$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: OrXTnDJLGGo4y98r6ypiEiDWBJYAU4yWUhF/9ZVH4Eg= Subject key identifier: F7:79:CD:79:E2:DC:60:2E:F3:01:3B:01:9F:69:F2:9C:2E:F3:9A:75 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0E55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0E4C Signing time: Tue 04 Nov 2025 17:52:34 +0000 Manifest this update: Tue 04 Nov 2025 17:52:34 +0000 Manifest next update: Tue 11 Nov 2025 17:52:34 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: ueVszWyFcH+iem3kTZxmUPROFzC8TH60XEaVwj2Inw0=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3669 (0xe55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Nov 4 17:52:34 2025 GMT Not After : Nov 11 17:52:34 2025 GMT Subject: CN=690a3d62-52dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:52:4b:d8:9e:26:6e:23:aa:dc:ee:c5:9d: 57:d0:22:bc:0c:bf:77:15:28:4c:54:43:77:da:4a: d6:a5:ba:56:f2:8b:22:c3:fc:8b:a7:bd:62:8d:09: c2:18:f1:94:fc:43:b6:00:10:5e:7b:9a:d4:36:de: 42:34:4b:89:94:64:16:93:b9:d1:73:69:9d:1d:1d: 3c:06:c0:3f:7e:09:e1:ce:2d:67:0d:e0:23:ad:9a: e3:d1:a7:85:d8:36:c5:72:74:4e:2b:cd:81:ba:65: 33:69:38:df:cf:a3:1a:01:26:8c:72:d7:84:37:01: 74:5b:0c:74:fd:c4:7b:4d:ed:b3:e9:e7:62:27:5b: 1d:6c:51:39:7d:bc:c0:90:97:8f:5c:89:ff:3d:2a: bb:5d:55:92:29:31:66:b2:37:e2:3a:b3:16:64:98: 29:45:83:9a:69:dd:ec:4f:6f:23:54:9a:79:31:fc: be:ab:57:6a:3e:1c:2d:77:6f:29:35:b3:4e:4f:b7: 33:51:65:bb:ef:0a:55:9f:1b:e2:71:eb:0c:43:e9: 07:6d:0f:c1:f3:19:2d:5d:2b:e5:52:1d:f2:49:c7: 6b:4b:b3:32:e7:83:7e:95:00:7f:18:06:11:ea:49: 64:2e:9a:9b:43:13:31:18:da:bf:15:e1:a2:b8:b4: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:79:CD:79:E2:DC:60:2E:F3:01:3B:01:9F:69:F2:9C:2E:F3:9A:75 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a6:16:36:23:b3:59:a4:fb:0f:56:78:2b:48:6b:38:c5:66: 26:41:84:c4:a6:1c:c2:5e:61:b9:32:ed:ad:d6:d0:be:19:d8: fd:f0:46:26:66:6c:ce:89:7c:f6:03:3a:9e:3b:0f:90:2d:3c: d7:19:ae:bb:60:e5:92:52:76:d0:5f:2f:f7:35:13:e1:2e:5b: 5c:5a:38:63:8a:b8:ac:13:9a:e4:37:03:6e:48:2a:dc:a8:4b: df:3a:e0:43:e3:9d:89:9e:a2:c5:75:64:87:d3:0a:de:76:95: e6:ac:fc:85:7a:b9:af:8f:2b:10:4f:b4:eb:c8:0a:02:a3:15: 56:d8:52:9e:d0:b9:b4:ab:43:da:07:eb:79:aa:0c:88:b6:6d: 81:63:66:bb:14:8f:28:46:e6:17:23:ca:0d:a7:f5:e3:86:55: a3:71:33:b4:6b:6d:96:d5:9f:bd:f0:61:ff:38:99:9a:ef:29: 2f:58:fb:73:0c:0e:db:7b:bf:67:b5:3a:a4:b6:77:f4:98:ec: d8:3a:9b:57:ab:90:c9:85:2e:8d:59:c0:38:16:26:f1:30:e6: 45:a3:97:14:29:aa:4c:9d:06:42:a5:36:bf:81:24:30:8f:68: 8d:9b:75:c8:4e:56:ab:bb:f2:09:6d:8e:d3:bb:9f:a5:b1:53: 4e:d1:df:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUxMTA0MTc1MjM0WhcNMjUxMTExMTc1MjM0WjAYMRYwFAYD VQQDEw02OTBhM2Q2Mi01MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthFSS9ieJm4jqtzuxZ1X0CK8DL93FShMVEN32krWpbpW8osiw/yLp71ijQnC GPGU/EO2ABBee5rUNt5CNEuJlGQWk7nRc2mdHR08BsA/fgnhzi1nDeAjrZrj0aeF 2DbFcnROK82BumUzaTjfz6MaASaMcteENwF0Wwx0/cR7Te2z6ediJ1sdbFE5fbzA kJePXIn/PSq7XVWSKTFmsjfiOrMWZJgpRYOaad3sT28jVJp5Mfy+q1dqPhwtd28p NbNOT7czUWW77wpVnxvicesMQ+kHbQ/B8xktXSvlUh3yScdrS7My54N+lQB/GAYR 6klkLpqbQxMxGNq/FeGiuLTKTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd5zXni 3GAu8wE7AZ9p8pwu85p1MB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArphY2I7NZpPsPVngrSGs4xWYmQYTEphzCXmG5Mu2t1tC+Gdj98EYm ZmzOiXz2AzqeOw+QLTzXGa67YOWSUnbQXy/3NRPhLltcWjhjirisE5rkNwNuSCrc qEvfOuBD452JnqLFdWSH0wredpXmrPyFermvjysQT7TryAoCoxVW2FKe0Lm0q0Pa B+t5qgyItm2BY2a7FI8oRuYXI8oNp/XjhlWjcTO0a22W1Z+98GH/OJma7ykvWPtz DA7be79ntTqktnf0mOzYOptXq5DJhS6NWcA4FibxMOZFo5cUKapMnQZCpTa/gSQw j2iNm3XITlaru/IJbY7Tu5+lsVNO0d/8 -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:35 2025 by rpki-client