$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: fNLlJHpxMY6B2VPX8GneyNXCnTajTYfJk8AwO1oD9eo= Subject key identifier: 0F:85:71:65:61:91:B1:C6:3D:D2:56:D3:3E:06:56:EB:B2:48:1D:2A Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0C24 Signing time: Tue 04 Nov 2025 18:49:19 +0000 Manifest this update: Tue 04 Nov 2025 18:49:18 +0000 Manifest next update: Tue 11 Nov 2025 18:49:18 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: 9u7lQNSq1+3x8W/moy0jGUfmnfIe4K8E8DVmHbL52u4=) 2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=) 4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: Nov 4 18:49:18 2025 GMT Not After : Nov 11 18:49:18 2025 GMT Subject: CN=690a4aaf-fd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:6b:43:75:0c:55:de:0b:fc:a5:17:63:8a: 43:37:f1:a0:af:54:4d:02:23:8b:48:4d:68:aa:56: 4d:d3:9c:10:8e:b7:02:63:2a:92:8c:21:3c:d9:e1: b9:92:a4:53:09:d3:5d:06:a0:09:57:60:d9:a8:af: d5:2f:fe:8a:35:e1:eb:59:cd:94:e5:1e:ea:9c:6d: 5a:fb:9b:90:53:4e:34:4d:cf:6e:88:c9:0f:e3:7c: e8:c7:ba:05:78:8f:a4:05:42:3c:cf:1d:c1:ce:d7: eb:c5:8d:d6:fe:b9:e5:fa:a2:87:6e:b8:28:31:d5: 85:f0:21:b2:92:33:36:68:5f:7c:09:a4:3f:50:15: 9d:68:44:ef:9b:98:05:ea:b9:d9:c4:ef:01:c8:e1: dd:99:a2:c0:bd:4e:9e:29:a3:c3:c9:58:0b:b9:37: 3e:97:88:f5:f9:47:26:b2:76:52:7e:d3:53:e2:cc: a2:b4:4e:8b:39:87:fe:30:f3:56:ed:c8:b0:e5:53: 7e:98:80:26:98:75:7e:1d:aa:9e:48:ad:dc:c1:0a: c7:41:ff:8e:e6:68:1b:6a:9b:d5:4f:f0:b2:ed:89: eb:88:16:d6:b6:59:14:6c:a9:ad:33:03:a6:f3:52: 04:55:cb:6a:56:52:80:0c:38:db:aa:fa:3e:a0:c9: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:85:71:65:61:91:B1:C6:3D:D2:56:D3:3E:06:56:EB:B2:48:1D:2A X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0c:fe:f5:66:30:a1:64:0f:a1:96:dc:b8:88:a7:20:fe:e2: 85:51:2b:42:18:9e:11:f2:04:77:65:b0:0c:42:f4:fc:a8:d8: 99:0c:27:77:50:63:87:36:05:ca:06:76:a5:0e:b6:98:7b:bb: 0c:b6:2e:f1:fa:83:73:78:e4:c7:27:a9:09:bd:d1:23:4a:d4: 2b:34:86:8d:b1:0d:1c:f5:e8:16:41:e5:1e:e9:1b:7e:46:bc: e8:57:cb:23:df:01:86:3c:37:7a:86:41:cb:f1:80:26:74:ed: 69:94:09:9f:65:30:9c:68:e3:f2:78:2b:7b:49:07:1c:c4:f8: 7a:07:94:a1:ad:05:93:8e:d1:4c:be:90:89:67:d8:be:a4:8a: 53:2d:83:88:75:23:3f:bb:b1:bd:69:d6:ec:e0:18:8a:ef:1d: b8:9c:f2:73:8e:87:a7:02:e4:11:44:10:67:fc:1e:b1:ba:55: 7d:91:44:ab:de:65:53:13:86:b5:bd:da:07:5e:d1:15:2f:7a: 56:90:77:70:e2:e0:71:1e:4d:f8:3f:35:78:b5:f8:a5:4a:39: 43:04:c3:63:40:1e:91:7a:f3:ba:38:f5:96:cd:2c:f6:03:f4: 70:c3:de:a5:4c:2f:d2:c6:89:37:60:c7:c9:89:b5:a9:d0:45: 0e:12:c3:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUxMTA0MTg0OTE4WhcNMjUxMTExMTg0OTE4WjAYMRYwFAYD VQQDEw02OTBhNGFhZi1mZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn9rQ3UMVd4L/KUXY4pDN/Ggr1RNAiOLSE1oqlZN05wQjrcCYyqSjCE82eG5 kqRTCdNdBqAJV2DZqK/VL/6KNeHrWc2U5R7qnG1a+5uQU040Tc9uiMkP43zox7oF eI+kBUI8zx3BztfrxY3W/rnl+qKHbrgoMdWF8CGykjM2aF98CaQ/UBWdaETvm5gF 6rnZxO8ByOHdmaLAvU6eKaPDyVgLuTc+l4j1+UcmsnZSftNT4syitE6LOYf+MPNW 7ciw5VN+mIAmmHV+HaqeSK3cwQrHQf+O5mgbapvVT/Cy7YnriBbWtlkUbKmtMwOm 81IEVctqVlKADDjbqvo+oMm9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+FcWVh kbHGPdJW0z4GVuuySB0qMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrDP71ZjChZA+hlty4iKcg/uKFUStCGJ4R8gR3ZbAMQvT8qNiZDCd3 UGOHNgXKBnalDraYe7sMti7x+oNzeOTHJ6kJvdEjStQrNIaNsQ0c9egWQeUe6Rt+ RrzoV8sj3wGGPDd6hkHL8YAmdO1plAmfZTCcaOPyeCt7SQccxPh6B5ShrQWTjtFM vpCJZ9i+pIpTLYOIdSM/u7G9adbs4BiK7x24nPJzjoenAuQRRBBn/B6xulV9kUSr 3mVTE4a1vdoHXtEVL3pWkHdw4uBxHk34PzV4tfilSjlDBMNjQB6RevO6OPWWzSz2 A/Rww96lTC/Sxok3YMfJibWp0EUOEsMy -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:06 2025 by rpki-client