$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: D3gasT2eOD/fnHfDEyYwpdbvBJZUPfKGRD2ZbEA2k/Q= Subject key identifier: D7:1C:11:1F:F2:1C:10:4B:6A:98:C2:90:DD:44:9A:51:5A:A1:1D:6E Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0BD1 Signing time: Sun 02 Nov 2025 18:52:06 +0000 Manifest this update: Sun 02 Nov 2025 18:52:05 +0000 Manifest next update: Sun 09 Nov 2025 18:52:05 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: J3EQqMFBSvrAXBfEYG57lMB5epjCa8GJBj7pFKRFUps=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Nov 2 18:52:05 2025 GMT Not After : Nov 9 18:52:05 2025 GMT Subject: CN=6907a855-980e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:b4:76:7b:cb:79:1a:ef:57:50:45:45:dd: 58:6f:6e:3b:48:df:a5:97:3b:e6:c9:27:d1:58:3b: 4b:e1:b7:4c:e6:64:16:7e:98:b9:67:cd:65:f2:4e: b5:1f:ad:4d:ed:19:75:c7:01:9a:11:96:ac:f9:2d: cf:e2:a9:d1:00:4c:c1:32:ee:2e:45:37:2e:86:e8: 38:8d:5a:a3:74:a3:22:df:60:a2:83:30:1d:99:44: a5:15:49:e9:97:7b:34:eb:cb:6c:b0:02:94:a6:f6: 4f:20:fd:47:f2:02:69:5a:ec:2f:0c:af:45:0d:db: 69:85:30:54:3d:f2:9c:44:c4:92:14:8d:21:42:58: 75:02:46:74:9d:a6:f4:99:02:aa:af:1f:b7:14:dd: 94:dd:23:77:2e:1e:52:bb:ff:1f:3a:34:9a:27:3b: 80:4b:7d:bc:19:2e:d3:bf:26:a8:9c:8b:d8:bc:d1: 53:c0:f9:92:78:1b:1a:33:0d:01:5a:86:c8:d6:47: a9:e8:38:9f:30:82:1c:bb:60:df:84:d8:0a:eb:ac: c0:d3:4a:e8:ae:d2:48:e1:e6:3f:62:e5:ea:aa:70: 95:78:81:b9:5d:4f:5c:26:75:3a:31:0e:87:15:8a: 6d:78:0a:6c:8c:9b:63:d3:9e:e6:24:01:30:f4:35: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1C:11:1F:F2:1C:10:4B:6A:98:C2:90:DD:44:9A:51:5A:A1:1D:6E X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:6d:74:e2:52:04:b1:8a:2c:10:ac:9f:63:b1:10:45:d9: de:a5:7f:a7:39:6e:1c:aa:5c:3a:c1:c3:3b:4d:c8:07:e5:54: b5:3a:bb:b0:ff:48:9e:cf:97:99:2e:b4:f5:59:aa:10:c7:a8: 77:3e:ba:ab:ca:ac:3f:42:aa:af:cf:9c:1b:bf:8f:68:51:30: 6a:65:95:8a:28:a1:41:54:53:44:6f:1c:00:d3:bd:4a:39:05: ae:f5:f0:69:01:a0:90:a9:d4:c7:f5:d2:ee:99:4b:2f:03:38: 6a:62:f2:f9:ec:cc:a2:1b:8c:ce:e1:00:7a:be:a4:e6:06:ca: 63:aa:7a:b6:7a:73:cb:7d:3b:07:07:ac:7d:3e:b9:6d:b2:36: 80:05:3d:d3:44:00:8f:8b:6c:95:23:dd:eb:b8:09:fd:36:2c: 80:7e:78:03:98:fd:92:5e:43:99:58:10:33:92:39:98:15:ce: 5b:d8:ed:5b:65:5d:25:a7:a1:8d:ee:7e:87:af:ea:60:96:61: cb:56:9e:c2:c0:a6:37:0d:bf:08:ca:56:4e:51:c6:78:8a:7a: bd:51:18:4a:8c:ef:8f:0b:d3:78:5e:27:1c:62:82:a7:fa:ca: b5:26:63:19:0b:57:ce:0b:4b:89:07:58:cc:7f:93:44:dd:4b: 0a:28:17:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUxMTAyMTg1MjA1WhcNMjUxMTA5MTg1MjA1WjAYMRYwFAYD VQQDEw02OTA3YTg1NS05ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a60dnvLeRrvV1BFRd1Yb247SN+llzvmySfRWDtL4bdM5mQWfpi5Z81l8k61 H61N7Rl1xwGaEZas+S3P4qnRAEzBMu4uRTcuhug4jVqjdKMi32CigzAdmUSlFUnp l3s068tssAKUpvZPIP1H8gJpWuwvDK9FDdtphTBUPfKcRMSSFI0hQlh1AkZ0nab0 mQKqrx+3FN2U3SN3Lh5Su/8fOjSaJzuAS328GS7TvyaonIvYvNFTwPmSeBsaMw0B WobI1kep6DifMIIcu2DfhNgK66zA00rortJI4eY/YuXqqnCVeIG5XU9cJnU6MQ6H FYpteApsjJtj057mJAEw9DU1kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNccER/y HBBLapjCkN1EmlFaoR1uMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2XW104lIEsYosEKyfY7EQRdnepX+nOW4cqlw6wcM7TcgH5VS1Oruw /0iez5eZLrT1WaoQx6h3Prqryqw/Qqqvz5wbv49oUTBqZZWKKKFBVFNEbxwA071K OQWu9fBpAaCQqdTH9dLumUsvAzhqYvL57MyiG4zO4QB6vqTmBspjqnq2enPLfTsH B6x9PrltsjaABT3TRACPi2yVI93ruAn9NiyAfngDmP2SXkOZWBAzkjmYFc5b2O1b ZV0lp6GN7n6Hr+pglmHLVp7CwKY3Db8IylZOUcZ4inq9URhKjO+PC9N4XiccYoKn +sq1JmMZC1fOC0uJB1jMf5NE3UsKKBdd -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:56 2025 by rpki-client