$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json) Hash identifier: 4gI9/0KeKYZa1oxEruhma25aKaeQqIghI0whmWyNU30= Subject key identifier: BF:3A:92:DF:B0:23:06:2B:7D:0F:16:C7:27:B1:DF:A4:D6:55:8C:EC Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft Manifest number: 0223 Signing time: Mon 03 Nov 2025 02:07:59 +0000 Manifest this update: Mon 03 Nov 2025 02:07:58 +0000 Manifest next update: Mon 10 Nov 2025 02:07:58 +0000 Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: 7Q+FiHmHpB4XnjaeDY94j+TZN/y1fxSSnAk/yXgGF6k=) 2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Validity Not Before: Nov 3 02:07:58 2025 GMT Not After : Nov 10 02:07:58 2025 GMT Subject: CN=69080e7f-dd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:d2:71:d2:6d:61:b9:cf:e9:92:a9:ec:62: 56:08:a8:b0:d0:9a:de:3d:84:74:8f:64:63:03:97: d3:cc:1c:a1:e1:c3:45:ef:9f:cf:3b:da:0d:2c:c4: 99:de:cd:85:72:cd:43:e9:2e:51:08:27:bf:9b:58: b5:4b:68:13:8a:3e:b9:c3:8b:3d:ee:2e:df:16:49: ec:16:68:53:a5:9a:82:cb:5f:4b:96:b6:24:cf:8b: a8:3c:00:03:5c:66:5d:23:fa:d6:62:2a:5d:6d:6b: b0:fb:f1:c8:07:a6:b0:e5:88:a7:4f:a4:60:51:5e: d8:e9:50:a9:14:ad:9c:b7:4e:7c:e9:d2:5b:77:ce: 44:97:9d:10:bf:08:ff:2f:86:c4:98:e6:42:79:e4: 38:12:fd:b1:7e:c7:00:69:90:1e:27:64:cd:80:90: d0:31:53:ac:71:93:50:9e:ef:2a:c8:e9:35:3b:9d: 36:8f:26:0b:8c:67:ef:e0:c0:22:70:e8:e2:13:eb: 08:64:23:ad:ee:8e:53:43:dc:95:fe:48:aa:3b:8a: c2:b1:02:3a:b2:6f:91:1c:db:bd:d1:8b:00:67:ea: a9:6b:0b:29:96:ee:0c:3b:11:2d:fa:70:3d:72:7c: ba:92:05:5e:b9:95:01:34:03:4c:c4:dc:be:0c:14: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3A:92:DF:B0:23:06:2B:7D:0F:16:C7:27:B1:DF:A4:D6:55:8C:EC X509v3 Authority Key Identifier: keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:77:99:1a:82:0a:c9:4b:7b:a5:57:c3:c0:57:69:ad:63:5b: 2f:b2:10:8d:98:dd:ba:0e:67:79:e2:66:1e:6d:89:87:3b:c8: 0f:d1:92:0d:73:67:5a:6f:23:c9:12:62:a6:c4:71:89:89:af: 7e:92:0b:d2:93:33:e2:49:93:4c:49:be:26:25:70:dc:34:88: ee:be:bc:ab:33:40:75:ac:30:6b:bb:2b:25:94:c2:4e:f6:93: 5d:b5:30:81:da:79:f8:2b:98:28:00:c4:d1:f1:55:8d:55:89: 6e:4a:c2:2b:8a:75:1a:95:e8:81:e9:e6:c2:aa:9c:a0:8c:a0: 53:0e:0b:47:e9:32:f3:3d:b5:08:ae:e4:97:09:9f:00:1f:a0: 2d:b2:1d:be:04:34:a3:7c:db:7c:13:37:da:34:7d:dd:f3:14: 00:94:5b:12:6d:2f:98:13:9d:34:bf:a9:26:f3:a1:a2:b2:2b: ef:54:93:2e:cb:6d:39:9e:6f:c8:fc:0b:83:82:dd:05:ef:4f: 60:28:7e:91:be:8f:99:aa:bc:4c:43:53:c7:b6:b4:b8:dd:0b: e7:b0:cc:a0:a9:60:e7:ab:ee:90:6e:e1:67:b5:bf:bd:9f:3b: 90:31:18:0d:9f:e5:5d:55:8a:24:d4:18:e5:b2:52:bf:82:5d: 34:a3:af:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG RkZEMDgxNDAwHhcNMjUxMTAzMDIwNzU4WhcNMjUxMTEwMDIwNzU4WjAYMRYwFAYD VQQDEw02OTA4MGU3Zi1kZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CDScdJtYbnP6ZKp7GJWCKiw0JrePYR0j2RjA5fTzByh4cNF75/PO9oNLMSZ 3s2Fcs1D6S5RCCe/m1i1S2gTij65w4s97i7fFknsFmhTpZqCy19LlrYkz4uoPAAD XGZdI/rWYipdbWuw+/HIB6aw5YinT6RgUV7Y6VCpFK2ct0586dJbd85El50Qvwj/ L4bEmOZCeeQ4Ev2xfscAaZAeJ2TNgJDQMVOscZNQnu8qyOk1O502jyYLjGfv4MAi cOjiE+sIZCOt7o5TQ9yV/kiqO4rCsQI6sm+RHNu90YsAZ+qpawsplu4MOxEt+nA9 cny6kgVeuZUBNANMxNy+DBTqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL86kt+w IwYrfQ8Wxyex36TWVYzsMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV Snp0RjRia1lFN19fX1FnVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6d5kaggrJS3ulV8PAV2mtY1svshCNmN26Dmd54mYebYmHO8gP0ZIN c2dabyPJEmKmxHGJia9+kgvSkzPiSZNMSb4mJXDcNIjuvryrM0B1rDBruysllMJO 9pNdtTCB2nn4K5goAMTR8VWNVYluSsIrinUaleiB6ebCqpygjKBTDgtH6TLzPbUI ruSXCZ8AH6Atsh2+BDSjfNt8EzfaNH3d8xQAlFsSbS+YE500v6km86GisivvVJMu y205nm/I/AuDgt0F709gKH6Rvo+ZqrxMQ1PHtrS43QvnsMygqWDnq+6QbuFntb+9 nzuQMRgNn+VdVYok1BjlslK/gl00o6/K -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:53 2025 by rpki-client