$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: uw7DXho9OwIZ/yS4/F92hG8d2rAvDmLa0AT+i7TqLvs= Subject key identifier: 52:3D:5D:D7:1C:AD:93:4B:0E:CF:89:04:02:E2:C9:6E:F3:BC:8F:4E Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A11 Signing time: Sun 02 Nov 2025 19:54:16 +0000 Manifest this update: Sun 02 Nov 2025 19:54:15 +0000 Manifest next update: Sun 09 Nov 2025 19:54:15 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 0gZSuoGXyVAC8zFTFuvl0DXywJIIT5qCKEOXZMoX7oQ=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Nov 2 19:54:15 2025 GMT Not After : Nov 9 19:54:15 2025 GMT Subject: CN=6907b6e8-230c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:42:81:e6:74:a1:0c:dc:ec:fa:2a:fd:80: 7c:b0:8c:c6:c8:ea:33:7a:81:1c:18:e3:d3:1e:96: c5:52:62:36:21:de:0b:26:df:9c:58:54:3c:8d:72: 8e:eb:b0:df:e3:8f:f8:f5:39:89:a9:5a:41:46:15: 24:f6:20:64:fe:8c:76:b3:15:f9:64:bc:aa:f8:5f: 9b:b2:2a:06:e3:f9:1b:07:4e:bc:54:3a:9a:67:60: 54:ad:76:2f:7f:24:39:7a:06:a7:0c:f9:55:49:40: b7:9d:f2:2d:d5:3a:65:af:33:4f:8e:e9:cb:f9:36: 94:c5:75:d2:ff:40:ee:41:31:06:35:f7:7c:6e:5c: f6:da:be:04:58:35:0d:03:27:b4:e6:fd:ac:6d:13: 80:aa:0e:70:7c:68:6e:19:7c:76:94:be:15:2f:50: 5e:76:cc:64:e1:f3:88:06:51:26:b4:25:de:3a:be: 5c:41:74:6f:bc:96:5f:ba:80:bb:36:01:91:e9:a1: 59:50:60:89:92:ac:fe:a8:8b:15:ec:40:2f:45:82: 4e:c6:62:9b:83:ed:8a:0f:80:6c:1e:d6:bc:a9:27: 19:4c:bc:62:d9:d9:2f:bf:f9:2a:51:0d:83:39:25: 58:d1:5a:b5:87:3f:92:38:00:b7:b7:f8:28:0c:6a: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3D:5D:D7:1C:AD:93:4B:0E:CF:89:04:02:E2:C9:6E:F3:BC:8F:4E X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:32:ad:d9:c1:75:02:46:3e:3e:47:9f:af:89:9e:e1:c9: 2b:73:7c:8a:bc:68:d7:9a:26:ab:e7:ac:ed:99:aa:85:e3:6d: 8e:07:e9:3a:79:4f:ac:14:c3:69:20:21:66:ef:37:d9:01:a2: a8:43:68:db:bd:f6:00:46:3c:50:84:b7:0a:e1:15:cd:fd:e9: f6:3d:4f:fd:71:69:74:36:09:55:60:db:73:c3:7d:51:d4:e5: 04:4c:8c:fd:71:51:3c:35:33:85:40:cd:75:7b:46:d2:2c:78: 73:61:37:42:95:bd:19:d4:41:cb:94:78:f0:25:dc:ab:16:bc: a6:9f:17:b4:70:de:75:73:1e:42:6b:c9:a5:7d:68:1e:d9:a8: 2c:71:d3:b2:80:6f:68:7e:90:54:df:b4:86:eb:6a:7f:35:61: a8:89:c9:95:64:6a:ab:40:64:5e:5b:b6:11:74:9d:70:4b:52: 9a:3c:c6:66:49:6f:0d:be:8d:2e:da:04:2d:37:c2:76:a0:ba: 99:40:81:55:80:1c:a8:38:d8:33:d6:be:fc:a7:ad:0f:83:fe: 1f:8d:4b:b0:c8:dc:ce:ab:94:49:d7:66:93:4c:e1:c3:d8:35: 35:25:26:1f:8b:3b:e0:91:ab:99:be:fe:19:60:60:3f:22:78: 53:36:ff:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUxMTAyMTk1NDE1WhcNMjUxMTA5MTk1NDE1WjAYMRYwFAYD VQQDEw02OTA3YjZlOC0yMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlt9CgeZ0oQzc7Poq/YB8sIzGyOozeoEcGOPTHpbFUmI2Id4LJt+cWFQ8jXKO 67Df44/49TmJqVpBRhUk9iBk/ox2sxX5ZLyq+F+bsioG4/kbB068VDqaZ2BUrXYv fyQ5eganDPlVSUC3nfIt1TplrzNPjunL+TaUxXXS/0DuQTEGNfd8blz22r4EWDUN Aye05v2sbROAqg5wfGhuGXx2lL4VL1Bedsxk4fOIBlEmtCXeOr5cQXRvvJZfuoC7 NgGR6aFZUGCJkqz+qIsV7EAvRYJOxmKbg+2KD4BsHta8qScZTLxi2dkvv/kqUQ2D OSVY0Vq1hz+SOAC3t/goDGoqmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFI9Xdcc rZNLDs+JBALiyW7zvI9OMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl9jKt2cF1AkY+Pkefr4me4ckrc3yKvGjXmiar56ztmaqF422OB+k6 eU+sFMNpICFm7zfZAaKoQ2jbvfYARjxQhLcK4RXN/en2PU/9cWl0NglVYNtzw31R 1OUETIz9cVE8NTOFQM11e0bSLHhzYTdClb0Z1EHLlHjwJdyrFrymnxe0cN51cx5C a8mlfWge2agscdOygG9ofpBU37SG62p/NWGoicmVZGqrQGReW7YRdJ1wS1KaPMZm SW8Nvo0u2gQtN8J2oLqZQIFVgByoONgz1r78p60Pg/4fjUuwyNzOq5RJ12aTTOHD 2DU1JSYfizvgkauZvv4ZYGA/InhTNv/J -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:18 2025 by rpki-client