$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: bLsfuNMRwPcR3jM9iXVMW7i4k4SFX66M9Vx73oXz1Ns= Subject key identifier: 27:62:9F:DA:45:2A:A8:6B:69:C8:B1:54:02:8D:26:DD:14:62:1F:30 Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 0202 Signing time: Mon 27 Oct 2025 04:04:19 +0000 Manifest this update: Mon 27 Oct 2025 04:04:19 +0000 Manifest next update: Mon 03 Nov 2025 04:04:19 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: gmD8habkdR3AjBuGsk/bE8M06rP7+6a1vPMv63eNakY=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 04:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Oct 27 04:04:19 2025 GMT Not After : Nov 3 04:04:19 2025 GMT Subject: CN=68feef43-d522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:38:94:06:d7:52:a9:46:4e:5a:1f:d6:3a: 85:b9:05:12:a3:76:d7:42:0b:39:a4:4e:24:b7:e6: ad:29:54:d4:d6:6a:e7:97:ae:7f:b3:2d:4c:4f:2e: 1a:8c:71:bb:37:15:76:e1:fc:31:60:3a:07:bd:43: 07:e5:9d:25:75:58:46:2f:46:04:31:c9:99:a2:f0: 76:6a:18:50:43:2a:20:35:18:b8:ce:79:ce:74:30: 71:bb:8c:2c:98:a0:62:95:b2:37:c9:15:d5:f8:b2: f5:5a:2b:60:63:a6:05:ce:ad:17:f9:2b:86:e9:3a: f3:a6:2a:84:d2:7a:0d:1f:2e:ed:6f:05:7d:1c:03: 02:de:b5:90:4a:ca:67:8f:71:c8:ab:1d:db:92:97: ce:16:ee:2d:80:55:36:c8:7f:68:a8:44:ae:48:af: 94:41:4b:9f:31:ef:28:09:41:a5:a5:d4:12:4f:c4: ee:4f:43:fc:d5:f5:a9:30:47:a8:bb:0f:c9:2e:e6: 94:de:57:65:77:92:e0:33:50:16:e1:ed:b6:96:69: 55:78:0c:15:c3:bb:ab:44:88:53:86:ee:0e:20:a2: 27:d8:04:b9:c9:3a:9e:68:f4:40:05:32:40:a1:43: 48:7e:61:7d:d6:c9:15:3a:3b:56:b6:3a:b6:2c:c0: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:9F:DA:45:2A:A8:6B:69:C8:B1:54:02:8D:26:DD:14:62:1F:30 X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4d:ea:59:97:05:d3:a0:bb:28:6b:bf:ce:3a:60:d1:d9:b2: ff:22:c7:af:91:1c:4c:d8:a8:49:3f:c5:90:67:4e:70:8c:cb: b7:c5:f8:88:f6:8a:b0:33:04:ff:f3:38:05:2f:59:f7:83:35: 9f:bf:58:08:da:ed:10:cc:55:a3:89:c2:7a:58:b3:0b:34:1d: 69:62:ed:4c:0a:04:50:db:22:8c:31:72:f3:32:5a:7b:31:94: 13:a8:24:ad:06:20:cc:65:ca:02:db:b8:1b:5e:1e:d9:18:54: 6e:51:0b:f9:e0:4b:60:a1:bc:2c:28:b2:2c:11:b3:76:6d:1a: bb:53:42:99:48:99:01:be:21:cb:7c:c9:9e:1b:c8:68:bd:ef: 90:26:c6:55:f0:93:60:24:f4:d9:64:fe:4d:dc:d7:8f:82:b8: 46:3e:61:b9:b3:69:a2:f2:a3:c1:d7:72:8c:84:59:8c:03:d4: 59:47:f9:77:45:98:ac:6a:98:45:69:2a:1f:79:50:d9:04:f7: a8:4f:5b:1a:2d:4c:0a:3b:5f:0a:b8:e9:f9:86:72:96:9e:40: b1:8b:16:df:0d:43:ac:a7:3c:13:68:37:48:8f:c9:fd:09:4c: f8:b4:0d:b0:d9:fc:64:72:63:5e:8c:65:9d:c5:e9:7e:80:d7: b8:b6:99:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUxMDI3MDQwNDE5WhcNMjUxMTAzMDQwNDE5WjAYMRYwFAYD VQQDEw02OGZlZWY0My1kNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYg4lAbXUqlGTlof1jqFuQUSo3bXQgs5pE4kt+atKVTU1mrnl65/sy1MTy4a jHG7NxV24fwxYDoHvUMH5Z0ldVhGL0YEMcmZovB2ahhQQyogNRi4znnOdDBxu4ws mKBilbI3yRXV+LL1WitgY6YFzq0X+SuG6TrzpiqE0noNHy7tbwV9HAMC3rWQSspn j3HIqx3bkpfOFu4tgFU2yH9oqESuSK+UQUufMe8oCUGlpdQST8TuT0P81fWpMEeo uw/JLuaU3ldld5LgM1AW4e22lmlVeAwVw7urRIhThu4OIKIn2AS5yTqeaPRABTJA oUNIfmF91skVOjtWtjq2LMCXDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdin9pF KqhracixVAKNJt0UYh8wMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2TepZlwXToLsoa7/OOmDR2bL/IsevkRxM2KhJP8WQZ05wjMu3xfiI 9oqwMwT/8zgFL1n3gzWfv1gI2u0QzFWjicJ6WLMLNB1pYu1MCgRQ2yKMMXLzMlp7 MZQTqCStBiDMZcoC27gbXh7ZGFRuUQv54EtgobwsKLIsEbN2bRq7U0KZSJkBviHL fMmeG8hove+QJsZV8JNgJPTZZP5N3NePgrhGPmG5s2mi8qPB13KMhFmMA9RZR/l3 RZisaphFaSofeVDZBPeoT1saLUwKO18KuOn5hnKWnkCxixbfDUOspzwTaDdIj8n9 CUz4tA2w2fxkcmNejGWdxel+gNe4tpmZ -----END CERTIFICATE-----Generated at Tue Oct 28 18:47:30 2025 by rpki-client