$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft File: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json) Hash identifier: dIaxHqzLbjgF91bcDFZ1/7oE+cIlFNEJ30LX4tVGjow= Subject key identifier: 81:90:9B:20:D8:99:ED:03:E5:62:67:D9:F2:9B:7D:08:23:16:FD:27 Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64 Certificate issuer: /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft Manifest number: 0676 Signing time: Sat 25 Oct 2025 00:08:21 +0000 Manifest this update: Sat 25 Oct 2025 00:08:20 +0000 Manifest next update: Sat 01 Nov 2025 00:08:20 +0000 Files and hashes: 1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: M+btb5mJLw0UOt2Usip9yIcSg4POEFZ7fZ6w0+392S0=) 2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64 Validity Not Before: Oct 25 00:08:20 2025 GMT Not After : Nov 1 00:08:20 2025 GMT Subject: CN=68fc14f4-9816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:7a:23:db:a7:f6:ad:d7:69:19:3b:b4:5f: 7b:85:bc:21:d6:ed:50:33:05:21:f7:03:43:43:99: 2a:ca:d6:73:5b:95:12:44:30:0b:63:44:25:16:73: 69:c3:d4:d3:54:55:7f:e7:a7:7c:ad:a7:3c:53:39: 97:e9:45:ef:c1:0d:42:a2:e2:46:53:09:d5:68:4b: 6d:6a:f9:54:84:30:d5:22:9c:9f:d9:25:04:17:70: 82:fa:ee:fd:37:d1:12:8b:6f:4e:d6:73:f6:8c:de: 83:86:89:b1:4e:e1:42:da:c2:45:0d:d6:e4:06:b9: 21:55:79:dc:98:f0:ed:8e:b9:a7:21:f0:b1:af:d9: f6:13:a0:fa:b9:80:67:85:bb:ef:b9:d4:5d:95:ea: b5:32:3a:da:82:b5:5a:8c:bc:46:8b:0d:a7:35:ff: f8:1f:ed:11:63:df:6d:9b:f0:0a:11:0f:f0:cd:61: 50:b2:57:a6:3a:f1:3a:68:69:7a:aa:ab:d1:e6:dc: f0:d6:c6:c5:a1:27:f9:46:97:3e:9d:9a:e3:79:69: a5:60:90:d0:e7:3a:9e:17:ae:09:14:8e:da:b6:75: 0c:6d:77:21:99:ad:0f:6f:1d:8c:0b:da:53:71:f0: 94:f3:c8:00:5d:70:36:b6:cb:a8:2f:16:ae:64:ef: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:90:9B:20:D8:99:ED:03:E5:62:67:D9:F2:9B:7D:08:23:16:FD:27 X509v3 Authority Key Identifier: keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e6:9c:be:98:c9:64:16:82:59:85:d9:50:06:91:05:ff:33: f4:01:fc:4e:77:ad:06:0b:62:92:1b:f9:b6:84:03:88:51:58: 35:60:2d:86:92:dc:b8:a8:2c:e4:c9:8c:0a:97:89:b7:05:2c: 0c:e3:dd:c2:3f:0c:bf:c2:77:75:ad:17:72:07:f3:11:80:cd: 7b:45:2e:67:ed:c6:aa:64:bf:97:d7:f9:21:8a:be:35:56:80: 0c:e6:3d:1f:3f:d6:c2:9a:a2:1a:43:2a:8f:cf:14:e7:e8:8a: 1f:b0:cc:7b:ea:7b:8f:a4:a7:a9:c2:4d:6e:d7:5d:6c:d6:54: 6c:65:22:a8:cd:a5:06:1a:1e:85:7e:c6:f3:0e:8c:17:1e:3e: d2:fd:be:53:66:e4:07:42:9e:ce:8d:83:1d:d0:d9:0e:2f:56: 6b:82:c1:d9:de:7b:17:05:bb:65:78:8c:75:35:dd:12:45:ab: 4d:f4:45:52:78:7a:8e:46:9b:19:d0:24:ba:1e:05:09:a9:e9: cc:31:95:b4:57:59:64:78:d4:f3:84:5c:1b:5b:30:ad:18:42: 45:83:46:9b:80:60:33:54:c8:75:d3:b3:b3:28:cc:4c:a9:d3: 85:fd:b8:14:84:ce:5b:ba:4e:89:df:b9:e7:63:e0:83:ec:93: 8a:d3:d1:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U3Q0ExMTAvBgNVBAUTKEZGQjUwM0YyMDIzMjBDRDg2OTczQUZFNjFBMTZGQkI1 QzZGMjhENjQwHhcNMjUxMDI1MDAwODIwWhcNMjUxMTAxMDAwODIwWjAYMRYwFAYD VQQDEw02OGZjMTRmNC05ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20R6I9un9q3XaRk7tF97hbwh1u1QMwUh9wNDQ5kqytZzW5USRDALY0QlFnNp w9TTVFV/56d8rac8UzmX6UXvwQ1CouJGUwnVaEttavlUhDDVIpyf2SUEF3CC+u79 N9ESi29O1nP2jN6DhomxTuFC2sJFDdbkBrkhVXncmPDtjrmnIfCxr9n2E6D6uYBn hbvvudRdleq1MjragrVajLxGiw2nNf/4H+0RY99tm/AKEQ/wzWFQslemOvE6aGl6 qqvR5tzw1sbFoSf5Rpc+nZrjeWmlYJDQ5zqeF64JFI7atnUMbXchma0Pbx2MC9pT cfCU88gAXXA2tsuoLxauZO/QRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGQmyDY me0D5WJn2fKbfQgjFv0nMB8GA1UdIwQYMBaAFP+1A/ICMgzYaXOv5hoW+7XG8o1k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTdDQS8wMDNERTA2MDlB OTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeUROaHBjNl9tR2hiN3RjYnlq V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183VUQ4Z0l5RE5ocGM2X21HaGI3dGNieWpXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTdDQS8wMDNERTA2MDlBOTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeURO aHBjNl9tR2hiN3RjYnlqV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC25py+mMlkFoJZhdlQBpEF/zP0AfxOd60GC2KSG/m2hAOIUVg1YC2G kty4qCzkyYwKl4m3BSwM493CPwy/wnd1rRdyB/MRgM17RS5n7caqZL+X1/khir41 VoAM5j0fP9bCmqIaQyqPzxTn6IofsMx76nuPpKepwk1u111s1lRsZSKozaUGGh6F fsbzDowXHj7S/b5TZuQHQp7OjYMd0NkOL1ZrgsHZ3nsXBbtleIx1Nd0SRatN9EVS eHqORpsZ0CS6HgUJqenMMZW0V1lkeNTzhFwbWzCtGEJFg0abgGAzVMh107OzKMxM qdOF/bgUhM5buk6J37nnY+CD7JOK09G3 -----END CERTIFICATE-----Generated at Sun Oct 26 17:47:11 2025 by rpki-client