$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json) Hash identifier: yk+kPz0fSfgCMjDSe0S7IJM9dIaXRZec+8PW1/wBFIA= Subject key identifier: 20:72:B0:16:9B:A3:A5:4B:ED:9E:8F:42:73:2F:83:6C:DD:5A:C0:5C Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Certificate serial: 3355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft Manifest number: 3CA4 Signing time: Sun 02 Nov 2025 15:22:17 +0000 Manifest this update: Sun 02 Nov 2025 15:22:16 +0000 Manifest next update: Sun 09 Nov 2025 15:22:16 +0000 Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: ixrjAuRQuiecTGCSHZhHpdlKtmgi8BcP1rzNfxbMQ0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13141 (0x3355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Validity Not Before: Nov 2 15:22:16 2025 GMT Not After : Nov 9 15:22:16 2025 GMT Subject: CN=69077728-faf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:3b:f2:34:c4:49:51:a3:c0:25:49:99:a0: 42:81:6b:ae:0a:25:4f:87:1b:70:60:91:6e:d5:90: 47:33:de:f7:7b:f5:55:67:67:66:a3:51:c3:3e:d4: 0b:fc:1d:de:aa:29:88:6c:50:f8:53:ed:76:88:66: 45:5c:e3:19:06:9b:8c:ad:7c:b1:69:58:bf:67:2f: c8:c7:e0:0c:7b:f5:ad:1d:28:cc:c2:fd:63:ee:07: 58:58:ea:65:90:51:18:f3:94:d7:31:30:76:3a:7a: 0d:a4:93:60:44:a9:df:73:f1:44:64:c0:e8:f9:ba: e4:01:be:8c:e4:d3:99:f9:e9:89:5a:12:74:e7:64: 7d:28:c1:a2:55:0d:32:fa:7e:10:e3:43:a3:1d:ab: 80:4f:bc:93:fe:f7:c2:a4:66:6c:9e:6a:7b:fc:69: 57:e1:b3:aa:7c:53:0f:b8:6e:d9:92:4f:86:36:82: 7a:73:2e:e6:b2:07:7f:09:38:d1:db:d7:1b:91:a6: 2a:2d:07:e7:b9:ac:68:97:75:aa:2f:c9:16:83:5c: 25:7c:86:8c:9a:af:af:60:7e:8d:b2:db:7b:45:19: eb:f9:23:14:89:f7:4b:97:fc:48:8f:50:3c:0a:5d: 7d:0b:7c:a8:cd:6b:c4:12:24:b9:8b:cb:4d:ff:eb: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:B0:16:9B:A3:A5:4B:ED:9E:8F:42:73:2F:83:6C:DD:5A:C0:5C X509v3 Authority Key Identifier: keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:ba:61:62:8f:ba:5a:57:30:a6:d7:2d:1d:f3:a6:31:37: fb:ad:81:8b:91:84:c5:c2:c9:89:dc:ef:4f:dc:ec:fd:97:ec: 07:8d:cb:4b:25:7d:ab:9b:2c:11:79:b5:7f:48:c4:1b:0f:6e: e0:f5:24:37:05:f7:6b:69:20:75:5f:74:ba:4d:1e:0f:f0:86: ff:81:86:fe:98:19:2b:07:a2:f7:9e:2e:48:f2:74:1f:3a:1b: 54:cb:7e:e3:56:5a:59:04:73:ba:36:84:f6:12:8a:9e:a2:f9: cb:d5:1f:e3:02:0f:12:10:e1:c0:c9:6a:88:96:a0:20:e7:22: 44:19:83:b9:45:60:13:a0:7f:44:f0:a1:ba:90:7d:37:17:da: 93:ce:bb:e0:db:38:83:f3:95:68:b7:ac:8d:0b:3e:a7:ea:27: d1:b5:9e:1c:94:6c:19:3a:cb:d0:13:42:73:55:3e:a2:9d:07: e8:77:80:d8:4f:5f:01:b1:ad:24:21:b1:64:fb:b8:41:31:4a: 3a:e3:6e:30:e2:58:8f:12:ff:57:83:6b:f7:23:fc:4d:66:86: c1:59:a5:f3:45:c3:0e:84:8f:d3:ef:ea:f3:bb:f8:cd:1a:3c: 0f:40:75:ab:01:5c:94:b3:d8:a3:24:14:a7:0e:5c:97:02:f2: 16:d8:ed:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKEVDOTVCOEE4NDk3MjlCQTZFRjg0MkM2MzcxQUFENEFD N0Q4RjIxRjcwHhcNMjUxMTAyMTUyMjE2WhcNMjUxMTA5MTUyMjE2WjAYMRYwFAYD VQQDEw02OTA3NzcyOC1mYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3no78jTESVGjwCVJmaBCgWuuCiVPhxtwYJFu1ZBHM973e/VVZ2dmo1HDPtQL /B3eqimIbFD4U+12iGZFXOMZBpuMrXyxaVi/Zy/Ix+AMe/WtHSjMwv1j7gdYWOpl kFEY85TXMTB2OnoNpJNgRKnfc/FEZMDo+brkAb6M5NOZ+emJWhJ052R9KMGiVQ0y +n4Q40OjHauAT7yT/vfCpGZsnmp7/GlX4bOqfFMPuG7Zkk+GNoJ6cy7msgd/CTjR 29cbkaYqLQfnuaxol3WqL8kWg1wlfIaMmq+vYH6Nstt7RRnr+SMUifdLl/xIj1A8 Cl19C3yozWvEEiS5i8tN/+uMnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBysBab o6VL7Z6PQnMvg2zdWsBcMB8GA1UdIwQYMBaAFOyVuKhJcpum74QsY3Gq1Kx9jyH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02YnZoQ3hqY2FyVXJIMlBJ ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdKVzRxRWx5bTZidmhDeGpjYXJVckgyUElmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02 YnZoQ3hqY2FyVXJIMlBJZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8CrphYo+6WlcwptctHfOmMTf7rYGLkYTFwsmJ3O9P3Oz9l+wHjctL JX2rmywRebV/SMQbD27g9SQ3BfdraSB1X3S6TR4P8Ib/gYb+mBkrB6L3ni5I8nQf OhtUy37jVlpZBHO6NoT2EoqeovnL1R/jAg8SEOHAyWqIlqAg5yJEGYO5RWAToH9E 8KG6kH03F9qTzrvg2ziD85Vot6yNCz6n6ifRtZ4clGwZOsvQE0JzVT6inQfod4DY T18Bsa0kIbFk+7hBMUo6424w4liPEv9Xg2v3I/xNZobBWaXzRcMOhI/T7+rzu/jN GjwPQHWrAVyUs9ijJBSnDlyXAvIW2O2r -----END CERTIFICATE-----Generated at Tue Nov 4 12:15:06 2025 by rpki-client