$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: SY0bZxS+/F7S9VqrvtbDWeCLvsd3nQEYjwSoBg3PX3Q= Subject key identifier: 6B:94:D7:94:81:72:83:F2:2A:B3:B3:43:4C:B7:27:DC:06:3F:AE:3B Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 037C Signing time: Mon 27 Oct 2025 02:16:42 +0000 Manifest this update: Mon 27 Oct 2025 02:16:42 +0000 Manifest next update: Mon 03 Nov 2025 02:16:42 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: 9ADIQgtP2eF6Lycb1w6PeT5t4J5Blw919mF+3EqC3GI=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Oct 27 02:16:42 2025 GMT Not After : Nov 3 02:16:42 2025 GMT Subject: CN=68fed60a-d566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:95:97:cf:27:0c:da:69:29:ca:71:69:6e: c5:3c:41:07:9c:62:0b:af:fc:f3:92:e1:50:c0:68: e4:96:ec:33:93:ad:67:e0:79:10:fe:08:1f:4a:23: d4:cf:3f:ab:d0:31:6d:8b:38:11:55:cb:e8:b5:bb: 8a:6e:33:b7:c0:54:b8:62:30:4d:23:b6:ce:c0:f4: 4c:eb:11:b1:2f:ec:46:22:1f:d6:ca:b8:dc:b6:da: 7b:fa:35:e1:6d:b1:95:79:3f:b0:40:a6:04:15:6c: 22:93:cf:f1:b8:b8:04:55:47:40:76:74:45:70:8e: 0f:15:28:de:31:3f:ea:4a:39:d7:9f:92:e5:f7:66: 32:9d:af:fd:c5:22:5b:bb:02:81:32:e4:0b:e7:15: 9c:f0:62:d4:c4:b9:00:dc:2b:40:32:1f:40:3b:95: c5:34:c7:cd:a4:db:31:26:16:30:6e:9b:a3:fe:d2: 63:77:b4:e8:c7:63:fc:b9:ad:e3:fa:a3:e3:8e:ee: 58:19:d5:cc:90:41:55:b4:99:3b:b2:33:2a:76:70: c9:dd:3b:48:82:f2:cc:b8:aa:0c:01:47:14:8d:49: c8:76:a2:ad:ad:66:46:d8:5c:1e:24:d2:02:67:4f: db:5c:41:79:02:9a:e0:12:ee:78:e0:0d:0e:0b:29: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:94:D7:94:81:72:83:F2:2A:B3:B3:43:4C:B7:27:DC:06:3F:AE:3B X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:95:18:cc:90:c9:80:65:28:ef:c6:4d:17:c9:77:5f:81: 30:1f:07:59:07:46:34:9a:6e:60:99:4e:60:a3:4f:c6:85:ee: 11:9b:ce:6c:4a:e4:d4:87:a3:7c:f9:02:d3:3f:e5:67:4d:08: 89:77:9c:ef:ed:6d:36:58:3a:83:2b:1c:56:c0:67:c8:4b:52: e9:bf:7b:61:4a:18:cb:d6:ce:cf:49:e8:70:84:0a:cf:83:e9: cc:d5:a2:d7:1d:48:a0:2b:db:2a:ce:fa:52:98:a1:41:7c:4c: fa:41:22:93:8e:e5:8c:05:10:01:73:a7:be:01:ac:e5:a3:55: ed:f9:70:42:12:ec:d5:3b:c2:ff:9e:93:b5:b8:d2:0a:3d:76: fc:02:2d:17:58:9d:f3:dd:81:79:45:7e:1f:67:6d:b1:18:7b: 88:37:02:38:a7:f3:e5:ae:ae:81:7d:a2:b4:da:4e:03:d8:69: bc:85:74:9d:18:d5:6d:15:74:c9:91:44:5b:67:27:62:65:4b: ba:8b:ba:f9:38:7d:34:12:5e:b5:fd:da:c6:be:41:79:fe:54: f4:aa:83:bf:1c:ad:49:65:f8:fb:32:80:84:b0:23:ed:4d:18: 54:1b:41:c5:9a:50:5e:c6:b0:5a:17:63:03:6e:b6:db:77:fa: 73:81:5b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUxMDI3MDIxNjQyWhcNMjUxMTAzMDIxNjQyWjAYMRYwFAYD VQQDEw02OGZlZDYwYS1kNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLyVl88nDNppKcpxaW7FPEEHnGILr/zzkuFQwGjkluwzk61n4HkQ/ggfSiPU zz+r0DFtizgRVcvotbuKbjO3wFS4YjBNI7bOwPRM6xGxL+xGIh/Wyrjcttp7+jXh bbGVeT+wQKYEFWwik8/xuLgEVUdAdnRFcI4PFSjeMT/qSjnXn5Ll92Yyna/9xSJb uwKBMuQL5xWc8GLUxLkA3CtAMh9AO5XFNMfNpNsxJhYwbpuj/tJjd7Tox2P8ua3j +qPjju5YGdXMkEFVtJk7sjMqdnDJ3TtIgvLMuKoMAUcUjUnIdqKtrWZG2FweJNIC Z0/bXEF5AprgEu544A0OCykblQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuU15SB coPyKrOzQ0y3J9wGP647MB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsaZUYzJDJgGUo78ZNF8l3X4EwHwdZB0Y0mm5gmU5go0/Ghe4Rm85s SuTUh6N8+QLTP+VnTQiJd5zv7W02WDqDKxxWwGfIS1Lpv3thShjL1s7PSehwhArP g+nM1aLXHUigK9sqzvpSmKFBfEz6QSKTjuWMBRABc6e+Aazlo1Xt+XBCEuzVO8L/ npO1uNIKPXb8Ai0XWJ3z3YF5RX4fZ22xGHuINwI4p/Plrq6BfaK02k4D2Gm8hXSd GNVtFXTJkURbZydiZUu6i7r5OH00El61/drGvkF5/lT0qoO/HK1JZfj7MoCEsCPt TRhUG0HFmlBexrBaF2MDbrbbd/pzgVtn -----END CERTIFICATE-----Generated at Mon Oct 27 17:44:20 2025 by rpki-client