$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: PNk3jiIJ1pcLKLbRu+XyEkikQ/RblfZIB2W+iAESaAQ= Subject key identifier: 60:3D:08:AE:FC:F6:B4:81:98:2D:70:D3:A3:14:8D:24:90:AB:F0:1E Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 01DE Signing time: Wed 05 Nov 2025 02:51:01 +0000 Manifest this update: Wed 05 Nov 2025 02:51:01 +0000 Manifest next update: Wed 12 Nov 2025 02:51:01 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: q2B5yOxoJqnzTjTiDZsLf81EYbPz8mWvNVMJnzERoJk=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: hjXWWNVk9qeFLg+JXu1VxvXREeEeEZlGLduNQ3cBxlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Nov 5 02:51:01 2025 GMT Not After : Nov 12 02:51:01 2025 GMT Subject: CN=690abb95-4731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:28:d1:3d:e5:f3:4e:6c:69:9c:ef:58:9b: c8:e1:97:b9:25:57:03:69:09:01:ea:25:8a:f2:49: b5:5d:dc:17:f8:0b:fd:23:0f:b1:7e:04:b0:a1:28: 99:18:44:9d:d8:b1:2f:ea:a1:e5:dc:5e:3d:b3:bc: ea:55:8a:49:5a:c3:24:a2:55:5c:fd:d9:ed:17:69: f1:f9:73:86:73:4c:db:aa:af:e0:a4:f9:ef:b2:c2: 76:11:3e:43:a8:d0:7e:6f:6d:9b:9e:6c:ec:c2:b6: ab:c8:90:19:14:35:58:d3:6f:63:8c:6d:7d:b8:9a: 5e:cc:ba:53:d0:7d:4e:f5:9b:b1:9b:39:47:fe:a6: 2c:8a:d8:bb:b8:03:02:d6:b4:f7:4d:0c:8b:b4:7c: c4:7d:a5:b9:eb:39:dc:94:aa:7e:69:7f:f5:61:29: 30:eb:75:41:9e:3e:19:20:6d:8c:ff:5a:57:82:81: 6d:3c:5b:aa:b7:ca:17:3f:ce:66:da:f9:f6:66:c3: 88:46:e7:36:e4:97:e8:01:b7:18:31:1f:61:6c:68: d7:a9:00:d5:be:9b:75:c2:bf:6a:76:40:d1:86:8a: 05:b9:32:6f:37:0d:be:98:26:62:a9:32:b2:fd:c1: 4b:30:04:bc:31:90:08:23:35:12:eb:aa:32:29:33: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3D:08:AE:FC:F6:B4:81:98:2D:70:D3:A3:14:8D:24:90:AB:F0:1E X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fe:b2:39:c5:a9:b3:ff:03:99:53:0c:de:74:9f:ec:be:b9: e9:c4:09:a3:76:bf:b1:6b:10:59:d6:dc:b7:f7:db:93:61:91: 94:3c:ee:d9:7e:93:a5:d1:89:7b:e4:a3:e9:c1:70:e3:e4:6b: 16:71:83:6b:0a:e8:32:5a:45:96:58:5a:6c:49:dc:45:fa:c0: b7:d8:f9:b9:29:87:ff:16:6a:17:65:0f:75:f2:a8:84:96:18: f5:7a:42:ed:8b:bd:8b:f3:88:c9:ee:48:84:9d:1f:19:0b:e0: db:84:c0:27:69:43:6e:99:95:a8:33:b7:3f:14:11:08:f5:9f: 8d:30:29:1f:02:9b:b5:32:9f:25:02:02:05:15:bf:fa:f4:7f: f3:f1:ec:cb:fd:9c:5f:be:a0:21:f0:c7:86:d8:9f:b5:9d:dc: d9:0f:9c:48:1b:33:e7:1f:dc:de:9f:cc:b4:65:eb:86:e2:ec: 57:8e:7e:ec:c1:2a:94:91:28:85:6a:ff:45:4e:aa:2a:80:e7: 01:78:74:59:eb:15:2e:c0:10:f6:63:20:00:2f:50:5d:57:d0: 23:37:03:ab:50:c6:98:36:a5:0c:21:b1:65:31:98:49:44:21: e6:1e:bb:ef:40:4d:a4:54:6f:07:b4:2a:ec:65:9f:3b:61:13: 36:a7:34:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUxMTA1MDI1MTAxWhcNMjUxMTEyMDI1MTAxWjAYMRYwFAYD VQQDEw02OTBhYmI5NS00NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5oo0T3l805saZzvWJvI4Ze5JVcDaQkB6iWK8km1XdwX+Av9Iw+xfgSwoSiZ GESd2LEv6qHl3F49s7zqVYpJWsMkolVc/dntF2nx+XOGc0zbqq/gpPnvssJ2ET5D qNB+b22bnmzswraryJAZFDVY029jjG19uJpezLpT0H1O9ZuxmzlH/qYsiti7uAMC 1rT3TQyLtHzEfaW56znclKp+aX/1YSkw63VBnj4ZIG2M/1pXgoFtPFuqt8oXP85m 2vn2ZsOIRuc25JfoAbcYMR9hbGjXqQDVvpt1wr9qdkDRhooFuTJvNw2+mCZiqTKy /cFLMAS8MZAIIzUS66oyKTODEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA9CK78 9rSBmC1w06MUjSSQq/AeMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/rI5xamz/wOZUwzedJ/svrnpxAmjdr+xaxBZ1ty399uTYZGUPO7Z fpOl0Yl75KPpwXDj5GsWcYNrCugyWkWWWFpsSdxF+sC32Pm5KYf/FmoXZQ918qiE lhj1ekLti72L84jJ7kiEnR8ZC+DbhMAnaUNumZWoM7c/FBEI9Z+NMCkfApu1Mp8l AgIFFb/69H/z8ezL/ZxfvqAh8MeG2J+1ndzZD5xIGzPnH9zen8y0ZeuG4uxXjn7s wSqUkSiFav9FTqoqgOcBeHRZ6xUuwBD2YyAAL1BdV9AjNwOrUMaYNqUMIbFlMZhJ RCHmHrvvQE2kVG8HtCrsZZ87YRM2pzSV -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:29 2025 by rpki-client