$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: 7z/tNIVjBeEmFXOYjF7hBP82gC2d+2adn/UigWxGB24= Subject key identifier: FC:8E:3B:F2:FD:E0:ED:32:04:88:BF:EE:21:FF:28:04:8B:4F:9D:D8 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 7F Signing time: Sat 25 Oct 2025 10:37:53 +0000 Manifest this update: Sat 25 Oct 2025 10:37:52 +0000 Manifest next update: Sat 01 Nov 2025 10:37:52 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: dvq1EapLrlBgiLDZQ/WXCMnfxGqN5dkYuO/IGY6GsFo=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Oct 25 10:37:52 2025 GMT Not After : Nov 1 10:37:52 2025 GMT Subject: CN=68fca881-b070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:51:72:e4:f1:64:b1:08:1a:61:b4:d9:9f: b9:a7:e1:10:ef:c9:e2:a9:a1:c2:7a:5a:97:8b:cd: 89:18:18:f3:3c:ae:03:f4:9c:ff:9c:68:b3:a1:43: 47:be:1b:63:a1:64:89:0c:03:e5:2e:73:2d:2c:8e: aa:d1:74:30:14:16:68:a5:7e:c6:93:5e:b9:ab:ec: b9:6c:d0:96:fc:c8:95:f7:20:84:19:e0:38:73:ae: e4:1c:90:c4:d3:f6:52:34:da:d4:ed:36:ef:b9:44: fb:62:99:1a:44:c9:89:ae:1a:97:f6:36:f4:f8:50: d5:29:5e:73:00:b3:d3:a6:b0:83:4e:09:40:45:08: d8:80:12:5d:73:16:b2:71:47:a0:2f:3e:1b:42:91: 88:6f:bc:e8:0e:0d:39:dd:b2:77:0c:14:f1:ca:20: b2:50:38:e5:b8:52:11:ee:5e:ed:40:44:00:b7:78: a5:52:a1:55:50:b7:69:54:62:f2:ba:98:ea:23:fb: 46:6f:5c:a3:a7:8a:10:a6:da:68:8a:db:94:a3:e4: 5d:42:17:59:cb:1e:f8:25:17:35:98:e6:a0:08:e2: 98:e1:41:5f:3b:28:11:8e:53:e0:76:31:d3:33:70: 4b:8b:2c:c6:6e:33:32:b1:87:08:ff:93:62:8b:2e: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8E:3B:F2:FD:E0:ED:32:04:88:BF:EE:21:FF:28:04:8B:4F:9D:D8 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d3:bf:c3:d5:71:06:d1:90:57:42:46:40:52:93:e1:ea:bd: d2:d0:26:fe:e8:59:6e:1e:36:00:92:91:01:86:37:2f:8b:35: 32:c2:8d:52:80:ac:86:e0:91:1b:a9:aa:2e:1a:6d:58:b6:d0: a2:08:61:80:e5:bb:ce:88:b3:81:d2:2e:27:c4:83:61:75:41: e4:7e:d9:61:ac:bd:63:d7:49:55:f5:bd:4e:e5:ec:2a:8d:d7: b4:74:ab:30:37:7c:6e:3b:1f:56:06:aa:44:d5:f9:d7:23:b9: 30:fd:9d:00:df:22:07:47:e7:7c:8d:31:1b:00:9c:1a:a4:ef: 49:6c:2a:6d:e3:b2:73:02:c1:69:f7:6c:6e:4e:66:c8:ea:f8: d6:9b:bd:96:d9:52:e5:2f:9f:02:56:be:3b:df:8c:56:7a:a1: de:e0:57:7e:bd:4d:28:90:1e:8f:0d:cc:b7:ba:25:84:c2:b2: ae:ef:b6:4e:9e:c7:e7:04:f8:7b:ac:4e:1c:14:91:74:d5:f1: 14:ca:4f:74:94:04:f5:3a:84:4d:83:61:ad:14:a4:07:dd:a5: 89:97:28:eb:5e:d9:ea:48:9c:49:69:e1:8c:ca:5c:89:36:66: 63:f8:63:ed:20:6a:52:48:bb:d0:f2:e5:3c:c9:f2:0e:7e:97: 76:f7:f8:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjUxMDI1MTAzNzUyWhcNMjUxMTAxMTAzNzUyWjAYMRYwFAYD VQQDEw02OGZjYTg4MS1iMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4pRcuTxZLEIGmG02Z+5p+EQ78niqaHCelqXi82JGBjzPK4D9Jz/nGizoUNH vhtjoWSJDAPlLnMtLI6q0XQwFBZopX7Gk165q+y5bNCW/MiV9yCEGeA4c67kHJDE 0/ZSNNrU7TbvuUT7YpkaRMmJrhqX9jb0+FDVKV5zALPTprCDTglARQjYgBJdcxay cUegLz4bQpGIb7zoDg053bJ3DBTxyiCyUDjluFIR7l7tQEQAt3ilUqFVULdpVGLy upjqI/tGb1yjp4oQptpoituUo+RdQhdZyx74JRc1mOagCOKY4UFfOygRjlPgdjHT M3BLiyzGbjMysYcI/5Niiy79BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyOO/L9 4O0yBIi/7iH/KASLT53YMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq07/D1XEG0ZBXQkZAUpPh6r3S0Cb+6FluHjYAkpEBhjcvizUywo1S gKyG4JEbqaouGm1YttCiCGGA5bvOiLOB0i4nxINhdUHkftlhrL1j10lV9b1O5ewq jde0dKswN3xuOx9WBqpE1fnXI7kw/Z0A3yIHR+d8jTEbAJwapO9JbCpt47JzAsFp 92xuTmbI6vjWm72W2VLlL58CVr4734xWeqHe4Fd+vU0okB6PDcy3uiWEwrKu77ZO nsfnBPh7rE4cFJF01fEUyk90lAT1OoRNg2GtFKQH3aWJlyjrXtnqSJxJaeGMylyJ NmZj+GPtIGpSSLvQ8uU8yfIOfpd29/ja -----END CERTIFICATE-----Generated at Sun Oct 26 00:37:56 2025 by rpki-client