$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: dQ5Y3iN0igWQt/Q/sKNV+SupuPOH9Tl66ubgdqB/2R8= Subject key identifier: 92:84:96:0A:FF:31:A6:A5:38:00:A0:3F:7C:F9:1D:8D:9D:1D:AC:82 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: A5 Signing time: Tue 04 Nov 2025 14:29:26 +0000 Manifest this update: Tue 04 Nov 2025 14:29:25 +0000 Manifest next update: Tue 11 Nov 2025 14:29:25 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: czVAthyXUsmMdKTwhRY6hcCctllyEGdb4DUhZ890lwY=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: RGDwrnHLpwoltlbpIvS3zEQYJokw21O0scCTRV6lF5o=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: ASozTCqLLf2W3v4/3oV7UOvO2kqTmGagQ7fGwleiFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Nov 4 14:29:25 2025 GMT Not After : Nov 11 14:29:25 2025 GMT Subject: CN=690a0dc6-3bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:02:55:b0:cc:47:0c:47:a9:f0:a5:5f:32: 0e:15:1e:f6:30:31:04:af:7a:bc:62:47:38:1e:67: 69:19:56:d4:7f:e2:0c:18:c9:b6:ce:5c:ef:12:47: 0c:43:cb:aa:39:30:72:1b:2e:be:9b:91:2b:5d:48: db:86:62:8b:c9:15:42:58:75:64:38:f4:2c:47:89: 12:7e:5a:4a:f9:38:d4:1f:5d:27:04:f3:5d:18:1c: b1:c2:12:e0:65:ed:22:53:96:a9:47:ba:48:f7:9e: 2f:a3:04:01:92:72:db:44:47:fa:c9:c5:a3:76:bc: a1:2d:d6:11:6e:bd:b0:80:b0:e9:c7:fd:2e:75:31: 7b:f5:71:36:fb:fc:52:2a:a3:39:41:19:93:9d:26: 43:94:8e:97:8b:15:cf:c1:e1:65:a2:17:e6:c2:d3: 65:33:29:5c:a5:2d:53:78:f8:27:b6:8e:ad:61:63: 33:74:b7:19:99:ec:fc:63:e7:b5:f4:fe:5d:8f:cf: 48:4e:62:10:b0:05:15:0a:2e:e1:49:9c:9e:99:b2: 98:dd:a7:d6:31:0a:e2:05:05:72:d7:a3:e4:d5:63: a2:e2:b6:b5:a5:da:62:65:19:4c:45:56:b1:81:09: 66:83:56:cf:3a:1a:e0:21:83:df:34:15:c9:57:5b: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:84:96:0A:FF:31:A6:A5:38:00:A0:3F:7C:F9:1D:8D:9D:1D:AC:82 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:71:ec:8c:7a:16:a2:8e:3a:eb:7a:13:87:d4:b0:4b:e6:fd: 4f:57:75:a6:71:58:78:9e:ef:50:41:ea:30:e4:07:01:c3:55: d1:98:6e:41:42:76:6d:44:61:69:29:ef:00:7a:65:7a:d9:b2: 75:d3:b6:b3:e5:ad:81:34:34:8e:b8:26:db:26:55:d6:4e:76: 7a:7f:d2:8e:70:16:53:be:9b:12:4c:aa:73:52:f1:52:81:1c: cf:f8:5b:04:f5:e8:e3:a1:6d:b0:6a:5c:94:70:47:88:76:47: ff:03:96:7d:fe:0f:45:73:19:34:83:f5:77:1f:7a:a1:a3:13: 37:87:b5:8b:ff:71:05:d6:30:79:e3:6c:31:e6:97:71:ca:df: 7e:87:ed:8e:ad:b9:7d:65:ee:87:cf:08:5d:3b:db:4b:14:27: 94:49:9f:e7:2c:19:8a:ea:d2:cc:dc:83:8b:80:6b:d5:7c:de: d1:44:0d:9e:43:8b:31:9d:91:7d:6f:ae:b6:d9:79:29:34:e4: ad:d4:26:20:00:1c:c9:f1:a5:83:e3:c5:a6:4c:7c:f8:cb:ec: 17:59:ae:8f:24:9b:b4:f8:9c:b9:ac:5c:27:05:83:39:62:63: e7:7b:09:d2:86:f6:8d:d5:64:60:18:c3:c7:1b:68:d0:fe:e4: 04:88:aa:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjUxMTA0MTQyOTI1WhcNMjUxMTExMTQyOTI1WjAYMRYwFAYD VQQDEw02OTBhMGRjNi0zYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLACVbDMRwxHqfClXzIOFR72MDEEr3q8Ykc4HmdpGVbUf+IMGMm2zlzvEkcM Q8uqOTByGy6+m5ErXUjbhmKLyRVCWHVkOPQsR4kSflpK+TjUH10nBPNdGByxwhLg Ze0iU5apR7pI954vowQBknLbREf6ycWjdryhLdYRbr2wgLDpx/0udTF79XE2+/xS KqM5QRmTnSZDlI6XixXPweFlohfmwtNlMylcpS1TePgnto6tYWMzdLcZmez8Y+e1 9P5dj89ITmIQsAUVCi7hSZyembKY3afWMQriBQVy16Pk1WOi4ra1pdpiZRlMRVax gQlmg1bPOhrgIYPfNBXJV1sMDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKElgr/ MaalOACgP3z5HY2dHayCMB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaceyMehaijjrrehOH1LBL5v1PV3WmcVh4nu9QQeow5AcBw1XRmG5B QnZtRGFpKe8AemV62bJ107az5a2BNDSOuCbbJlXWTnZ6f9KOcBZTvpsSTKpzUvFS gRzP+FsE9ejjoW2walyUcEeIdkf/A5Z9/g9Fcxk0g/V3H3qhoxM3h7WL/3EF1jB5 42wx5pdxyt9+h+2Orbl9Ze6HzwhdO9tLFCeUSZ/nLBmK6tLM3IOLgGvVfN7RRA2e Q4sxnZF9b6622XkpNOSt1CYgABzJ8aWD48WmTHz4y+wXWa6PJJu0+Jy5rFwnBYM5 YmPnewnShvaN1WRgGMPHG2jQ/uQEiKqQ -----END CERTIFICATE-----Generated at Tue Nov 4 19:10:56 2025 by rpki-client