$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: zqdLUTae72Yujgg0equ19GG+3t6FQMJdb0Rj+5mglYc= Subject key identifier: 11:99:10:7A:7A:D5:08:57:EB:24:74:79:6D:8A:54:EB:F1:3E:0D:EB Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 0211 Signing time: Mon 03 Nov 2025 02:16:52 +0000 Manifest this update: Mon 03 Nov 2025 02:16:51 +0000 Manifest next update: Mon 10 Nov 2025 02:16:51 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: qHEFTqX0ITOwTu2QVUrZudHFMnHiXSdK+PMLZUqoWqw=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Nov 3 02:16:51 2025 GMT Not After : Nov 10 02:16:51 2025 GMT Subject: CN=69081094-59da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:9f:73:ce:ba:b0:59:00:50:49:57:b8:46: 80:60:81:bd:83:79:dd:1e:64:77:5a:3e:3e:03:64: 5e:75:f8:ab:9d:3c:c3:c6:35:9b:5b:41:86:c2:e8: f4:f4:3a:d0:cc:59:0f:58:ed:8a:74:7d:ea:1d:36: 81:e2:38:1f:0b:05:fe:79:5e:37:9c:6d:59:6d:15: 0e:99:30:23:25:76:c6:66:1e:27:e2:09:01:d5:35: ea:bc:0c:9e:16:df:f8:c2:05:f3:7c:0c:a4:9c:44: 77:51:03:9d:83:e7:c8:33:b4:fb:fb:3a:0a:11:16: 9c:25:64:85:98:fd:94:c1:ad:8b:09:83:3c:79:38: 42:02:f4:fc:7a:dd:2a:26:4a:9b:49:58:73:9b:da: 28:19:50:4f:3d:ce:a4:a4:81:85:81:e1:d5:f8:ac: 45:a7:2a:8d:b7:5e:88:a0:4d:7f:e9:39:b2:da:4f: 1f:c6:1a:78:13:4b:51:f2:2e:db:b0:ae:12:43:38: f1:23:a6:b5:34:12:b4:98:ef:36:66:45:68:1f:d7: c9:c0:e9:75:17:2d:25:43:b1:f6:a1:b8:4d:65:66: 5f:44:cc:a4:1b:a9:fb:a5:c9:ce:a1:f8:7b:ad:71: 9a:d9:33:f8:eb:06:f1:2a:85:7f:93:fc:ed:98:e2: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:99:10:7A:7A:D5:08:57:EB:24:74:79:6D:8A:54:EB:F1:3E:0D:EB X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:2b:45:63:87:89:de:b3:23:b1:a5:f1:79:2a:93:07:19:ab: f5:c5:9b:7a:38:20:3a:4c:1a:a4:08:ea:81:cd:28:46:f7:59: 60:9f:14:33:bd:e1:4d:f2:65:ef:80:3d:42:db:ca:00:fc:c9: 8a:04:63:a5:b0:60:10:29:0f:c4:8f:6d:49:5a:e9:3f:63:d1: 63:7b:7e:8c:44:f6:13:27:0e:88:fb:a6:c1:31:0b:d5:7c:a8: ac:94:d8:bc:3f:da:58:88:03:e2:ed:20:76:8c:12:82:6e:94: 7a:48:6b:35:44:a2:5e:5f:0f:a0:67:30:c4:97:36:b3:a0:fa: c9:27:d5:43:c9:c1:92:f2:51:f2:60:cd:b8:6b:ff:c7:98:cf: e0:cb:8b:1a:63:48:0b:9a:87:c7:54:c2:69:6c:01:d7:59:23: 2c:93:6f:2a:e2:af:15:0c:f3:8f:16:ea:95:79:cc:23:e2:ce: 7c:80:a9:64:dc:b3:03:8a:f5:05:6d:12:f4:16:21:a3:23:19: ee:20:fe:e8:69:3b:a6:c4:fe:85:cb:f6:24:67:9b:64:d7:d4: 76:9f:6d:ca:f5:f9:1f:be:25:2a:c9:62:d1:c0:09:5c:14:46: ff:3b:1a:5c:6c:11:ba:42:83:21:8e:5c:39:b4:31:71:a1:8a: 3b:4a:9e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUxMTAzMDIxNjUxWhcNMjUxMTEwMDIxNjUxWjAYMRYwFAYD VQQDEw02OTA4MTA5NC01OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sOfc866sFkAUElXuEaAYIG9g3ndHmR3Wj4+A2RedfirnTzDxjWbW0GGwuj0 9DrQzFkPWO2KdH3qHTaB4jgfCwX+eV43nG1ZbRUOmTAjJXbGZh4n4gkB1TXqvAye Ft/4wgXzfAyknER3UQOdg+fIM7T7+zoKERacJWSFmP2Uwa2LCYM8eThCAvT8et0q JkqbSVhzm9ooGVBPPc6kpIGFgeHV+KxFpyqNt16IoE1/6Tmy2k8fxhp4E0tR8i7b sK4SQzjxI6a1NBK0mO82ZkVoH9fJwOl1Fy0lQ7H2obhNZWZfRMykG6n7pcnOofh7 rXGa2TP46wbxKoV/k/ztmOIvuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGZEHp6 1QhX6yR0eW2KVOvxPg3rMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzK0Vjh4nesyOxpfF5KpMHGav1xZt6OCA6TBqkCOqBzShG91lgnxQz veFN8mXvgD1C28oA/MmKBGOlsGAQKQ/Ej21JWuk/Y9Fje36MRPYTJw6I+6bBMQvV fKislNi8P9pYiAPi7SB2jBKCbpR6SGs1RKJeXw+gZzDElzazoPrJJ9VDycGS8lHy YM24a//HmM/gy4saY0gLmofHVMJpbAHXWSMsk28q4q8VDPOPFuqVecwj4s58gKlk 3LMDivUFbRL0FiGjIxnuIP7oaTumxP6Fy/YkZ5tk19R2n23K9fkfviUqyWLRwAlc FEb/OxpcbBG6QoMhjlw5tDFxoYo7Sp6O -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:53 2025 by rpki-client