$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json) Hash identifier: dUvCdie1suZF2hDxSs4PJeVwOVxOPJ1xtmVDQsna+QU= Subject key identifier: CF:2C:FD:FB:40:09:6C:2E:BD:D9:D8:B1:6B:43:6C:A6:AB:05:50:69 Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Certificate serial: 199C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft Manifest number: 1982 Signing time: Sun 02 Nov 2025 16:24:45 +0000 Manifest this update: Sun 02 Nov 2025 16:24:45 +0000 Manifest next update: Sun 09 Nov 2025 16:24:45 +0000 Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: JcJ9071hQT0DZ2nTQfMNsz4GzPONgAP+wmqL75WRepg=) 2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: NtbBfKBhWJufBJ+Zx0sdblhNzhOyn0/W+4n9rD0fO4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6556 (0x199c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Validity Not Before: Nov 2 16:24:45 2025 GMT Not After : Nov 9 16:24:45 2025 GMT Subject: CN=690785cd-6b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:85:56:0b:06:db:4a:3d:f3:d9:c9:4a:11: 1d:30:2f:01:75:03:cb:ec:1d:0f:dc:fe:bd:72:a2: 40:2b:9e:cb:b7:cc:f1:29:03:c9:b9:3a:cd:96:38: a9:0b:69:4d:ab:b8:ee:87:f9:4d:77:ea:04:4e:d8: 97:90:db:d6:41:c6:97:f0:5b:08:b7:7d:f0:5a:14: 94:ac:f2:72:50:8d:93:f5:b2:47:68:d5:3a:75:cb: e3:25:72:78:2a:38:ed:a6:ca:65:70:1c:f1:67:ac: 05:83:1d:ce:02:12:01:0e:4c:3c:ac:51:55:9e:9c: f8:29:44:9b:ed:1f:9a:91:e5:5a:fc:7a:e8:2c:5e: 73:95:ee:a5:ab:a8:63:25:b3:71:07:3f:8a:fc:46: b7:cf:4a:ca:c0:a4:b8:c1:25:10:2e:17:90:ab:89: 9b:78:ed:1e:a4:5d:d4:6b:3c:0a:11:1c:f8:33:24: 51:b4:41:cb:b8:d8:f4:22:26:93:9f:da:a9:69:e7: 10:26:7c:d8:86:32:32:9d:39:41:e0:05:71:1e:be: ff:d3:ec:eb:2b:8c:58:b8:69:60:42:d5:08:50:82: db:f1:6b:48:91:fc:51:97:86:7b:3d:27:53:cc:d3: b2:52:84:00:58:be:d6:cb:10:93:a5:cb:ec:6e:c9: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2C:FD:FB:40:09:6C:2E:BD:D9:D8:B1:6B:43:6C:A6:AB:05:50:69 X509v3 Authority Key Identifier: keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a9:8f:6d:f9:59:44:a9:cb:8c:b6:bd:34:98:32:08:f5:15: f6:b3:ac:ea:dc:49:15:4d:32:9f:f1:e5:1f:70:f0:4a:3a:f7: 26:4d:46:e0:f3:55:96:59:fa:de:92:3a:8d:11:e4:d7:ff:a1: 02:78:78:5a:6f:9c:97:3e:d1:17:5a:a9:65:cc:bb:d7:05:23: 08:bf:83:5f:79:af:63:20:9f:08:8c:31:fd:10:29:33:ec:d3: 27:14:b0:d1:1b:2f:50:b9:af:88:02:c9:c4:a6:89:c3:a0:55: c4:32:fc:8a:44:c2:01:d1:50:91:d5:ae:da:ee:cf:00:77:ec: 7b:80:30:ff:32:0a:a8:6b:36:d0:5f:b9:3f:40:d9:11:4e:a1: 7e:d8:ba:1b:f0:06:e4:e4:77:47:2a:9f:4f:0c:b7:17:3c:f8: 49:f6:fd:d8:c1:5c:dd:ba:ec:d5:a1:25:d8:ac:e5:a4:e4:9e: d7:93:99:a9:df:19:e8:ef:61:0f:ef:9c:bf:43:82:98:fa:b1: f3:e3:9f:b3:ec:24:3f:28:c4:43:ce:d3:7a:b3:5e:96:f7:b2: 4c:7a:50:98:85:10:ec:e1:99:76:66:5c:47:a9:c0:65:7a:c3: de:39:59:ab:6d:22:f5:82:0e:3a:63:ac:78:86:a2:ff:44:b2: 3a:d1:35:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3 RTg2NUMzODQwHhcNMjUxMTAyMTYyNDQ1WhcNMjUxMTA5MTYyNDQ1WjAYMRYwFAYD VQQDEw02OTA3ODVjZC02YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FGFVgsG20o989nJShEdMC8BdQPL7B0P3P69cqJAK57Lt8zxKQPJuTrNljip C2lNq7juh/lNd+oETtiXkNvWQcaX8FsIt33wWhSUrPJyUI2T9bJHaNU6dcvjJXJ4 KjjtpsplcBzxZ6wFgx3OAhIBDkw8rFFVnpz4KUSb7R+akeVa/HroLF5zle6lq6hj JbNxBz+K/Ea3z0rKwKS4wSUQLheQq4mbeO0epF3UazwKERz4MyRRtEHLuNj0IiaT n9qpaecQJnzYhjIynTlB4AVxHr7/0+zrK4xYuGlgQtUIUILb8WtIkfxRl4Z7PSdT zNOyUoQAWL7WyxCTpcvsbsl0ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8s/ftA CWwuvdnYsWtDbKarBVBpMB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj YkpqSXpNV2FyM04taGx3NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClqY9t+VlEqcuMtr00mDII9RX2s6zq3EkVTTKf8eUfcPBKOvcmTUbg 81WWWfrekjqNEeTX/6ECeHhab5yXPtEXWqllzLvXBSMIv4Nfea9jIJ8IjDH9ECkz 7NMnFLDRGy9Qua+IAsnEponDoFXEMvyKRMIB0VCR1a7a7s8Ad+x7gDD/MgqoazbQ X7k/QNkRTqF+2Lob8Abk5HdHKp9PDLcXPPhJ9v3YwVzduuzVoSXYrOWk5J7Xk5mp 3xno72EP75y/Q4KY+rHz45+z7CQ/KMRDztN6s16W97JMelCYhRDs4Zl2ZlxHqcBl esPeOVmrbSL1gg46Y6x4hqL/RLI60TWD -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:10 2025 by rpki-client