$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: unvWnUXWYHQF2ETRyQXcUH3HbssnKwCfwyEvhzVIUls= Subject key identifier: 8E:72:24:57:CB:BC:BE:C7:1F:BC:1C:B1:3F:0D:39:B7:02:3D:74:44 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 0A28 Signing time: Sun 02 Nov 2025 19:43:08 +0000 Manifest this update: Sun 02 Nov 2025 19:43:08 +0000 Manifest next update: Sun 09 Nov 2025 19:43:08 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: Bg77vnTiWGtIuNdg2Q7gI6PZwNS3TU5pwggQlf8x0w0=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: Nov 2 19:43:08 2025 GMT Not After : Nov 9 19:43:08 2025 GMT Subject: CN=6907b44c-0c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:43:a3:5f:9c:34:8d:e6:07:7c:de:7c:d8: e8:e4:92:3c:ac:8a:79:4d:75:06:22:33:d3:b2:58: 0d:1c:61:6c:90:a0:36:37:4f:60:69:9d:5d:5e:cf: ad:b1:da:d0:ff:27:73:44:0c:3b:71:1b:2e:96:1e: 5a:f5:cb:0c:8e:bd:eb:29:a5:65:e9:b3:b7:d1:2a: 59:64:22:1d:0a:c2:a0:72:39:d4:9e:a1:94:d4:47: 0c:96:76:1b:1a:61:ab:6f:73:fe:17:e0:f4:e3:a6: b4:4e:48:f7:64:66:68:67:93:b7:2c:a0:df:ff:00: 93:b0:bf:6e:c7:e6:95:f4:6c:dc:8b:c7:79:04:76: c2:7c:ea:92:1a:e1:59:00:51:58:ab:16:4c:6e:d2: a6:9a:b5:5f:74:04:be:75:41:aa:a6:e6:0c:39:ba: 61:fc:58:a6:45:30:b4:8b:15:6d:a0:78:91:0f:5b: b5:e9:16:95:30:b4:ab:7f:7d:b8:96:c0:3c:0f:14: f9:07:e1:7c:d9:5f:34:e5:fb:71:73:30:84:b8:33: c7:77:5d:aa:4a:76:c9:b3:d0:44:e7:82:70:e3:f9: 75:f5:7f:98:fc:f6:ed:0b:61:07:39:a4:d8:23:9b: 59:9a:19:ab:fe:56:b1:7e:82:b4:6a:6f:31:8a:84: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:72:24:57:CB:BC:BE:C7:1F:BC:1C:B1:3F:0D:39:B7:02:3D:74:44 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:d5:e6:e1:74:c9:e2:80:5a:df:f8:d2:6d:29:b6:49:24: 33:7b:23:f9:1f:de:51:b3:1b:f0:e8:78:41:15:d2:84:a6:ee: 80:5a:63:91:08:f1:4f:1d:bc:71:f4:9d:e7:ca:ec:07:06:7f: a5:d7:e9:33:65:15:79:09:0c:c8:56:a5:75:1d:2b:fe:46:9d: 4e:56:ac:ab:a3:a3:d3:7c:0e:3f:e3:0b:bd:13:4b:4d:88:92: fd:d3:3c:20:e3:b5:6c:6a:e9:d2:9d:e8:52:99:99:fc:aa:7d: 73:61:6b:b7:dc:69:6c:66:45:be:f3:ee:6d:16:c6:c7:57:60: bb:82:2f:98:71:bc:a6:74:b8:73:30:08:8b:e5:39:b9:0d:08: 1d:3d:e2:e4:02:32:ea:62:0d:6d:6f:88:9a:f6:4c:c1:e2:c1: 9c:e0:0b:41:0d:5d:cc:29:6b:8d:c8:d6:28:a9:1e:7c:a7:86: a5:f4:ac:3b:7b:c6:96:06:df:ae:32:1d:6b:e9:6d:94:f8:7d: a4:71:a6:04:2d:6d:76:f9:dd:9a:13:95:2b:97:74:f9:97:97: 1f:8b:c5:ce:84:2a:ae:cf:17:ae:eb:95:95:0c:1a:27:fa:4c: ca:4d:c8:c1:a5:f0:80:04:0f:18:60:c4:52:dc:34:9e:0d:be: c8:40:cd:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUxMTAyMTk0MzA4WhcNMjUxMTA5MTk0MzA4WjAYMRYwFAYD VQQDEw02OTA3YjQ0Yy0wYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXtDo1+cNI3mB3zefNjo5JI8rIp5TXUGIjPTslgNHGFskKA2N09gaZ1dXs+t sdrQ/ydzRAw7cRsulh5a9csMjr3rKaVl6bO30SpZZCIdCsKgcjnUnqGU1EcMlnYb GmGrb3P+F+D046a0Tkj3ZGZoZ5O3LKDf/wCTsL9ux+aV9Gzci8d5BHbCfOqSGuFZ AFFYqxZMbtKmmrVfdAS+dUGqpuYMObph/FimRTC0ixVtoHiRD1u16RaVMLSrf324 lsA8DxT5B+F82V805ftxczCEuDPHd12qSnbJs9BE54Jw4/l19X+Y/PbtC2EHOaTY I5tZmhmr/laxfoK0am8xioTahwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5yJFfL vL7HH7wcsT8NObcCPXREMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6A9Xm4XTJ4oBa3/jSbSm2SSQzeyP5H95Rsxvw6HhBFdKEpu6AWmOR CPFPHbxx9J3nyuwHBn+l1+kzZRV5CQzIVqV1HSv+Rp1OVqyro6PTfA4/4wu9E0tN iJL90zwg47VsaunSnehSmZn8qn1zYWu33GlsZkW+8+5tFsbHV2C7gi+YcbymdLhz MAiL5Tm5DQgdPeLkAjLqYg1tb4ia9kzB4sGc4AtBDV3MKWuNyNYoqR58p4al9Kw7 e8aWBt+uMh1r6W2U+H2kcaYELW12+d2aE5Url3T5l5cfi8XOhCquzxeu65WVDBon +kzKTcjBpfCABA8YYMRS3DSeDb7IQM1L -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:21 2025 by rpki-client