$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft File: C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json) Hash identifier: aqF6UfYwHRtGLAJmtkDaFMedoEFdyMwIrYb68ylB5N0= Subject key identifier: D1:99:6A:B7:22:87:03:51:E9:25:75:26:1B:AF:9A:4D:E1:A4:64:8B Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F Certificate issuer: /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft Manifest number: 0589 Signing time: Tue 04 Nov 2025 23:18:40 +0000 Manifest this update: Tue 04 Nov 2025 23:18:40 +0000 Manifest next update: Tue 11 Nov 2025 23:18:40 +0000 Files and hashes: 1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: Cky/T+QDPTY0vONlVoJggEuYGCtZBijxOhy0MR2mmag=) 2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: gIqEUytD692JqpeV91M06iKGJH68vEW3s4YtICieKE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Validity Not Before: Nov 4 23:18:40 2025 GMT Not After : Nov 11 23:18:40 2025 GMT Subject: CN=690a89d0-3174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:6e:cc:5d:b8:85:1b:ae:94:53:84:c5:ee: 4b:2a:ff:df:b6:cb:1f:66:e6:14:02:0d:bb:ef:e7: 3f:31:2a:28:73:bd:f3:8f:70:51:96:74:6a:b8:52: 84:8b:cf:8e:6f:60:b2:1a:f0:dc:c8:55:2d:72:04: f9:9a:cc:90:d2:fe:35:98:33:81:81:49:46:d3:11: ea:bc:96:c5:77:5e:4a:93:f7:51:be:d6:ae:78:0d: f5:9b:1d:d6:e5:04:de:da:2f:c2:5a:de:8f:43:5a: e5:e2:2b:8f:ed:55:f5:81:05:45:a1:de:bc:58:44: 38:05:61:f8:1f:69:46:6c:af:86:4f:7c:5b:aa:11: 72:c3:c5:39:8b:6b:89:c5:2f:08:e7:f1:bb:7b:7e: 78:19:8f:2a:25:22:c7:cb:53:53:9f:ca:a1:05:b9: 93:0e:24:0e:cf:9d:bf:91:bb:22:be:ff:3d:ac:b8: d0:bf:36:11:d8:df:a4:d7:38:18:6e:92:28:06:65: a2:ab:31:3d:cc:a5:70:a2:76:62:0d:c4:2a:d1:91: 38:11:2b:de:5a:0f:aa:41:d6:d9:2c:98:6e:aa:be: 94:36:df:ab:1e:c5:6b:40:83:bb:f5:f8:85:35:df: 9a:4f:50:ed:ba:ba:69:04:0c:72:62:15:f3:2c:90: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:6A:B7:22:87:03:51:E9:25:75:26:1B:AF:9A:4D:E1:A4:64:8B X509v3 Authority Key Identifier: keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:39:4d:59:2a:9e:8e:21:06:5e:a4:6f:3c:5e:6b:d2:fa:c6: a4:c2:d0:88:e2:cd:5b:2d:21:4f:31:26:5d:89:00:53:01:9f: 25:e2:3b:fd:64:51:ea:c3:3f:73:21:e6:aa:1f:46:50:fd:24: ad:d7:68:32:ff:fc:13:f1:8c:5a:08:c9:c1:d7:d4:00:17:31: fb:22:63:53:50:d4:2c:1a:00:c5:1c:a2:5c:cb:3a:f5:93:65: 09:75:c5:fb:67:c5:b3:d5:a8:36:ab:f4:39:e4:60:73:74:b2: 1c:aa:ff:63:63:6e:fe:78:69:6a:28:56:2f:ee:74:9c:0c:40: 8a:56:52:49:90:7d:29:e6:e0:47:cc:79:43:34:8d:dc:dc:24: b9:3c:3f:15:12:b1:42:51:6d:b1:7b:ba:0d:79:42:3d:7e:a9: 1a:1e:a2:02:f9:78:cd:fa:63:52:e6:a6:b1:f0:bc:57:68:93: 70:6e:ba:6f:45:e2:f3:0f:d1:83:25:f8:3a:bb:64:71:cd:a6: 4d:ec:c0:83:a8:ab:32:4b:bc:d1:11:51:f6:9c:a5:6f:ac:2e: 12:b7:f1:7f:e5:6e:0f:db:6b:2c:8e:8f:7c:9c:b7:7d:fc:6b: e6:37:e0:19:0f:4b:4c:3e:91:1b:ab:e0:34:3a:b6:e8:a5:20: 65:91:45:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB RUFBOTA4NkYwHhcNMjUxMTA0MjMxODQwWhcNMjUxMTExMjMxODQwWjAYMRYwFAYD VQQDEw02OTBhODlkMC0zMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDFuzF24hRuulFOExe5LKv/ftssfZuYUAg277+c/MSooc73zj3BRlnRquFKE i8+Ob2CyGvDcyFUtcgT5msyQ0v41mDOBgUlG0xHqvJbFd15Kk/dRvtaueA31mx3W 5QTe2i/CWt6PQ1rl4iuP7VX1gQVFod68WEQ4BWH4H2lGbK+GT3xbqhFyw8U5i2uJ xS8I5/G7e354GY8qJSLHy1NTn8qhBbmTDiQOz52/kbsivv89rLjQvzYR2N+k1zgY bpIoBmWiqzE9zKVwonZiDcQq0ZE4ESveWg+qQdbZLJhuqr6UNt+rHsVrQIO79fiF Nd+aT1DturppBAxyYhXzLJBshwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGZarci hwNR6SV1Jhuvmk3hpGSLMB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3 NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My80QkFGQjExOEY3NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFy ekdORWJyT21TUi11cXBDRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIOU1ZKp6OIQZepG88XmvS+sakwtCI4s1bLSFPMSZdiQBTAZ8l4jv9 ZFHqwz9zIeaqH0ZQ/SSt12gy//wT8YxaCMnB19QAFzH7ImNTUNQsGgDFHKJcyzr1 k2UJdcX7Z8Wz1ag2q/Q55GBzdLIcqv9jY27+eGlqKFYv7nScDECKVlJJkH0p5uBH zHlDNI3c3CS5PD8VErFCUW2xe7oNeUI9fqkaHqIC+XjN+mNS5qax8LxXaJNwbrpv ReLzD9GDJfg6u2RxzaZN7MCDqKsyS7zREVH2nKVvrC4St/F/5W4P22ssjo98nLd9 /GvmN+AZD0tMPpEbq+A0OrbopSBlkUWC -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:41 2025 by rpki-client