$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: 2LwH2TV3pHBQKWtwrUfZUz+FEIdmPP4iju53IHLIIRA= Subject key identifier: 9F:8A:F3:6F:4B:68:07:88:E9:92:DE:24:10:6E:EA:D5:C6:C9:E3:58 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: D1 Signing time: Mon 03 Nov 2025 05:45:36 +0000 Manifest this update: Mon 03 Nov 2025 05:45:36 +0000 Manifest next update: Mon 10 Nov 2025 05:45:36 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: teSWN6gBK61t0g42q/EAwUgfRKNW2/DIiOi6Xayjycg=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: Axdu2K4689qVzRAgDjbBJHLOdW6HGq6jJhlmKdC7fSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Nov 3 05:45:36 2025 GMT Not After : Nov 10 05:45:36 2025 GMT Subject: CN=69084180-861d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:9c:42:9e:c4:f7:b4:78:b4:55:c1:e4:39: b5:a5:44:f7:9d:c9:c1:a3:a2:f9:30:84:70:cb:6c: fe:b5:2f:ff:14:a8:7c:6c:63:96:aa:41:8d:58:92: 22:16:4b:4f:03:11:d4:4e:e3:c0:98:78:c6:82:09: b9:b2:c7:5e:11:50:3e:a1:8f:6d:bd:56:f3:f5:1b: 53:13:39:eb:15:36:10:71:7d:96:e3:73:c5:26:d9: 1a:b8:e5:30:a3:80:2c:65:d8:eb:f8:a6:e4:d2:f2: e4:c1:5c:f5:f1:5d:cb:2b:9e:09:e4:3b:cc:5a:19: 95:84:9a:3a:76:80:36:37:54:ca:d5:27:8d:0d:9a: 47:28:0a:31:a5:83:7b:59:5a:05:ec:e5:b1:09:37: 55:e5:9a:64:ad:69:9a:97:f0:58:a0:a1:6b:ed:90: 0c:fe:f0:91:4b:8b:b7:7e:a1:60:fc:71:71:1c:45: 26:35:e9:48:f7:8a:3a:b5:e3:ab:b8:de:32:e2:74: a5:65:27:70:01:a6:02:6a:c4:4c:fc:84:7e:8d:e8: 2d:10:a7:31:b8:e6:e4:a7:0a:e9:21:4c:6f:d5:45: 9a:7a:36:0c:7c:76:40:8d:f7:31:8d:d2:d4:96:41: 5b:61:56:9c:67:1a:01:f3:71:d5:f8:99:64:1c:d8: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:F3:6F:4B:68:07:88:E9:92:DE:24:10:6E:EA:D5:C6:C9:E3:58 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1f:bc:df:b8:12:6b:cc:51:7f:97:63:e0:94:23:74:03:1e: b0:07:4d:33:0d:21:d8:ff:04:8b:8c:58:fb:f7:1e:a1:b2:ba: 80:f1:76:e9:f7:7f:dd:d1:46:96:22:f0:03:90:76:99:c7:4a: 28:5a:b3:c6:2f:29:59:d3:09:d0:7a:27:bd:e8:b2:fb:b9:e3: e9:0e:f3:ed:e2:2e:1d:40:3b:f1:6a:b9:80:c9:54:ba:d9:31: dd:d9:00:4b:39:54:03:cf:63:62:64:eb:a1:4d:4f:79:a6:b0: dd:93:02:5c:5b:76:87:d0:bd:b5:0e:84:37:be:fc:cc:ed:bd: 4e:97:70:84:10:78:f7:08:57:90:85:e4:69:33:3d:15:2f:e2: a8:78:53:de:8e:e3:d2:bc:90:00:20:a4:8f:5e:9f:ae:d7:24: 04:23:f5:93:c0:c6:d2:55:17:a4:bf:b0:b0:1f:f4:58:a7:ff: 28:a1:15:58:38:b1:b9:3d:33:d8:58:5c:c8:c2:54:04:63:22: 20:0c:41:d9:4a:52:12:62:df:48:db:dd:24:fc:c5:7a:f2:0e: 32:b6:28:64:f5:a1:f4:c3:9b:6b:6e:db:94:b9:4e:48:d5:b7: c6:c4:a7:ec:74:85:e9:a6:eb:5d:fc:56:cc:95:f6:39:fc:b5: 75:1d:13:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUxMTAzMDU0NTM2WhcNMjUxMTEwMDU0NTM2WjAYMRYwFAYD VQQDEw02OTA4NDE4MC04NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/ecQp7E97R4tFXB5Dm1pUT3ncnBo6L5MIRwy2z+tS//FKh8bGOWqkGNWJIi FktPAxHUTuPAmHjGggm5ssdeEVA+oY9tvVbz9RtTEznrFTYQcX2W43PFJtkauOUw o4AsZdjr+Kbk0vLkwVz18V3LK54J5DvMWhmVhJo6doA2N1TK1SeNDZpHKAoxpYN7 WVoF7OWxCTdV5ZpkrWmal/BYoKFr7ZAM/vCRS4u3fqFg/HFxHEUmNelI94o6teOr uN4y4nSlZSdwAaYCasRM/IR+jegtEKcxuObkpwrpIUxv1UWaejYMfHZAjfcxjdLU lkFbYVacZxoB83HV+JlkHNgh5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+K829L aAeI6ZLeJBBu6tXGyeNYMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+H7zfuBJrzFF/l2PglCN0Ax6wB00zDSHY/wSLjFj79x6hsrqA8Xbp 93/d0UaWIvADkHaZx0ooWrPGLylZ0wnQeie96LL7uePpDvPt4i4dQDvxarmAyVS6 2THd2QBLOVQDz2NiZOuhTU95prDdkwJcW3aH0L21DoQ3vvzM7b1Ol3CEEHj3CFeQ heRpMz0VL+KoeFPejuPSvJAAIKSPXp+u1yQEI/WTwMbSVRekv7CwH/RYp/8ooRVY OLG5PTPYWFzIwlQEYyIgDEHZSlISYt9I290k/MV68g4ytihk9aH0w5trbtuUuU5I 1bfGxKfsdIXpputd/FbMlfY5/LV1HRMe -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:10 2025 by rpki-client