$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: EpxUqnh69wbJOp4tmhesGoA3er3ZrG86cyErp2TZouI= Subject key identifier: 88:A9:75:B0:C8:CB:A0:26:E7:4B:14:9C:4E:B7:64:2E:28:21:C6:01 Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 07C5 Signing time: Sun 02 Nov 2025 21:40:41 +0000 Manifest this update: Sun 02 Nov 2025 21:40:40 +0000 Manifest next update: Sun 09 Nov 2025 21:40:40 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: m/2JYWBWtYm41E4rvMeMgDsO3PavnOQlzF39ez9KwZc=) 2: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: pDxe3UM6EMMRbdUo/T7lMp2JHS6kHDEjGKNwttRRiYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Nov 2 21:40:40 2025 GMT Not After : Nov 9 21:40:40 2025 GMT Subject: CN=6907cfd9-3215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:81:66:94:cb:2b:a7:50:ae:e8:78:8c:63: 10:47:cf:b2:e0:fc:b4:c4:aa:74:2f:6f:e9:a7:c9: 2d:21:56:8e:e5:d9:84:32:e0:84:a2:3e:70:4b:0d: cc:a8:67:49:0d:ef:d3:9f:b2:00:04:f2:d4:37:60: ad:ae:f6:ba:92:16:f4:45:57:20:3b:fb:fc:6e:7d: a4:e9:45:4f:db:12:08:9f:e1:51:f4:d3:de:15:14: 55:60:f6:73:4c:97:44:da:c4:43:9d:aa:42:6b:dc: b0:8b:2e:42:ef:3f:8e:43:e2:57:55:67:17:3e:12: a3:b1:21:d0:8e:00:ab:f7:b9:3a:5b:d8:25:61:29: 1a:80:3e:e9:ef:f6:2c:74:3a:84:d1:c2:a4:77:5f: 21:c3:68:d8:f5:fe:fb:87:31:f4:4b:a4:75:93:da: 10:19:a6:52:d0:f3:9a:0a:ac:01:3e:fa:92:59:2d: f8:83:04:20:ed:c0:86:66:3d:3a:48:44:50:e6:8f: ce:8e:d6:82:f1:ea:8d:02:51:87:71:da:ce:6d:3f: cf:6c:09:48:ed:37:f5:93:ac:53:f4:23:e2:7a:5c: 06:d1:93:0e:d0:68:67:2c:81:fa:d9:9c:5f:7c:35: d3:d2:60:bc:a6:ff:50:1e:17:e6:6d:2d:3a:51:af: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:75:B0:C8:CB:A0:26:E7:4B:14:9C:4E:B7:64:2E:28:21:C6:01 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3b:9b:58:9c:84:b0:52:5a:64:b8:d6:38:75:24:67:fe:2f: 69:ae:68:f4:64:10:98:2b:4d:30:82:28:15:18:7a:68:7a:d5: 40:c5:a0:e9:af:c2:c1:b1:47:fa:ca:4e:1d:e5:05:c5:01:7a: 74:08:8e:41:32:8b:2d:8e:58:f6:00:79:b8:aa:2f:07:ac:7a: 1b:19:7b:4e:bd:f8:a6:d7:ae:b1:50:c1:01:ee:47:ed:d7:6a: 73:d3:ea:ba:df:04:07:32:48:bc:0a:c4:07:ec:d2:9a:84:11: 27:0f:5a:bc:52:45:6e:a7:2d:97:b2:92:41:f7:33:09:44:d1: a5:42:55:6d:51:e0:c0:28:94:a3:84:e3:2c:c1:e9:c3:8a:ed: a8:c3:bd:61:0a:ae:d2:68:85:09:3b:cd:4b:ce:3a:f9:1d:95: e3:89:70:98:3a:42:fd:65:03:42:0d:cf:71:5d:92:39:5d:34: 69:f4:3a:df:44:b2:0a:c8:06:34:55:68:7d:d0:6c:5e:a6:62: ec:94:f9:cd:e9:46:5d:b1:3d:96:00:77:e7:0b:ab:a7:94:43: 4c:78:a5:ba:65:b5:dd:58:00:12:30:bd:8b:a3:57:23:4d:0f: d4:f0:9a:42:46:2a:fd:37:22:e8:ed:f4:39:56:2c:5a:15:57: df:5d:bc:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUxMTAyMjE0MDQwWhcNMjUxMTA5MjE0MDQwWjAYMRYwFAYD VQQDEw02OTA3Y2ZkOS0zMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LGBZpTLK6dQruh4jGMQR8+y4Py0xKp0L2/pp8ktIVaO5dmEMuCEoj5wSw3M qGdJDe/Tn7IABPLUN2Ctrva6khb0RVcgO/v8bn2k6UVP2xIIn+FR9NPeFRRVYPZz TJdE2sRDnapCa9ywiy5C7z+OQ+JXVWcXPhKjsSHQjgCr97k6W9glYSkagD7p7/Ys dDqE0cKkd18hw2jY9f77hzH0S6R1k9oQGaZS0POaCqwBPvqSWS34gwQg7cCGZj06 SERQ5o/OjtaC8eqNAlGHcdrObT/PbAlI7Tf1k6xT9CPielwG0ZMO0GhnLIH62Zxf fDXT0mC8pv9QHhfmbS06Ua+lSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIipdbDI y6Am50sUnE63ZC4oIcYBMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGO5tYnISwUlpkuNY4dSRn/i9prmj0ZBCYK00wgigVGHpoetVAxaDp r8LBsUf6yk4d5QXFAXp0CI5BMostjlj2AHm4qi8HrHobGXtOvfim166xUMEB7kft 12pz0+q63wQHMki8CsQH7NKahBEnD1q8UkVupy2XspJB9zMJRNGlQlVtUeDAKJSj hOMswenDiu2ow71hCq7SaIUJO81Lzjr5HZXjiXCYOkL9ZQNCDc9xXZI5XTRp9Drf RLIKyAY0VWh90GxepmLslPnN6UZdsT2WAHfnC6unlENMeKW6ZbXdWAASML2Lo1cj TQ/U8JpCRir9NyLo7fQ5VixaFVffXbyg -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:57 2025 by rpki-client