$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: 1tO7u5DecDDJGNjPgs1YXt/6pamrpbJUxJA4l7Hk2Y0= Subject key identifier: AD:3C:57:AE:23:06:04:EF:82:A1:5D:BA:CE:3E:09:1F:9D:CA:1E:B2 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 14CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 14AE Signing time: Fri 24 Oct 2025 17:17:06 +0000 Manifest this update: Fri 24 Oct 2025 17:17:05 +0000 Manifest next update: Fri 31 Oct 2025 17:17:05 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: or+T7UYrYV/3b/0GuwRPObkDsI74XMufaCTQ2BMB+Aw=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5324 (0x14cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Oct 24 17:17:05 2025 GMT Not After : Oct 31 17:17:05 2025 GMT Subject: CN=68fbb491-b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:85:5b:c1:61:64:29:df:a0:5b:50:b3:b0: 94:ff:41:84:d0:f3:ea:23:30:24:31:5c:cd:cd:d1: be:18:c3:6f:dc:ed:fb:58:72:7b:be:52:24:09:a6: 5e:b4:91:1e:77:6d:32:4f:4b:99:90:0d:33:c2:3f: 9d:8f:be:b9:a4:b5:c5:0b:ef:8a:c3:64:9b:f9:90: be:03:84:c2:d6:8c:e3:45:a7:73:fc:e9:21:7b:02: fe:34:b2:b6:88:5c:b9:fd:90:f8:b8:8e:c1:dd:9b: 29:17:cc:9b:5a:ec:6c:04:8f:4c:87:11:22:e3:e1: bc:38:80:3b:33:41:ac:64:87:7e:b7:07:65:69:cb: 77:d7:7d:1f:59:fe:b2:eb:7d:09:94:e2:0c:c9:5a: f2:c9:fd:d4:aa:9c:e2:ed:69:e4:6f:b7:73:9b:f2: 88:25:57:6f:79:60:ac:f4:29:52:eb:52:a4:db:9e: 6f:f7:37:39:bd:aa:7f:15:79:f8:9c:1d:9d:be:6c: a1:41:86:0d:c0:c8:af:ef:c2:36:a0:1a:2c:44:af: e3:be:65:a9:31:4b:49:b2:99:9b:fc:15:87:70:74: fc:7b:c7:28:87:7c:fa:cf:28:13:42:74:e4:83:84: f6:8f:87:61:dc:77:b0:12:fd:9e:97:f8:65:0a:b6: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3C:57:AE:23:06:04:EF:82:A1:5D:BA:CE:3E:09:1F:9D:CA:1E:B2 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8f:2e:1b:d8:ca:14:7b:76:58:3c:ff:30:5d:34:18:79:99: 80:81:5d:66:1c:d5:eb:d8:cd:9a:a7:c3:42:b3:7c:26:a4:cf: 04:43:e5:67:db:28:8f:86:95:be:a0:3f:e2:fb:3f:75:7c:1a: dc:42:3b:11:21:e0:3a:fe:95:20:c5:44:aa:14:6b:be:b2:0b: ec:4d:e7:f5:c0:43:af:d5:81:1d:47:a0:dc:64:62:17:b8:dd: c6:b2:2e:40:48:e5:3a:1c:fc:60:e9:ab:d9:d0:cf:18:bf:39: ea:43:84:df:ee:66:f3:27:0e:9b:ad:6c:ef:5b:0b:a6:44:3c: 38:b7:23:8d:b9:3f:b6:f8:b0:ea:d9:5a:16:17:f5:cc:a8:47: c2:d7:e5:0c:1e:62:32:86:65:72:11:cb:75:d5:b8:d1:5c:6a: c2:b6:f9:9c:6d:9c:88:96:70:e5:01:e8:a1:b1:8c:50:f9:95: dc:84:4a:bb:2d:f0:8f:4d:d3:65:eb:0d:37:08:a8:91:ae:77: 6f:b2:35:a4:9e:c2:d1:07:2c:ca:30:86:81:0c:f8:6e:c9:5f: 07:85:99:76:aa:3b:54:da:46:c1:34:54:da:57:6c:31:af:f0: 05:07:30:2e:c8:40:b7:92:ea:12:50:36:28:4f:47:2e:ef:ea: 70:6f:02:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUxMDI0MTcxNzA1WhcNMjUxMDMxMTcxNzA1WjAYMRYwFAYD VQQDEw02OGZiYjQ5MS1iOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHGFW8FhZCnfoFtQs7CU/0GE0PPqIzAkMVzNzdG+GMNv3O37WHJ7vlIkCaZe tJEed20yT0uZkA0zwj+dj765pLXFC++Kw2Sb+ZC+A4TC1ozjRadz/OkhewL+NLK2 iFy5/ZD4uI7B3ZspF8ybWuxsBI9MhxEi4+G8OIA7M0GsZId+twdlact3130fWf6y 630JlOIMyVryyf3Uqpzi7Wnkb7dzm/KIJVdveWCs9ClS61Kk255v9zc5vap/FXn4 nB2dvmyhQYYNwMiv78I2oBosRK/jvmWpMUtJspmb/BWHcHT8e8coh3z6zygTQnTk g4T2j4dh3HewEv2el/hlCrafVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK08V64j BgTvgqFdus4+CR+dyh6yMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/jy4b2MoUe3ZYPP8wXTQYeZmAgV1mHNXr2M2ap8NCs3wmpM8EQ+Vn 2yiPhpW+oD/i+z91fBrcQjsRIeA6/pUgxUSqFGu+sgvsTef1wEOv1YEdR6DcZGIX uN3Gsi5ASOU6HPxg6avZ0M8YvznqQ4Tf7mbzJw6brWzvWwumRDw4tyONuT+2+LDq 2VoWF/XMqEfC1+UMHmIyhmVyEct11bjRXGrCtvmcbZyIlnDlAeihsYxQ+ZXchEq7 LfCPTdNl6w03CKiRrndvsjWknsLRByzKMIaBDPhuyV8HhZl2qjtU2kbBNFTaV2wx r/AFBzAuyEC3kuoSUDYoT0cu7+pwbwK1 -----END CERTIFICATE-----Generated at Sat Oct 25 04:39:23 2025 by rpki-client