$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: 7o47nXxv7nc94dfDRa3HpRbbZVVvPVElvmjSbVZJlNU= Subject key identifier: FA:74:C7:11:3E:BF:23:07:C9:ED:5C:6A:C4:B3:E0:AB:75:7D:F8:A9 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0A9D Signing time: Tue 04 Nov 2025 19:39:42 +0000 Manifest this update: Tue 04 Nov 2025 19:39:41 +0000 Manifest next update: Tue 11 Nov 2025 19:39:41 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: omrtVGBCBNw607ButEIbMJqL7NZ9jQ9n8YtaIq59vQY=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Nov 4 19:39:41 2025 GMT Not After : Nov 11 19:39:41 2025 GMT Subject: CN=690a567e-dd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:fe:52:06:51:e3:78:08:7d:60:83:52:16: b6:bb:30:e3:98:f9:c4:72:5d:98:8a:e2:fc:ad:0b: 84:87:fc:3b:7c:92:a6:b1:21:4b:b9:02:89:e6:50: 04:6b:97:9b:a7:0a:e5:1a:e6:95:af:7c:7b:c5:b3: f4:2f:15:06:e9:73:b2:87:04:0a:32:86:7a:aa:62: ee:44:c7:dd:57:4a:7a:60:7d:50:8d:91:c1:94:a1: 70:89:59:4b:4f:ec:73:1e:c9:f4:46:47:72:ae:f3: 56:24:d7:8f:43:82:b1:37:6d:7c:52:1e:63:d2:68: 1c:f4:f7:e7:a7:30:62:e9:9d:e6:3a:13:00:3b:db: c3:0d:cb:64:de:6d:f5:e8:38:bd:ef:77:cb:a3:fb: 30:22:cf:2e:62:b4:c9:3a:52:b8:f9:37:c4:f4:84: 6f:8c:ba:af:fb:37:46:17:2a:5f:d7:2f:d8:8b:c4: 39:27:9c:a3:2a:27:f0:f0:96:75:eb:ec:19:87:f2: 00:41:81:cd:21:14:b2:4e:d8:b7:cb:ef:25:c5:95: a7:cd:c0:c5:93:2b:40:36:44:4f:64:79:14:ee:83: 72:7f:79:e5:2f:c6:b3:20:ad:cf:c5:c3:09:b0:e5: 8b:e4:69:84:fd:1a:4a:fe:b5:20:af:a7:bc:24:7e: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:74:C7:11:3E:BF:23:07:C9:ED:5C:6A:C4:B3:E0:AB:75:7D:F8:A9 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:5f:2a:c4:59:d3:02:85:b8:85:ad:fb:b9:f7:c8:7a:16:95: 57:db:05:bc:a3:91:f9:39:ef:28:fa:6c:76:44:4a:48:e7:d5: 36:5c:33:70:40:16:a8:34:c7:a6:ff:c0:19:a7:aa:3f:9c:fc: 60:47:e0:16:14:ab:75:1f:11:fa:64:04:65:34:78:63:fc:59: 1a:6d:78:fb:b9:52:4d:d3:b0:ef:13:2b:c5:8c:5d:c4:1a:8d: 52:58:8f:cd:3c:1b:3d:06:c2:fb:52:f8:17:75:3b:47:6c:a0: 20:d9:a8:99:24:aa:a9:2e:da:f5:06:be:63:29:26:04:48:29: 91:af:46:ba:7d:1b:f3:26:42:0c:75:e3:11:71:57:df:33:c2: cf:a2:c7:06:12:df:ef:f8:ca:19:59:3a:e8:14:bb:26:ec:68: f9:b6:6d:73:28:b1:45:b3:a8:34:37:38:39:a8:ae:7d:0d:2b: 48:f1:cb:c3:ae:dc:cb:27:02:9b:f6:f7:f1:f6:cb:0f:d6:0b: 3f:e7:7e:19:6e:4b:78:50:3f:cb:e3:11:0a:9d:2b:30:38:ff: 48:2a:9c:b8:dc:4a:4b:46:7f:0c:1b:e0:4b:c7:04:cc:6e:86: 86:c4:b0:dc:93:50:3b:2d:4d:c6:cd:ba:7f:78:33:a1:b1:3c: 58:1d:35:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUxMTA0MTkzOTQxWhcNMjUxMTExMTkzOTQxWjAYMRYwFAYD VQQDEw02OTBhNTY3ZS1kZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDb+UgZR43gIfWCDUha2uzDjmPnEcl2YiuL8rQuEh/w7fJKmsSFLuQKJ5lAE a5ebpwrlGuaVr3x7xbP0LxUG6XOyhwQKMoZ6qmLuRMfdV0p6YH1QjZHBlKFwiVlL T+xzHsn0RkdyrvNWJNePQ4KxN218Uh5j0mgc9PfnpzBi6Z3mOhMAO9vDDctk3m31 6Di973fLo/swIs8uYrTJOlK4+TfE9IRvjLqv+zdGFypf1y/Yi8Q5J5yjKifw8JZ1 6+wZh/IAQYHNIRSyTti3y+8lxZWnzcDFkytANkRPZHkU7oNyf3nlL8azIK3PxcMJ sOWL5GmE/RpK/rUgr6e8JH6OqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPp0xxE+ vyMHye1casSz4Kt1ffipMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/XyrEWdMChbiFrfu598h6FpVX2wW8o5H5Oe8o+mx2REpI59U2XDNw QBaoNMem/8AZp6o/nPxgR+AWFKt1HxH6ZARlNHhj/FkabXj7uVJN07DvEyvFjF3E Go1SWI/NPBs9BsL7UvgXdTtHbKAg2aiZJKqpLtr1Br5jKSYESCmRr0a6fRvzJkIM deMRcVffM8LPoscGEt/v+MoZWTroFLsm7Gj5tm1zKLFFs6g0Nzg5qK59DStI8cvD rtzLJwKb9vfx9ssP1gs/534Zbkt4UD/L4xEKnSswOP9IKpy43EpLRn8MG+BLxwTM boaGxLDck1A7LU3Gzbp/eDOhsTxYHTV/ -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:47 2025 by rpki-client