$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: AtmexFVPEwr3opyhKBaU1QLFPFrnjDnMwJbLBN4MDZY= Subject key identifier: E5:99:12:69:1A:BA:1D:9D:4D:33:52:68:DD:BC:31:A3:DE:FE:38:EB Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: C6 Signing time: Mon 03 Nov 2025 05:54:21 +0000 Manifest this update: Mon 03 Nov 2025 05:54:21 +0000 Manifest next update: Mon 10 Nov 2025 05:54:21 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: phLrPxOteAr7+jt9TGK9ntjD6NC7yC4gpShfecHELEA=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Nov 3 05:54:21 2025 GMT Not After : Nov 10 05:54:21 2025 GMT Subject: CN=6908438d-af33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:87:e2:3e:2e:4f:37:fa:c3:99:37:74:33: 50:af:8d:c8:18:2b:fd:c9:a7:e5:ed:68:2a:c5:1c: b4:29:db:f9:d2:a7:81:e3:28:b0:27:19:67:23:b9: a9:75:26:eb:21:6b:a7:97:f4:07:8d:c7:df:12:74: 83:de:70:f2:7f:ac:fb:c8:dc:68:ce:9f:9d:9d:13: 51:31:d3:f5:8e:a3:a1:d3:5a:31:58:b2:0c:34:b4: 8c:59:2d:87:69:d7:33:13:b8:15:b7:df:08:87:05: c5:26:cc:91:1e:ac:f8:26:67:23:b6:af:4e:10:2d: 97:84:b2:64:99:16:e2:d0:fd:90:ba:90:27:47:7c: a7:60:26:de:e2:c8:15:e2:de:85:f0:dd:38:b4:27: 21:23:93:c4:ca:98:f2:a7:a1:f5:8c:3f:99:5a:09: c1:1c:f5:3e:35:9e:11:d2:d0:31:e2:60:39:eb:a7: d5:14:a1:bf:64:13:e3:f9:59:76:71:6f:5d:32:ad: 5b:09:cf:3b:a5:1e:5c:12:b2:62:67:d8:e4:bd:08: 04:d3:59:bb:cd:bb:26:24:b3:64:b8:59:cb:41:26: da:2b:61:76:12:c0:29:27:45:7f:55:10:8f:fd:2d: e7:4a:7d:5c:3e:25:16:5b:f4:7b:b1:c9:6c:bc:0f: 2d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:99:12:69:1A:BA:1D:9D:4D:33:52:68:DD:BC:31:A3:DE:FE:38:EB X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f4:88:5e:15:9d:f0:7b:67:5e:5f:94:85:f1:c6:ec:29:e2: 31:0e:0a:c5:5e:8e:06:1d:5a:37:68:7c:31:6c:21:1c:aa:3a: ec:b3:10:83:ca:d9:e6:4b:5f:1a:d3:77:b9:08:ca:62:11:7d: 9a:6d:be:15:c2:e4:78:2d:b8:f7:23:cf:c3:21:90:51:fa:2e: f5:33:7b:78:8c:49:0e:7f:b4:3d:9b:d8:0f:8a:d0:c8:2c:96: 8f:f2:aa:17:76:ef:58:1b:4f:83:46:44:06:18:11:fe:8e:33: d2:35:42:fa:65:2d:c5:54:5b:14:7c:a5:b7:08:5c:3c:c5:82: f4:14:65:c1:37:bc:27:00:a6:cf:25:7d:94:b4:71:8f:ad:5d: 80:9d:5f:0c:4b:94:5b:99:70:f7:d2:9f:5d:00:27:aa:2f:b9: 41:8b:a7:ec:13:11:87:37:34:dd:c9:aa:18:2e:0e:96:47:e1: 23:16:d5:a7:94:b0:0b:df:71:bd:26:e1:a9:b1:e3:c7:41:c2: d1:9d:9e:36:b7:10:36:f9:80:1f:f4:74:eb:45:3b:6a:c9:ec: ff:9e:1e:db:65:b9:50:a0:aa:2b:f2:e4:a5:a8:e1:fe:19:da: b2:a4:ba:a1:e2:af:d8:1b:e5:1e:6d:ed:8f:c5:40:ec:62:a3: c1:40:d5:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUxMTAzMDU1NDIxWhcNMjUxMTEwMDU1NDIxWjAYMRYwFAYD VQQDEw02OTA4NDM4ZC1hZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjyH4j4uTzf6w5k3dDNQr43IGCv9yafl7WgqxRy0Kdv50qeB4yiwJxlnI7mp dSbrIWunl/QHjcffEnSD3nDyf6z7yNxozp+dnRNRMdP1jqOh01oxWLIMNLSMWS2H adczE7gVt98IhwXFJsyRHqz4Jmcjtq9OEC2XhLJkmRbi0P2QupAnR3ynYCbe4sgV 4t6F8N04tCchI5PEypjyp6H1jD+ZWgnBHPU+NZ4R0tAx4mA566fVFKG/ZBPj+Vl2 cW9dMq1bCc87pR5cErJiZ9jkvQgE01m7zbsmJLNkuFnLQSbaK2F2EsApJ0V/VRCP /S3nSn1cPiUWW/R7sclsvA8tVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWZEmka uh2dTTNSaN28MaPe/jjrMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+9IheFZ3we2deX5SF8cbsKeIxDgrFXo4GHVo3aHwxbCEcqjrssxCD ytnmS18a03e5CMpiEX2abb4VwuR4Lbj3I8/DIZBR+i71M3t4jEkOf7Q9m9gPitDI LJaP8qoXdu9YG0+DRkQGGBH+jjPSNUL6ZS3FVFsUfKW3CFw8xYL0FGXBN7wnAKbP JX2UtHGPrV2AnV8MS5RbmXD30p9dACeqL7lBi6fsExGHNzTdyaoYLg6WR+EjFtWn lLAL33G9JuGpsePHQcLRnZ42txA2+YAf9HTrRTtqyez/nh7bZblQoKor8uSlqOH+ GdqypLqh4q/YG+Uebe2PxUDsYqPBQNXm -----END CERTIFICATE-----Generated at Tue Nov 4 13:18:32 2025 by rpki-client