$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: gPviQg0PRPrLngIhgEXQAhl+5msYw8Ew8STx2nBmQ4c= Subject key identifier: 65:00:95:05:71:DF:DB:51:1E:1E:88:F6:0B:25:99:77:E3:D5:DA:A5 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 03C9 Signing time: Mon 03 Nov 2025 00:42:44 +0000 Manifest this update: Mon 03 Nov 2025 00:42:43 +0000 Manifest next update: Mon 10 Nov 2025 00:42:43 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: QhaXdPxWixt/0UKuUV9Hr5ApvcY0TtRCTj4OspMT4VE=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Nov 3 00:42:43 2025 GMT Not After : Nov 10 00:42:43 2025 GMT Subject: CN=6907fa83-c54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7f:79:71:61:99:36:69:7f:1a:ea:75:4c:f1: a6:17:39:a2:e5:ec:b7:14:16:76:49:d9:b1:27:ee: a4:2d:34:d6:57:81:5d:a8:c5:bc:6c:f6:4e:1f:04: 54:17:9b:24:4d:96:04:46:03:85:b6:26:b8:bb:25: 97:0b:a0:fe:a8:d2:ea:68:e7:86:62:3b:ef:7c:da: 5f:02:d4:77:40:1f:33:e7:5d:12:6c:f2:56:a1:a2: 4c:4e:bb:8e:01:7e:dc:ed:25:bf:25:63:8f:3c:89: a5:73:90:43:39:90:07:b6:00:1d:e7:26:8d:29:c6: c2:5b:79:ff:b4:06:70:ea:f7:b9:88:df:04:ad:28: 0e:b4:2f:82:5f:c6:7e:ba:c6:1a:df:77:0e:29:2e: 98:f9:37:cd:ac:23:2a:ac:87:1b:12:26:39:55:12: 05:5a:dc:b2:4e:39:f6:d4:a2:fe:f9:2c:6a:b4:73: 38:d7:72:f9:84:35:1f:31:1e:10:e1:ea:ec:08:8f: 88:f2:f5:23:5b:a9:5e:12:3c:d6:09:78:62:ac:c8: 00:4e:26:1a:18:01:5a:3f:ad:58:06:c4:48:67:5b: 88:01:47:b8:f5:8e:0e:81:5d:e8:55:b2:44:84:d6: 3e:fa:d3:fe:14:3f:45:21:66:ef:03:c2:b1:be:31: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:00:95:05:71:DF:DB:51:1E:1E:88:F6:0B:25:99:77:E3:D5:DA:A5 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:98:81:51:3d:8a:e0:a1:3f:62:08:c8:3a:99:bf:b4:58:12: d0:82:73:cf:61:2e:fc:43:e2:93:ce:e8:92:6f:e5:2c:7e:43: 20:1b:ec:f7:43:ce:0a:62:40:c6:d0:05:f0:12:20:ce:a3:7e: 0e:72:ce:44:b2:33:06:7e:26:92:56:4f:4e:f9:d9:16:76:ac: 4c:7d:2f:e0:11:d0:4b:ee:b8:cb:9f:d0:ef:36:55:28:8c:5f: e1:82:a4:66:ac:08:01:5a:90:8d:68:b3:3a:2d:16:c3:e2:d4: 2b:87:ad:de:10:76:83:81:1f:95:fa:a0:66:81:7c:18:08:93: 51:45:ea:39:8e:16:ed:bb:d4:0f:91:a2:89:f6:d0:12:c2:be: a7:79:55:82:a9:c0:f5:6a:fe:49:7e:8c:58:f9:a2:00:73:00: f5:87:a0:ac:f0:5f:b5:cb:52:9e:31:68:84:18:62:e2:34:b8: 21:57:f0:5b:0f:55:b1:b0:af:7b:6e:f8:29:d3:65:18:bc:49: 29:2b:5e:9f:91:b3:89:7c:ec:34:8b:cf:92:cb:71:93:cb:d2: 3a:ba:1e:c4:f3:7a:99:0c:c5:82:c5:ba:f1:b1:71:10:e0:19: 68:ae:41:17:a8:c5:2b:18:1c:62:5c:34:aa:5f:9b:5c:00:e0: 2c:d6:b8:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUxMTAzMDA0MjQzWhcNMjUxMTEwMDA0MjQzWjAYMRYwFAYD VQQDEw02OTA3ZmE4My1jNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H95cWGZNml/Gup1TPGmFzmi5ey3FBZ2SdmxJ+6kLTTWV4FdqMW8bPZOHwRU F5skTZYERgOFtia4uyWXC6D+qNLqaOeGYjvvfNpfAtR3QB8z510SbPJWoaJMTruO AX7c7SW/JWOPPImlc5BDOZAHtgAd5yaNKcbCW3n/tAZw6ve5iN8ErSgOtC+CX8Z+ usYa33cOKS6Y+TfNrCMqrIcbEiY5VRIFWtyyTjn21KL++SxqtHM413L5hDUfMR4Q 4ersCI+I8vUjW6leEjzWCXhirMgATiYaGAFaP61YBsRIZ1uIAUe49Y4OgV3oVbJE hNY++tP+FD9FIWbvA8KxvjEOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUAlQVx 39tRHh6I9gslmXfj1dqlMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5mIFRPYrgoT9iCMg6mb+0WBLQgnPPYS78Q+KTzuiSb+UsfkMgG+z3 Q84KYkDG0AXwEiDOo34Ocs5EsjMGfiaSVk9O+dkWdqxMfS/gEdBL7rjLn9DvNlUo jF/hgqRmrAgBWpCNaLM6LRbD4tQrh63eEHaDgR+V+qBmgXwYCJNRReo5jhbtu9QP kaKJ9tASwr6neVWCqcD1av5JfoxY+aIAcwD1h6Cs8F+1y1KeMWiEGGLiNLghV/Bb D1WxsK97bvgp02UYvEkpK16fkbOJfOw0i8+Sy3GTy9I6uh7E83qZDMWCxbrxsXEQ 4BlorkEXqMUrGBxiXDSqX5tcAOAs1rgJ -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:13 2025 by rpki-client