$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: 8oWgQhwt6L625SIs42kM+NlfTGlS8bw9tVkE332MoPE= Subject key identifier: AA:64:80:2C:2A:58:E3:E9:DB:09:C7:8B:B8:4F:78:B4:F5:0B:88:3F Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0870 Signing time: Wed 22 Oct 2025 21:22:39 +0000 Manifest this update: Wed 22 Oct 2025 21:22:38 +0000 Manifest next update: Wed 29 Oct 2025 21:22:38 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: LQbBsM1bRnemMd+0bfAM3n+yAI1Eg0drRaRqW0aO4R8=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: 9/6FBIuUpW3NyM8fzRBAE8GJH3DWuJevjPt7vt5pHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Oct 22 21:22:38 2025 GMT Not After : Oct 29 21:22:38 2025 GMT Subject: CN=68f94b1f-cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:2f:09:9d:35:04:61:be:b0:9a:16:ef:23: 18:e4:e0:de:53:d1:67:b2:b3:6f:dc:b5:df:54:b5: ef:eb:db:bf:9f:8d:9e:d6:6f:79:d4:a2:8d:4c:e0: 1d:11:f8:13:1b:06:66:53:77:e5:78:b3:a1:52:07: b1:80:9e:f2:06:90:45:42:2f:81:ee:49:48:18:f6: 69:a0:f0:b6:7e:13:53:8c:b8:c4:fe:88:a8:5f:45: 67:2c:3f:37:4e:2b:79:44:af:b0:b6:30:e5:9f:04: 99:a3:08:de:25:e1:2d:03:1e:93:7e:bf:ed:8f:50: b8:ad:61:26:63:8f:b9:66:7e:42:16:9c:91:68:b4: b8:3d:40:0d:cb:71:ad:04:49:9b:1b:89:3c:b5:a5: 09:97:d4:7f:25:69:3f:ad:1b:2e:53:70:77:a8:cf: a9:86:f5:55:48:a7:d7:f6:a5:b5:44:c7:58:f2:58: 42:3b:48:3b:73:45:42:61:0d:50:c2:53:23:13:e6: ee:be:cb:49:f5:24:b2:d2:81:68:52:40:68:a7:70: da:ce:af:d0:4b:6d:55:75:ff:b1:9c:a7:c2:66:8c: 00:ec:c6:70:5b:c5:58:83:88:e4:6a:9c:a5:87:dd: e7:4a:d4:e2:2e:d3:50:c8:e9:34:d4:b9:2c:0c:63: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:80:2C:2A:58:E3:E9:DB:09:C7:8B:B8:4F:78:B4:F5:0B:88:3F X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d0:35:6f:5e:b9:90:04:34:64:84:b8:ab:34:8a:98:0f:e6: 75:ca:6c:7c:a5:6e:8b:cc:79:47:95:53:1c:26:22:19:46:69: ed:f0:64:ff:41:cc:23:4f:33:22:0c:7d:6b:94:01:c0:3c:e0: d7:23:9f:fa:72:41:d1:6f:ef:dc:b3:95:2d:16:69:f1:fd:e2: ca:0d:dc:75:09:59:7e:ab:5a:39:76:ef:65:01:23:a7:7c:84: bb:7b:77:0f:da:8b:7a:59:e7:29:bc:2e:b2:45:b2:dc:86:0e: fd:04:6f:2a:ee:b0:e7:91:d9:75:94:89:5c:f6:3b:eb:d5:15: 19:a2:3f:8f:1d:e1:e3:f4:d2:50:e6:33:bb:ad:07:1d:df:42: 99:92:d6:78:ef:c6:59:3f:47:0e:51:a8:c9:f0:fc:bc:09:1f: 67:aa:5e:d5:43:dc:2b:1b:c6:70:d9:e8:72:a7:0d:5a:e6:18: 51:59:2b:a0:a5:4b:13:29:e5:8a:99:aa:5e:4c:76:0a:bd:3b: 10:6e:39:db:3d:f4:a2:c4:05:6f:d5:c4:8a:e0:3d:b4:73:f4: c6:42:9f:e0:ae:ca:98:14:a0:dc:f2:88:1a:f5:07:ac:3c:9f: 7d:a2:ef:f0:04:ca:93:e0:96:01:3a:f5:aa:f5:76:df:39:3f: eb:82:73:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjUxMDIyMjEyMjM4WhcNMjUxMDI5MjEyMjM4WjAYMRYwFAYD VQQDEw02OGY5NGIxZi1jYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6YvCZ01BGG+sJoW7yMY5ODeU9FnsrNv3LXfVLXv69u/n42e1m951KKNTOAd EfgTGwZmU3fleLOhUgexgJ7yBpBFQi+B7klIGPZpoPC2fhNTjLjE/oioX0VnLD83 Tit5RK+wtjDlnwSZowjeJeEtAx6Tfr/tj1C4rWEmY4+5Zn5CFpyRaLS4PUANy3Gt BEmbG4k8taUJl9R/JWk/rRsuU3B3qM+phvVVSKfX9qW1RMdY8lhCO0g7c0VCYQ1Q wlMjE+buvstJ9SSy0oFoUkBop3Dazq/QS21Vdf+xnKfCZowA7MZwW8VYg4jkapyl h93nStTiLtNQyOk01LksDGNcXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpkgCwq WOPp2wnHi7hPeLT1C4g/MB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk0DVvXrmQBDRkhLirNIqYD+Z1ymx8pW6LzHlHlVMcJiIZRmnt8GT/ QcwjTzMiDH1rlAHAPODXI5/6ckHRb+/cs5UtFmnx/eLKDdx1CVl+q1o5du9lASOn fIS7e3cP2ot6WecpvC6yRbLchg79BG8q7rDnkdl1lIlc9jvr1RUZoj+PHeHj9NJQ 5jO7rQcd30KZktZ478ZZP0cOUajJ8Py8CR9nql7VQ9wrG8Zw2ehypw1a5hhRWSug pUsTKeWKmapeTHYKvTsQbjnbPfSixAVv1cSK4D20c/TGQp/grsqYFKDc8oga9Qes PJ99ou/wBMqT4JYBOvWq9XbfOT/rgnNt -----END CERTIFICATE-----Generated at Thu Oct 23 19:04:40 2025 by rpki-client