$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json) Hash identifier: E2IbsNZmraGDgLAeOS2bgy/c4AQOPGBgfEr1ijb6f/o= Subject key identifier: 70:33:5C:DB:32:38:54:BB:82:62:D2:44:6D:41:55:5A:B9:A8:26:49 Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft Manifest number: 0697 Signing time: Fri 24 Oct 2025 23:49:58 +0000 Manifest this update: Fri 24 Oct 2025 23:49:58 +0000 Manifest next update: Fri 31 Oct 2025 23:49:58 +0000 Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: 50TiMGd0jJCFexufTcDRhZPsbXau6Sm6yO1IJDSqTRQ=) 2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: 9RcU5RMIguV5RGzPowAleQQk2yHbByHLcaosyfn/YYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 23:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Validity Not Before: Oct 24 23:49:58 2025 GMT Not After : Oct 31 23:49:58 2025 GMT Subject: CN=68fc10a6-a764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:3d:11:21:a2:9b:46:42:a0:e1:f5:96:c5: cc:10:e5:9b:4c:c6:af:92:b5:a2:ac:ad:37:0a:df: 43:22:f4:33:29:9a:a8:e2:4d:2c:cc:b1:ce:79:75: 3f:af:0a:66:e5:86:66:2e:43:bb:7b:74:74:d5:9e: b9:43:c4:f1:9a:d8:b6:f1:cb:4f:a3:02:40:cc:cd: 4c:d8:2d:2d:70:45:d8:cb:f2:e0:d5:10:06:76:67: 99:de:d7:b4:e7:db:98:65:ba:be:58:56:9e:78:ca: 36:9c:9f:e2:27:d0:58:04:f9:46:3d:9a:c4:25:ef: 88:54:f8:b4:18:5a:e1:15:ca:c7:cd:45:1b:4b:a8: 4a:be:fb:76:f8:04:7b:e3:a4:7e:99:86:a7:c3:a1: 0d:37:88:12:88:d6:fe:85:35:cc:16:5f:a4:4e:99: 80:69:c5:41:0c:ad:06:d7:7d:ea:59:87:54:19:4b: 21:78:f7:9d:de:af:b7:3c:1d:cf:0c:19:4d:ae:73: 09:0c:8c:c5:29:1b:b8:5f:9d:ec:78:0f:88:11:ee: 50:b3:41:ee:ca:9c:2e:fe:f1:96:65:c8:74:6f:2c: f9:d2:46:88:b9:f3:97:65:ca:b4:05:09:26:ff:5f: cb:f4:0e:de:ae:01:47:69:0e:cf:b2:18:d6:38:4d: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:5C:DB:32:38:54:BB:82:62:D2:44:6D:41:55:5A:B9:A8:26:49 X509v3 Authority Key Identifier: keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:13:3e:7a:0e:b3:cd:04:79:d7:36:cf:01:07:6a:e7:15:40: 34:2a:97:c3:f8:22:2c:16:f3:36:f7:b6:1f:3a:d6:b4:8a:e5: 29:dd:67:b9:3f:15:81:cb:8e:13:7a:86:26:5b:d3:26:12:9a: a8:c0:35:e0:1a:19:4c:fa:30:cd:da:ae:4f:02:56:39:10:bb: a8:f9:4f:49:e8:bc:0c:34:f3:85:a7:b1:64:9e:65:33:65:c7: 41:ff:9b:e3:cb:9c:da:e5:9c:ac:fb:3a:e3:11:11:fe:c8:75: 1b:d6:bb:b5:4d:02:fc:61:02:cc:1f:7b:79:7d:72:4e:15:ab: cc:f2:a8:85:99:8b:52:19:ab:3a:e3:b5:84:38:a1:49:83:77: 4b:70:86:cd:a7:ce:2f:6f:75:8e:db:36:bc:b0:fd:91:8f:81: 01:39:32:10:03:f4:83:92:36:a2:c0:d5:7d:19:d2:bf:84:2a: 78:1d:6e:3a:c9:dd:92:5c:4a:e7:1c:98:93:ca:05:59:26:1a: 5c:77:0a:8f:5f:27:30:54:92:b2:0a:43:c4:9b:91:55:de:4d: 78:53:9d:65:f4:36:29:ec:06:cf:79:04:c8:01:ed:9d:7b:a7: d4:55:d5:0c:26:36:05:84:f5:74:4d:62:f5:0f:98:01:c1:e1: a2:2b:7b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RUQxMTAvBgNVBAUTKEVEQTJBQUJCNDAyMTJFQjNDMDkyQUFFQUYxNTE0MkE3 NjlFRjU5MDcwHhcNMjUxMDI0MjM0OTU4WhcNMjUxMDMxMjM0OTU4WjAYMRYwFAYD VQQDEw02OGZjMTBhNi1hNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5M49ESGim0ZCoOH1lsXMEOWbTMavkrWirK03Ct9DIvQzKZqo4k0szLHOeXU/ rwpm5YZmLkO7e3R01Z65Q8Txmti28ctPowJAzM1M2C0tcEXYy/Lg1RAGdmeZ3te0 59uYZbq+WFaeeMo2nJ/iJ9BYBPlGPZrEJe+IVPi0GFrhFcrHzUUbS6hKvvt2+AR7 46R+mYanw6ENN4gSiNb+hTXMFl+kTpmAacVBDK0G133qWYdUGUshePed3q+3PB3P DBlNrnMJDIzFKRu4X53seA+IEe5Qs0Huypwu/vGWZch0byz50kaIufOXZcq0BQkm /1/L9A7ergFHaQ7PshjWOE0+TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAzXNsy OFS7gmLSRG1BVVq5qCZJMB8GA1UdIwQYMBaAFO2iqrtAIS6zwJKq6vFRQqdp71kH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFRC9EQkU5MEJBQzhE MTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExyUEFrcXJxOFZGQ3AybnZX UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhS3F1MEFoTHJQQWtxcnE4VkZDcDJudldRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRFRC9EQkU5MEJBQzhEMTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExy UEFrcXJxOFZGQ3AybnZXUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaEz56DrPNBHnXNs8BB2rnFUA0KpfD+CIsFvM297YfOta0iuUp3We5 PxWBy44TeoYmW9MmEpqowDXgGhlM+jDN2q5PAlY5ELuo+U9J6LwMNPOFp7FknmUz ZcdB/5vjy5za5Zys+zrjERH+yHUb1ru1TQL8YQLMH3t5fXJOFavM8qiFmYtSGas6 47WEOKFJg3dLcIbNp84vb3WO2za8sP2Rj4EBOTIQA/SDkjaiwNV9GdK/hCp4HW46 yd2SXErnHJiTygVZJhpcdwqPXycwVJKyCkPEm5FV3k14U51l9DYp7AbPeQTIAe2d e6fUVdUMJjYFhPV0TWL1D5gBweGiK3tc -----END CERTIFICATE-----Generated at Sat Oct 25 17:18:56 2025 by rpki-client