$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: fIun9SbpTPBzwp4mM5Wo70JbXTIxVETnnmMj/dtbnYw= Subject key identifier: B3:CD:F3:60:CB:C8:72:5B:D4:7B:51:51:AB:00:8B:33:9A:D8:04:A6 Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 04:34:07 +0000 Manifest this update: Mon 03 Nov 2025 04:34:06 +0000 Manifest next update: Mon 10 Nov 2025 04:34:06 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: 9QQ7XlXTjVWgha8K8LK2WVe+TYOu46at4bUK2J458+E=) 2: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: PG1Zg9YWfOZJBdRe/N5qDFjYHzUKz1vx7yczTSRfIp8=) 3: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Nov 3 04:34:06 2025 GMT Not After : Nov 10 04:34:06 2025 GMT Subject: CN=690830bf-6c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:3e:cd:93:ab:06:65:32:00:35:6d:29:06: 2d:cb:38:fc:13:2b:97:87:4e:67:8b:e0:92:7a:06: 82:ac:17:d9:4d:c6:81:85:b9:4f:24:d3:c9:43:2f: d1:80:74:b4:17:0e:d2:97:ee:a9:67:5d:41:87:ef: 2d:29:bf:1f:e5:00:6f:85:fb:f0:22:6c:34:cd:e1: e7:32:fa:1f:0b:97:10:95:d3:d9:34:5e:63:83:ba: c7:8c:b4:25:37:4a:db:a2:d4:24:dc:c9:79:41:24: 37:b4:ff:92:6f:3a:9f:57:47:81:2e:67:dd:c0:3a: 31:3e:0a:87:e8:d4:49:d8:b9:6f:28:24:f0:af:07: 74:68:c0:e4:75:d6:4c:eb:0f:20:2f:05:cb:30:c1: e9:79:ea:1e:3d:4b:cb:dd:fb:1b:e8:9e:e0:b3:00: ee:fe:5a:7d:e8:ab:9a:57:bd:03:d6:78:2e:4a:0f: 5a:c0:39:a4:3a:05:a9:9a:4d:3f:af:cc:1a:3c:b0: 2b:3e:05:35:8e:ff:12:0a:e9:8d:85:dc:ac:17:73: 1e:fd:d6:98:a5:d4:c2:1b:77:12:10:9f:5f:1c:d1: 8f:36:c6:e8:98:e3:d7:8e:5b:74:29:4b:b6:dd:5c: 71:d2:86:8e:1d:5e:2d:f7:d2:cc:2a:54:01:cf:56: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CD:F3:60:CB:C8:72:5B:D4:7B:51:51:AB:00:8B:33:9A:D8:04:A6 X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:75:a4:dc:a6:05:a6:0b:aa:91:88:98:b4:51:3c:0b:32:97: 43:e9:60:e3:25:b2:2e:9e:7c:11:78:09:14:2f:c3:c7:f9:8c: 51:1a:60:cc:37:6b:81:5b:e9:db:ba:cb:20:6a:93:e3:73:7b: f5:a3:fc:4c:86:bd:ae:cc:96:14:ed:6c:a0:01:05:3b:1e:d6: ea:e3:87:16:ff:c6:6f:ac:f5:23:72:89:d7:71:13:68:d2:95: 51:c8:66:a2:1b:6b:38:d7:02:6a:82:3a:ec:cc:e2:a0:41:cb: 2a:8e:43:99:05:da:94:27:30:f0:31:ec:17:74:18:b7:5e:65: 27:b1:0d:e3:1a:6b:99:68:bc:e6:ec:eb:1f:33:21:f2:a9:0b: 54:74:98:6b:74:17:3b:e7:cf:8b:e6:8b:89:cf:d3:f3:6f:b1: 52:61:ce:80:be:80:c2:f2:f2:98:a7:b7:c9:7d:8d:31:b9:30: 2b:97:7d:b1:3b:e7:aa:d8:d2:8e:d9:92:37:92:2d:e8:96:ed: 21:d0:29:5b:8f:bd:f4:9f:0c:93:38:b9:95:54:bf:a2:b5:46: 17:0d:71:4d:bf:b2:d5:05:82:76:9f:f3:b2:a4:f3:85:46:3a: dc:a2:e4:89:4a:0e:eb:6e:93:1d:24:c2:44:84:c7:4b:e9:97: 3d:03:fd:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjUxMTAzMDQzNDA2WhcNMjUxMTEwMDQzNDA2WjAYMRYwFAYD VQQDEw02OTA4MzBiZi02YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IA+zZOrBmUyADVtKQYtyzj8EyuXh05ni+CSegaCrBfZTcaBhblPJNPJQy/R gHS0Fw7Sl+6pZ11Bh+8tKb8f5QBvhfvwImw0zeHnMvofC5cQldPZNF5jg7rHjLQl N0rbotQk3Ml5QSQ3tP+SbzqfV0eBLmfdwDoxPgqH6NRJ2LlvKCTwrwd0aMDkddZM 6w8gLwXLMMHpeeoePUvL3fsb6J7gswDu/lp96KuaV70D1nguSg9awDmkOgWpmk0/ r8waPLArPgU1jv8SCumNhdysF3Me/daYpdTCG3cSEJ9fHNGPNsbomOPXjlt0KUu2 3Vxx0oaOHV4t99LMKlQBz1YetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPN82DL yHJb1HtRUasAizOa2ASmMB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDdaTcpgWmC6qRiJi0UTwLMpdD6WDjJbIunnwReAkUL8PH+YxRGmDM N2uBW+nbussgapPjc3v1o/xMhr2uzJYU7WygAQU7Htbq44cW/8ZvrPUjconXcRNo 0pVRyGaiG2s41wJqgjrszOKgQcsqjkOZBdqUJzDwMewXdBi3XmUnsQ3jGmuZaLzm 7OsfMyHyqQtUdJhrdBc758+L5ouJz9Pzb7FSYc6AvoDC8vKYp7fJfY0xuTArl32x O+eq2NKO2ZI3ki3olu0h0Clbj730nwyTOLmVVL+itUYXDXFNv7LVBYJ2n/OypPOF RjrcouSJSg7rbpMdJMJEhMdL6Zc9A/1N -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:15 2025 by rpki-client