$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: 04aMUJz8oLNLMYjb0fq4opuJP7qQhvdIKjbe6nivDEE= Subject key identifier: AF:8E:EB:DC:E8:AB:FE:AD:33:D3:84:5C:28:90:70:33:3B:4E:56:1B Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: FE Signing time: Wed 29 Oct 2025 04:53:16 +0000 Manifest this update: Wed 29 Oct 2025 04:53:16 +0000 Manifest next update: Wed 05 Nov 2025 04:53:16 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: USaRVHcUsrz3ekg4xQu6k/83QsGWNroPrkoPt6gJJCo=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: Oct 29 04:53:16 2025 GMT Not After : Nov 5 04:53:16 2025 GMT Subject: CN=69019dbc-71c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:98:dc:eb:28:a0:57:0d:47:b9:d6:d6:6b: f9:fd:ae:d8:95:79:77:5e:71:55:4a:2d:70:33:78: 0d:4c:ee:5a:3a:c4:16:a2:f4:8c:43:87:14:ba:51: 3b:24:44:1b:39:4a:3b:f3:bb:1d:f5:d0:be:8c:92: f6:76:1c:ff:53:6a:9a:5b:ee:67:af:d1:80:1e:d4: 29:1c:67:12:8a:5f:fe:77:b9:62:81:26:57:21:3d: dc:f3:5e:6b:7e:3e:ba:fe:8f:aa:d9:9b:5d:cc:e3: d2:79:c0:e5:bc:ed:45:6b:4b:35:c1:be:5f:ea:5a: b0:86:d0:d4:43:6e:f0:fe:14:c5:23:4c:85:37:f1: b0:c5:56:42:21:1d:36:02:8c:86:cb:0c:72:f7:88: f0:f2:c2:33:10:a8:ff:ea:e2:0d:bf:20:e8:f3:4e: 20:a1:82:a1:85:07:00:ac:2b:78:5a:32:9f:5d:3d: c4:0e:8a:48:be:4d:2e:9e:25:72:cb:f7:34:19:c1: 67:e9:fb:d8:a9:5d:6a:47:62:16:61:8b:ac:6c:36: 7d:25:00:05:d0:17:fa:cf:7f:46:3d:9f:72:2f:4f: e8:28:c3:5b:71:c7:31:68:d4:44:65:6e:02:04:5a: 92:5d:c1:70:72:9e:f7:9a:cd:64:a1:58:d5:98:d9: ae:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8E:EB:DC:E8:AB:FE:AD:33:D3:84:5C:28:90:70:33:3B:4E:56:1B X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c8:41:b8:7c:e7:29:96:43:6a:bd:b9:c5:8a:2b:c3:45:d7: 37:9d:3c:0f:ce:78:4a:e9:6b:ed:59:f9:4d:22:51:14:1d:96: 73:4d:59:39:eb:e4:6b:f0:50:35:fa:54:6d:e0:d1:6f:09:02: 49:7c:8f:ec:8d:ec:53:84:63:7f:41:82:4f:7e:9f:09:fa:4d: 22:fd:96:b9:9e:9e:6e:cc:35:e8:a4:a4:7f:6d:b5:01:f5:e0: ee:eb:89:cd:fb:89:15:2f:2b:cd:8e:9b:0f:79:64:a2:15:3d: 47:14:56:70:22:c4:7f:2c:16:6c:de:53:92:bd:1e:34:c7:af: 0a:28:1a:be:2c:c8:f7:05:c2:01:f7:63:84:74:7c:88:e5:2c: af:a7:1d:5b:14:a0:fd:c4:47:be:14:e7:2d:dc:40:bc:bb:3a: a1:cf:1c:0e:48:a7:ad:00:b6:eb:85:79:8d:d2:20:94:5d:6d: f2:22:c3:19:33:60:a9:9f:fd:c4:b6:a3:27:27:e4:76:50:e3: 0a:23:79:42:30:fe:a5:d4:83:73:e2:2d:a8:9a:da:ec:b8:81: 90:92:f9:dd:5d:be:e6:e7:88:e0:d5:78:8c:4b:2a:48:1a:a3: 3f:dc:b8:25:d1:3b:73:63:30:f0:e8:9f:49:eb:dc:2f:a8:f4: 45:88:c7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz RTQyMzJERUYwHhcNMjUxMDI5MDQ1MzE2WhcNMjUxMTA1MDQ1MzE2WjAYMRYwFAYD VQQDEw02OTAxOWRiYy03MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhKY3OsooFcNR7nW1mv5/a7YlXl3XnFVSi1wM3gNTO5aOsQWovSMQ4cUulE7 JEQbOUo787sd9dC+jJL2dhz/U2qaW+5nr9GAHtQpHGcSil/+d7ligSZXIT3c815r fj66/o+q2ZtdzOPSecDlvO1Fa0s1wb5f6lqwhtDUQ27w/hTFI0yFN/GwxVZCIR02 AoyGywxy94jw8sIzEKj/6uINvyDo804goYKhhQcArCt4WjKfXT3EDopIvk0uniVy y/c0GcFn6fvYqV1qR2IWYYusbDZ9JQAF0Bf6z39GPZ9yL0/oKMNbcccxaNREZW4C BFqSXcFwcp73ms1koVjVmNmuuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+O69zo q/6tM9OEXCiQcDM7TlYbMB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2 ZF94MGwyLW4xR3ctUWpMZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3yEG4fOcplkNqvbnFiivDRdc3nTwPznhK6WvtWflNIlEUHZZzTVk5 6+Rr8FA1+lRt4NFvCQJJfI/sjexThGN/QYJPfp8J+k0i/Za5np5uzDXopKR/bbUB 9eDu64nN+4kVLyvNjpsPeWSiFT1HFFZwIsR/LBZs3lOSvR40x68KKBq+LMj3BcIB 92OEdHyI5Syvpx1bFKD9xEe+FOct3EC8uzqhzxwOSKetALbrhXmN0iCUXW3yIsMZ M2Cpn/3EtqMnJ+R2UOMKI3lCMP6l1INz4i2omtrsuIGQkvndXb7m54jg1XiMSypI GqM/3Lgl0TtzYzDw6J9J69wvqPRFiMe8 -----END CERTIFICATE-----Generated at Thu Oct 30 06:25:38 2025 by rpki-client