$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: kgh9nF854hBU85Hk1WF/JzRg0WB9hsCbZs2oLCJC/TI= Subject key identifier: D2:55:9D:5D:4A:06:62:16:B3:EA:BA:EB:71:C4:A4:02:F2:66:C0:AB Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 09AF Signing time: Wed 22 Oct 2025 20:42:53 +0000 Manifest this update: Wed 22 Oct 2025 20:42:53 +0000 Manifest next update: Wed 29 Oct 2025 20:42:53 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: B4vZPdkmFcjtVnCZIFUB3ZexR1ygSIg6OCCXlMGLXBg=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Oct 22 20:42:53 2025 GMT Not After : Oct 29 20:42:53 2025 GMT Subject: CN=68f941cd-55a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:72:cf:29:b1:f1:fd:61:be:84:da:63:25: ae:9a:a0:c5:65:20:f3:58:80:49:7f:e6:11:46:8b: ec:4e:df:9a:5f:46:7b:f5:ca:39:bf:79:38:93:6c: 15:f1:d8:83:34:61:80:f2:32:db:f5:26:4f:8c:bd: fb:62:35:6f:53:cb:bf:d4:15:ca:73:1f:da:8d:4d: a2:6c:d1:0d:7a:46:38:50:7d:dd:02:1d:bb:20:2d: 71:e2:7b:fb:ac:80:35:57:70:32:6a:5e:05:d1:c4: 6e:e5:1b:e3:8a:69:22:a1:10:8d:8b:e6:56:7f:fc: 68:cf:2c:e1:de:41:fb:14:64:57:17:a2:b8:b6:20: ac:a4:e4:5a:89:db:cc:6b:dd:a2:db:1d:1a:dd:00: 7c:be:6e:61:c6:8c:18:26:f3:cf:da:97:cf:88:7a: 57:5a:e6:7c:0e:06:92:69:71:e5:2b:cd:54:af:06: e0:62:05:3a:1d:3d:d7:fc:b2:2c:33:e9:e9:25:62: 95:f6:3b:c2:f8:c3:3f:7a:b1:27:bb:24:a3:d2:85: af:a5:7e:05:83:2b:53:d9:df:c8:cc:ef:3e:e5:d2: fe:03:e0:42:bd:7f:5e:54:00:c5:80:ad:cf:9a:5c: a7:92:8c:18:c5:80:1c:96:d4:51:52:7b:4c:91:c7: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:55:9D:5D:4A:06:62:16:B3:EA:BA:EB:71:C4:A4:02:F2:66:C0:AB X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cc:8e:c8:f1:7e:6e:69:33:2a:2b:f6:b5:ab:92:17:a6:46: f8:6b:de:4e:e4:cf:be:bb:5d:0c:2d:4a:36:e6:00:f3:0b:58: 86:b0:ad:95:75:7b:2a:a3:21:65:95:96:ec:d8:ce:c1:05:08: 46:c7:5a:6a:fb:46:9e:58:1f:94:a9:ac:e6:65:22:89:6e:a0: d9:3f:6d:e1:27:2f:a6:41:dc:f3:04:04:f9:d1:74:b4:42:65: d1:2d:5a:bd:af:97:c7:c0:66:f4:53:65:17:79:77:78:28:ff: 5d:dd:0f:d9:2d:78:f7:b8:31:9c:84:3f:57:c4:41:96:84:56: 37:36:fc:11:92:53:57:2f:f8:20:53:05:24:c5:ae:66:f6:5c: ee:92:3c:92:19:96:64:4e:fc:06:ff:d7:8e:b7:d2:bd:ae:49: 3f:00:de:87:1e:bb:ea:f4:e7:cb:28:bb:34:8f:92:e6:1f:2c: 77:e1:89:6d:16:f2:50:61:27:30:89:b3:22:f5:4f:37:58:99: 38:83:d3:8a:a2:8a:14:3f:16:f3:20:2a:9c:0e:9f:b2:ea:8c: 31:29:dc:91:37:e0:2a:63:2a:9c:35:db:36:9a:67:c2:2c:fa: 54:5f:c2:99:5b:c7:b0:5d:f9:b2:81:64:cf:8a:8d:7d:f3:98: 67:69:dd:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUxMDIyMjA0MjUzWhcNMjUxMDI5MjA0MjUzWjAYMRYwFAYD VQQDEw02OGY5NDFjZC01NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyRyzymx8f1hvoTaYyWumqDFZSDzWIBJf+YRRovsTt+aX0Z79co5v3k4k2wV 8diDNGGA8jLb9SZPjL37YjVvU8u/1BXKcx/ajU2ibNENekY4UH3dAh27IC1x4nv7 rIA1V3Ayal4F0cRu5RvjimkioRCNi+ZWf/xozyzh3kH7FGRXF6K4tiCspORaidvM a92i2x0a3QB8vm5hxowYJvPP2pfPiHpXWuZ8DgaSaXHlK81UrwbgYgU6HT3X/LIs M+npJWKV9jvC+MM/erEnuySj0oWvpX4FgytT2d/IzO8+5dL+A+BCvX9eVADFgK3P mlynkowYxYAcltRRUntMkceBtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJVnV1K BmIWs+q663HEpALyZsCrMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFzI7I8X5uaTMqK/a1q5IXpkb4a95O5M++u10MLUo25gDzC1iGsK2V dXsqoyFllZbs2M7BBQhGx1pq+0aeWB+UqazmZSKJbqDZP23hJy+mQdzzBAT50XS0 QmXRLVq9r5fHwGb0U2UXeXd4KP9d3Q/ZLXj3uDGchD9XxEGWhFY3NvwRklNXL/gg UwUkxa5m9lzukjySGZZkTvwG/9eOt9K9rkk/AN6HHrvq9OfLKLs0j5LmHyx34Ylt FvJQYScwibMi9U83WJk4g9OKoooUPxbzICqcDp+y6owxKdyRN+AqYyqcNds2mmfC LPpUX8KZW8ewXfmygWTPio1985hnad1z -----END CERTIFICATE-----Generated at Fri Oct 24 00:47:23 2025 by rpki-client