$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: w12I7Z+J7OPwaYo5TSGZpiWq6Q9KZbfsu7G0Q8SrcuQ= Subject key identifier: 9E:1F:24:01:EE:97:E7:D5:BA:2F:A7:5C:A0:C8:F7:46:85:CD:7E:67 Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 0216 Signing time: Mon 03 Nov 2025 02:10:48 +0000 Manifest this update: Mon 03 Nov 2025 02:10:47 +0000 Manifest next update: Mon 10 Nov 2025 02:10:47 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: q7pJuRAfe+UXS0Do0q/bnddsfrIN4UPBCYPhTlck3Ac=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: GXQfXFZ8jth0bdOi6DqHjN+LeeVGl2tXIJaBhAaaOn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: Nov 3 02:10:47 2025 GMT Not After : Nov 10 02:10:47 2025 GMT Subject: CN=69080f28-b69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:38:83:07:61:63:c9:a5:69:08:23:39:6c:1f: ec:99:19:ab:8a:13:d3:c1:6e:b7:ce:a5:be:35:03: 29:8f:09:fd:d6:95:8e:9b:be:7f:92:cb:d7:56:85: 59:ea:fa:b9:73:7e:46:6b:d0:ec:13:76:d1:f0:72: 61:ea:bd:67:2a:ef:d1:d8:ed:19:66:15:60:58:29: 8d:52:83:e4:91:87:72:9c:cf:80:d9:30:88:02:b2: 84:4a:16:fe:b0:2e:0d:37:40:5a:15:3c:cd:21:e9: 0f:ba:2d:56:a2:76:c9:95:e5:f9:74:82:1f:ae:b1: 0e:68:73:fd:4d:65:e7:17:07:be:84:0c:76:8f:76: 77:ac:95:46:67:7d:af:b9:a5:12:77:37:b3:21:47: 33:d0:f5:5c:4f:62:4d:f8:eb:bd:f7:cc:aa:5b:80: f4:1d:2d:6c:d3:3d:6f:11:06:06:3a:b3:2e:64:8c: e7:f3:ff:33:9c:18:b9:02:66:60:de:98:7d:a4:21: 7c:0d:72:1f:9f:a9:41:50:be:4d:5c:86:d2:cd:bf: 0e:a7:ce:1a:52:3e:4c:ed:83:bd:e0:67:f5:6e:ce: 2c:52:e0:65:39:51:a2:61:89:0c:38:a9:dc:40:e6: 88:a6:6d:76:92:b5:d4:0e:43:82:10:0b:30:36:6f: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1F:24:01:EE:97:E7:D5:BA:2F:A7:5C:A0:C8:F7:46:85:CD:7E:67 X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d9:95:12:11:43:ea:db:9a:8e:c4:3d:bf:e5:a5:f1:2c:63: 6d:38:9b:ef:41:41:e9:75:db:f7:c5:08:60:a9:3b:f0:83:b8: 59:43:2a:20:65:45:e8:2c:a7:d6:01:c7:2d:41:15:77:be:4a: 87:38:3e:88:02:38:52:02:df:7d:40:d1:ea:45:7e:e3:63:a5: e3:73:ac:20:20:c6:c0:ba:68:a2:53:ed:5c:6b:50:26:b1:09: 03:df:2b:f7:fc:df:bc:0a:86:3e:a4:63:88:6a:20:13:71:27: e3:b7:ec:c2:0d:4f:6c:55:bf:a1:d3:f6:28:d6:5a:99:a7:ec: 48:f1:34:e0:97:c4:3a:c0:80:37:31:bd:a9:f6:6e:88:fe:6c: cc:0f:08:3b:65:64:e5:bb:a8:d4:d5:91:92:4c:2d:d8:7e:40: 36:22:08:a7:ce:be:35:f6:46:d4:a4:11:a5:e3:14:d5:c9:fa: 06:ba:78:5b:38:59:df:db:0d:6c:d3:1f:99:c6:31:f1:86:34: 1d:72:f6:76:e6:27:90:f5:1b:f0:23:17:0f:5e:4a:d6:ac:1e: 7e:e2:ab:a3:10:db:51:3d:16:31:6b:f8:de:d4:50:0b:d2:f4: c4:89:5a:92:25:03:01:1a:4a:ba:81:d4:59:b3:05:b9:46:03: fa:1e:90:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUxMTAzMDIxMDQ3WhcNMjUxMTEwMDIxMDQ3WjAYMRYwFAYD VQQDEw02OTA4MGYyOC1iNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/jiDB2FjyaVpCCM5bB/smRmrihPTwW63zqW+NQMpjwn91pWOm75/ksvXVoVZ 6vq5c35Ga9DsE3bR8HJh6r1nKu/R2O0ZZhVgWCmNUoPkkYdynM+A2TCIArKEShb+ sC4NN0BaFTzNIekPui1WonbJleX5dIIfrrEOaHP9TWXnFwe+hAx2j3Z3rJVGZ32v uaUSdzezIUcz0PVcT2JN+Ou998yqW4D0HS1s0z1vEQYGOrMuZIzn8/8znBi5AmZg 3ph9pCF8DXIfn6lBUL5NXIbSzb8Op84aUj5M7YO94Gf1bs4sUuBlOVGiYYkMOKnc QOaIpm12krXUDkOCEAswNm8LaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4fJAHu l+fVui+nXKDI90aFzX5nMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB82ZUSEUPq25qOxD2/5aXxLGNtOJvvQUHpddv3xQhgqTvwg7hZQyog ZUXoLKfWAcctQRV3vkqHOD6IAjhSAt99QNHqRX7jY6Xjc6wgIMbAumiiU+1ca1Am sQkD3yv3/N+8CoY+pGOIaiATcSfjt+zCDU9sVb+h0/Yo1lqZp+xI8TTgl8Q6wIA3 Mb2p9m6I/mzMDwg7ZWTlu6jU1ZGSTC3YfkA2Iginzr419kbUpBGl4xTVyfoGunhb OFnf2w1s0x+ZxjHxhjQdcvZ25ieQ9RvwIxcPXkrWrB5+4qujENtRPRYxa/je1FAL 0vTEiVqSJQMBGkq6gdRZswW5RgP6HpDc -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:44 2025 by rpki-client