$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: PILoHQKGu/IAPXqpt3xEASBl7ZJDKls4CcQSd38Fp6o= Subject key identifier: C7:E8:F8:17:CE:70:0F:24:31:1F:CB:0C:48:46:09:DF:6B:3D:10:F1 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0BEC Signing time: Tue 28 Oct 2025 18:45:51 +0000 Manifest this update: Tue 28 Oct 2025 18:45:51 +0000 Manifest next update: Tue 04 Nov 2025 18:45:51 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: iKAMS5N2IFDm0tYR9hZgwhM86kyoFMhHzwODItPpSUs=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 18:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Oct 28 18:45:51 2025 GMT Not After : Nov 4 18:45:51 2025 GMT Subject: CN=69010f5f-f96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:ba:43:f1:16:10:97:1e:1e:8c:ba:5d:f7: 4b:99:41:d4:ec:06:55:5d:2a:18:0b:86:13:1d:90: 2a:5a:07:ba:8d:30:8d:ba:1a:3c:81:b9:05:6e:20: 24:2c:4e:af:90:84:63:c0:c0:55:35:2d:5a:33:14: d0:b8:a5:33:d5:a3:00:7c:29:44:29:01:a4:15:75: 88:04:27:19:1c:25:3c:f2:9b:67:a6:6a:b1:e6:fd: 26:c5:d3:9a:b6:f3:63:ab:a4:01:65:2e:8e:b2:7a: fb:37:57:03:77:de:21:00:b9:11:69:e2:82:28:44: a7:a5:c4:46:22:6c:2c:2d:cc:8e:8a:9e:ae:69:35: 35:2b:b9:70:47:72:7b:27:da:b1:20:82:52:97:93: ff:29:25:2b:4e:de:ff:e0:3e:6d:a2:61:56:62:59: 04:c5:8b:45:21:08:8d:41:5a:55:43:ef:79:d8:79: 5e:02:a3:ac:f2:8e:1b:66:bf:22:bd:30:4f:c1:d5: eb:7d:3b:e7:2e:f5:8b:d7:9d:6e:41:58:20:e8:ce: be:d4:72:31:3e:3e:af:c2:d0:40:0a:21:5f:b1:f7: 98:7f:f7:3b:11:c7:6e:92:36:8e:ac:66:f3:21:95: 33:37:ec:49:c4:52:86:ae:f6:55:5a:ec:0f:21:24: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:F8:17:CE:70:0F:24:31:1F:CB:0C:48:46:09:DF:6B:3D:10:F1 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2d:74:3e:e0:e2:0f:ae:c9:4c:47:e7:74:33:a4:1c:30:c5: 4b:c7:83:ae:45:43:fa:08:73:14:48:ec:3a:9f:f5:82:18:50: 78:84:1f:7b:37:fe:f8:bd:51:79:a5:1c:85:42:2d:7d:25:b6: 17:e5:e7:e8:ea:cc:ff:e8:63:45:55:7b:04:0a:b4:42:86:94: 51:74:d3:93:d4:ef:13:4a:69:1c:40:04:ae:1b:2f:cf:2e:ce: a4:df:b6:ed:0d:71:2c:3d:37:11:89:b5:05:c8:8a:80:21:01: ad:f2:f6:37:47:d2:cd:0f:da:16:55:2f:5d:c8:ad:f8:1c:ed: 8e:e9:7e:dd:1a:27:c0:54:4b:39:50:a5:75:ff:6e:a8:f2:f3: e6:ce:bb:9e:75:96:fc:cc:f7:4e:32:01:9a:0b:93:0d:49:fa: bd:48:f2:ce:f3:8b:d2:19:a7:b4:68:d3:cd:3d:e9:ca:62:86: 24:6a:b2:e6:d5:96:d4:60:eb:37:c8:be:9a:8d:8a:a4:b1:a4: aa:4b:fa:9a:3f:59:80:f8:d9:88:3a:4e:73:e0:47:01:cc:f3: f8:41:51:98:cd:f6:42:c5:48:14:12:e8:3c:69:20:7a:a3:6c: 6e:2a:0a:fd:4e:f6:2b:66:2c:1e:01:36:16:6a:b0:c6:c0:bc: 0e:2e:13:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjUxMDI4MTg0NTUxWhcNMjUxMTA0MTg0NTUxWjAYMRYwFAYD VQQDEw02OTAxMGY1Zi1mOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOG6Q/EWEJceHoy6XfdLmUHU7AZVXSoYC4YTHZAqWge6jTCNuho8gbkFbiAk LE6vkIRjwMBVNS1aMxTQuKUz1aMAfClEKQGkFXWIBCcZHCU88ptnpmqx5v0mxdOa tvNjq6QBZS6Osnr7N1cDd94hALkRaeKCKESnpcRGImwsLcyOip6uaTU1K7lwR3J7 J9qxIIJSl5P/KSUrTt7/4D5tomFWYlkExYtFIQiNQVpVQ+952HleAqOs8o4bZr8i vTBPwdXrfTvnLvWL151uQVgg6M6+1HIxPj6vwtBACiFfsfeYf/c7EcdukjaOrGbz IZUzN+xJxFKGrvZVWuwPIST9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfo+BfO cA8kMR/LDEhGCd9rPRDxMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRLXQ+4OIPrslMR+d0M6QcMMVLx4OuRUP6CHMUSOw6n/WCGFB4hB97 N/74vVF5pRyFQi19JbYX5efo6sz/6GNFVXsECrRChpRRdNOT1O8TSmkcQASuGy/P Ls6k37btDXEsPTcRibUFyIqAIQGt8vY3R9LND9oWVS9dyK34HO2O6X7dGifAVEs5 UKV1/26o8vPmzruedZb8zPdOMgGaC5MNSfq9SPLO84vSGae0aNPNPenKYoYkarLm 1ZbUYOs3yL6ajYqksaSqS/qaP1mA+NmIOk5z4EcBzPP4QVGYzfZCxUgUEug8aSB6 o2xuKgr9TvYrZiweATYWarDGwLwOLhM3 -----END CERTIFICATE-----Generated at Wed Oct 29 22:26:19 2025 by rpki-client