2:7a:89:3b: f8:a3:de:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M5MjgxMTAvBgNVBAUTKDZCQjIyOUI1MDY0NDJGQTA0OEE0Rjc5RDNDQjQ0RkEw RTAwNDc5NDEwHhcNMjUxMTAyMjEyNzU5WhcNMjUxMTA5MjEyNzU5WjAYMRYwFAYD VQQDEw02OTA3Y2NlMC03YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9fdSRB+ddgFlL5GH1skyeF6Om0hKKAwRG4jBvTu4N+h/ao50vwcCUewRI94P YIVXuy8Y+dY08Ksn1Vbs8/Rzwgs+gIqQKTx/tKtybD08VG43kycBAtZMuFr+l2a4 aBvGcZNsjiclxrTRs5TiFtzeFLzZyDlrpoVBMuAPFDPDRsLYKQa7dsSIbeRnaxot bpTIPQ/3PpJcfECb9il/mfDCD+K++Um7NtGh2Wn3YZSmrxa6BRyFaKcEPr0rwoHi hsYrh2EFLW5c4kaxRLGuHjcE0GGHKyZexOysb0uS7d5VjbZz6FTEScHTVfNKhSEZ witiWNSjfekRUp8hKPlEsnFhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmWb4sZ RZPDGUeslkzGwCG9zDh8MB8GA1UdIwQYMBaAFGuyKbUGRC+gSKT3nTy0T6DgBHlB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkyOC83N0Y1NDZFQzJB NDMxMUVCODk5MjM3NTNDNEY5QUUwMi9hN0lwdFFaRUw2QklwUGVkUExSUG9PQUVl VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E3SXB0UVpFTDZCSXBQZWRQTFJQb09BRWVVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzkyOC83N0Y1NDZFQzJBNDMxMUVCODk5MjM3NTNDNEY5QUUwMi9hN0lwdFFaRUw2 QklwUGVkUExSUG9PQUVlVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLUVmpYh0Elurrtdsd1JxF+qjSDwhII0QVPuXleA0gDd0mHLEIpw9/ wN1fMhXJ3RyrUc+CSiroyqt5SVehThQu7LVKHJn5t2QyYfdCylZonXZLMKx2xz1L w1qrgCaappjyvhCAq6sRavOQ0fjMkAZRYyiFCCjzQwAn2i9S5dPCIqlqoMsz57VF 7v0WcagrKRV8WpABUwpGFwPFxTWgWb8PAySrxuhuQVa1ZEaBj7jFrVvMFCuA9ANU MDpAqNbPSAsTcUB0ElrcZb1uCBuaXChElaJFh7KdUf0cWOy6SDWTO2yR4KYYTdio Vlm9aIt/aPy7pDIDqERJV7J6iTv4o94O -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:15 2025 by rpki-client