$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: /uFlaSGTcRwwHgZq300cK6XwGzXxN5OZ1PCt+6ssswU= Subject key identifier: 63:C2:51:84:E9:2E:FC:9E:63:FA:7C:8A:15:87:29:3D:1A:92:82:0A Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 2606 Signing time: Wed 22 Oct 2025 15:55:36 +0000 Manifest this update: Wed 22 Oct 2025 15:55:36 +0000 Manifest next update: Wed 29 Oct 2025 15:55:36 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: ViaAJTsJHm3S6KMPRfdZln8/fOA38ZVY90Ha+TPy/Dk=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: 90bUXqg3cX6TcPrG0r+8gEIwyzz7y27hAZ4AHHGnSac=) 3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: DUev2xfHV3YTqcp72PQ09DnBBnHJHORn9wfutfk8dS4=) 4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: qxLlD9upoansLJQWeRP+10o0I/V0d1r/bH5x1O0/V8g=) 5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: CuSJKhwFQb+hfMj84NKrDKsK04kxlYtYkdcmO6stGaQ=) 6: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: Wp4WdYeftXiPfjW7HOoNIgzcAj0lp284UPmRoAoGjBI=) 7: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: nvK1Z24o3Y0mSxZfV92U/XVDn0m0mWCKdJH5EqiltEc=) 8: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: YVcbpgXMdHx8v+kxbQV+/jeMyoJodLse3XaExj7zMzE=) 9: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: DmzFqtms4jMKGs52grdF6fZLNgf7jxYCHnP/u/dLXR0=) 10: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: ZM3YNiXjfVF2bNQ/sApF+ztIkamifRhD/WVYawLJU90=) 11: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: DsDyu/qdLDuGh2vqG5nWK3AVRpzQ90DBj9cQIus0csA=) 12: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: 7+AOspFdBHo0otaBbRJ8yi3iLWVOhPxZMZxpVy1nPP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9881 (0x2699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Oct 22 15:55:36 2025 GMT Not After : Oct 29 15:55:36 2025 GMT Subject: CN=68f8fe78-9694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:fd:c3:71:ef:58:61:29:18:e5:7a:dc:ee: 1d:9e:3a:c7:c5:51:e6:ff:9e:f4:6c:39:8d:1d:49: a4:96:8c:5c:14:d6:d5:e5:28:ec:42:e4:e6:e8:0c: f0:8e:d7:a0:7a:f3:d4:40:3e:52:fa:1c:a5:c7:f8: c9:41:8d:86:e9:11:e6:84:6f:fe:65:c5:8e:81:52: e2:0f:ae:70:a7:44:41:7c:fc:72:9e:df:9e:0e:86: 55:ef:8c:ff:bb:59:f2:9f:4a:de:e8:46:7e:73:a0: 54:90:3b:91:52:36:19:84:82:01:0c:8e:de:3f:37: 1c:5b:e3:17:06:28:1f:e4:91:ce:b9:40:60:17:9f: a4:df:ad:db:65:1b:83:1c:6e:6c:c2:c5:9e:72:a3: 63:6b:d3:cd:05:50:82:04:9a:e6:66:9a:5a:ba:e5: dd:a4:a7:fe:5f:c9:13:cd:f5:af:33:84:5e:0d:8d: 2a:99:0b:b9:51:f9:1f:c4:7f:7f:9c:d4:2e:d9:38: db:64:fb:d0:fb:86:5b:1f:e2:b1:b5:bc:a8:de:f1: 3f:9e:b1:69:46:ce:1f:ad:98:35:af:58:f4:f5:d7: 7d:0d:0a:66:e2:2d:69:51:4a:aa:dc:29:f1:18:6b: 15:16:ba:2c:0f:0c:6f:4d:69:7c:7d:15:a4:20:49: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C2:51:84:E9:2E:FC:9E:63:FA:7C:8A:15:87:29:3D:1A:92:82:0A X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:9e:dc:d2:b7:80:9b:71:30:7c:ee:59:81:d4:f5:11:9a:88: 55:be:be:9a:60:9b:3e:34:a9:4c:c2:27:f4:d0:e5:24:cb:4d: 11:31:e8:5d:a8:da:e5:57:6f:33:be:4e:32:a7:87:03:9a:41: ac:01:b5:84:13:a3:b0:de:0c:6e:d3:13:4d:2a:41:3b:6c:5d: ff:e0:0e:43:c3:34:27:c7:fc:d7:95:93:45:d2:45:e4:a3:ae: ae:44:fe:0a:7e:91:a3:d8:5d:7a:78:fe:4d:1d:22:fe:47:18: 29:ba:26:d0:dc:3d:91:12:22:ea:7b:05:06:a7:2e:94:42:2a: 84:47:6f:40:78:ab:22:50:57:89:eb:4a:5b:4b:81:44:53:5d: b7:8a:b6:7f:b3:a6:9a:f2:df:1c:6f:e7:b0:00:ba:fa:b7:09: 38:c4:c6:74:cd:09:d2:f7:ac:b1:14:53:c3:11:fb:10:7a:dc: 1d:d0:77:bb:81:cf:bf:db:89:f3:c4:72:86:4e:b9:28:26:0b: 6b:80:b5:d5:e2:26:94:23:a0:48:23:f2:3c:5e:b4:94:fb:c0: f4:04:ed:33:c1:57:8f:61:bb:dc:77:9e:ae:f2:13:15:cc:7a: 52:08:44:a7:c7:f3:fb:68:3a:42:ad:6b:0f:26:50:3e:c0:08: c9:41:59:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUxMDIyMTU1NTM2WhcNMjUxMDI5MTU1NTM2WjAYMRYwFAYD VQQDEw02OGY4ZmU3OC05Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFD9w3HvWGEpGOV63O4dnjrHxVHm/570bDmNHUmkloxcFNbV5SjsQuTm6Azw jtegevPUQD5S+hylx/jJQY2G6RHmhG/+ZcWOgVLiD65wp0RBfPxynt+eDoZV74z/ u1nyn0re6EZ+c6BUkDuRUjYZhIIBDI7ePzccW+MXBigf5JHOuUBgF5+k363bZRuD HG5swsWecqNja9PNBVCCBJrmZppauuXdpKf+X8kTzfWvM4ReDY0qmQu5UfkfxH9/ nNQu2TjbZPvQ+4ZbH+Kxtbyo3vE/nrFpRs4frZg1r1j09dd9DQpm4i1pUUqq3Cnx GGsVFrosDwxvTWl8fRWkIEkTrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPCUYTp LvyeY/p8ihWHKT0akoIKMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQntzSt4CbcTB87lmB1PURmohVvr6aYJs+NKlMwif00OUky00RMehd qNrlV28zvk4yp4cDmkGsAbWEE6Ow3gxu0xNNKkE7bF3/4A5DwzQnx/zXlZNF0kXk o66uRP4KfpGj2F16eP5NHSL+RxgpuibQ3D2REiLqewUGpy6UQiqER29AeKsiUFeJ 60pbS4FEU123irZ/s6aa8t8cb+ewALr6twk4xMZ0zQnS96yxFFPDEfsQetwd0He7 gc+/24nzxHKGTrkoJgtrgLXV4iaUI6BII/I8XrSU+8D0BO0zwVePYbvcd56u8hMV zHpSCESnx/P7aDpCrWsPJlA+wAjJQVn3 -----END CERTIFICATE-----Generated at Thu Oct 23 05:59:59 2025 by rpki-client