$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: FjqqbJnvl9sq+Dggjcol/tei/+CJ3QXnSYWPEIr2ys4= Subject key identifier: 7F:64:A6:3A:A3:B3:EF:BD:3B:61:03:95:17:D7:D2:C9:5D:00:ED:E1 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B78 Signing time: Sun 02 Nov 2025 19:02:18 +0000 Manifest this update: Sun 02 Nov 2025 19:02:17 +0000 Manifest next update: Sun 09 Nov 2025 19:02:17 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: erl1ZddegVxGnLb04kRVSWayO1UOTFoo45zvTbcNUCQ=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Nov 2 19:02:17 2025 GMT Not After : Nov 9 19:02:17 2025 GMT Subject: CN=6907aab9-e412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bb:07:57:b8:c1:1f:22:54:dd:d2:fd:ce:0f: 64:84:93:45:2b:46:41:9a:93:09:53:b2:76:bf:ad: de:f4:07:48:f8:d3:2b:d3:79:9d:0f:ae:4d:fd:61: 82:23:c2:6f:7c:d4:8e:74:5f:0a:e7:26:87:18:02: e5:b2:d4:6b:36:61:6a:7f:e5:c3:15:1d:bc:a9:1c: c6:6c:37:5c:df:dd:eb:00:c5:71:b6:79:8a:5c:71: 0a:b5:d3:a1:a4:1d:54:0d:8c:fc:d3:96:51:00:87: 5f:2e:d3:20:41:ab:9c:95:fd:5e:cc:31:5e:ac:49: 46:45:e0:eb:11:6f:a4:15:35:bc:5a:7d:c5:44:7d: 86:14:9b:2f:87:56:5c:f6:7f:88:fc:8c:cb:b1:9d: 8d:fc:d3:21:18:63:bd:13:55:07:a8:d3:75:1d:61: 28:dd:69:1f:40:fc:4e:0e:60:d2:bb:5b:f0:52:bf: 8c:06:29:7a:9d:87:bf:44:5f:22:10:c3:a5:02:62: f6:fe:40:ab:de:7d:f8:7b:87:29:4c:84:8f:6a:9d: d4:a5:cf:09:32:c5:8e:30:69:59:29:25:22:e1:60: 1c:b8:e7:40:1f:d2:9f:77:a9:36:7f:7c:58:93:fa: bc:a4:c7:51:7c:02:55:6d:b1:1e:64:42:0b:5b:14: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:64:A6:3A:A3:B3:EF:BD:3B:61:03:95:17:D7:D2:C9:5D:00:ED:E1 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ce:6c:c6:c3:74:cf:2d:79:16:41:25:8f:ed:82:26:9d:66: ff:59:bf:70:54:08:7a:37:50:13:b9:b6:2d:53:ba:b7:56:4c: 11:7f:31:3e:9f:a5:65:60:72:bd:26:e6:cc:62:ba:3f:cc:d4: 5b:f7:2c:b9:d8:a6:90:c1:c0:27:67:41:be:07:a1:37:d8:01: 4c:b6:9e:de:5d:2f:6c:c6:91:51:47:4d:dc:19:72:00:e5:85: 36:54:da:d0:5e:34:3e:07:13:4f:73:ec:13:58:e8:6c:33:fa: 6f:74:89:aa:6e:fb:99:8a:c6:bf:98:42:00:48:59:4a:02:15: d9:6a:53:00:cc:91:b7:a6:eb:56:d4:0d:e9:6a:27:03:4d:f3: 4c:cf:52:75:fa:d7:de:6c:fb:88:19:4e:ad:eb:d3:bd:4a:83: 3d:85:8f:bc:96:9b:d5:9a:9f:0a:a7:d2:24:43:4e:f3:79:56: a7:5c:1f:4c:4e:90:6b:d0:4c:29:1c:b6:15:89:a3:f7:07:66: 5e:a6:46:98:e6:89:96:78:69:b1:a4:1f:28:cf:b3:ce:87:82: bc:10:d6:49:61:00:c6:f1:93:a6:73:30:a3:72:48:07:a1:5f: 55:c4:57:cf:11:9a:3b:44:43:94:3d:f8:94:5d:00:ea:01:4f: 52:38:b2:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUxMTAyMTkwMjE3WhcNMjUxMTA5MTkwMjE3WjAYMRYwFAYD VQQDEw02OTA3YWFiOS1lNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77sHV7jBHyJU3dL9zg9khJNFK0ZBmpMJU7J2v63e9AdI+NMr03mdD65N/WGC I8JvfNSOdF8K5yaHGALlstRrNmFqf+XDFR28qRzGbDdc393rAMVxtnmKXHEKtdOh pB1UDYz805ZRAIdfLtMgQauclf1ezDFerElGReDrEW+kFTW8Wn3FRH2GFJsvh1Zc 9n+I/IzLsZ2N/NMhGGO9E1UHqNN1HWEo3WkfQPxODmDSu1vwUr+MBil6nYe/RF8i EMOlAmL2/kCr3n34e4cpTISPap3Upc8JMsWOMGlZKSUi4WAcuOdAH9Kfd6k2f3xY k/q8pMdRfAJVbbEeZEILWxSzcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9kpjqj s++9O2EDlRfX0sldAO3hMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrzmzGw3TPLXkWQSWP7YImnWb/Wb9wVAh6N1ATubYtU7q3VkwRfzE+ n6VlYHK9JubMYro/zNRb9yy52KaQwcAnZ0G+B6E32AFMtp7eXS9sxpFRR03cGXIA 5YU2VNrQXjQ+BxNPc+wTWOhsM/pvdImqbvuZisa/mEIASFlKAhXZalMAzJG3putW 1A3paicDTfNMz1J1+tfebPuIGU6t69O9SoM9hY+8lpvVmp8Kp9IkQ07zeVanXB9M TpBr0EwpHLYViaP3B2ZepkaY5omWeGmxpB8oz7POh4K8ENZJYQDG8ZOmczCjckgH oV9VxFfPEZo7REOUPfiUXQDqAU9SOLJO -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:02 2025 by rpki-client