$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: JQIznojR3pGBhzgZ9jQuTUkU+hN2gSgMdGQybx56RQg= Subject key identifier: 23:5F:E7:D9:C1:05:0D:27:68:DD:5D:CA:E8:6E:89:CC:99:16:23:E9 Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 0626 Signing time: Sun 02 Nov 2025 22:46:32 +0000 Manifest this update: Sun 02 Nov 2025 22:46:31 +0000 Manifest next update: Sun 09 Nov 2025 22:46:31 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: yb5WkoQipqK9q6WCnox+j9bLz276SZpgj+TpJRSp18M=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: sP79wAGbbrsAMI5IpKgqsFFoZmUGm0NqHRGgmh1aLzQ=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: 0B8CEdwj7To0b9OkFucnpnuOoYqshX93UqB7JYje0u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Nov 2 22:46:31 2025 GMT Not After : Nov 9 22:46:31 2025 GMT Subject: CN=6907df47-a10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:b5:5e:41:1e:a0:e2:30:fe:49:74:38:a5: 20:64:d0:32:76:4f:39:14:26:39:0d:03:a4:09:8c: c4:5a:71:be:e8:b9:0f:a7:c3:28:05:f6:f6:56:5f: dd:36:93:8f:33:28:7e:7f:a1:a4:31:23:85:3a:d7: bf:00:b7:8c:26:60:4c:d5:45:fb:16:e1:6e:00:58: 30:b1:b2:a2:db:06:f9:cc:1c:5a:d4:98:78:5a:47: 9e:0e:b0:e2:20:be:ef:3d:e0:d5:30:d3:84:06:ae: 9f:9c:a2:60:5c:ec:3f:ac:13:f1:e2:42:4f:87:f4: 4e:be:7a:a9:d0:19:79:9e:d9:5b:e1:81:33:29:74: ca:70:49:06:65:6b:db:bf:f8:72:74:a8:19:0a:1f: e5:a1:59:fa:a0:64:fb:ae:27:d7:bb:c6:be:02:08: 55:6b:21:e8:3c:2f:2d:67:81:7e:b8:eb:17:11:bf: ae:21:1d:6e:18:c4:87:5e:e3:97:b1:4f:b3:3d:26: 62:2d:a9:af:06:f8:8e:54:a9:ad:66:f0:ee:ac:99: 48:b3:6e:d3:23:58:ad:b2:60:e5:79:09:c4:81:14: 1a:6e:d3:8c:02:61:ad:b9:6c:d5:99:30:0b:ee:f5: 1e:b6:14:6f:0c:31:b1:23:0f:03:e1:d5:8c:42:c2: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5F:E7:D9:C1:05:0D:27:68:DD:5D:CA:E8:6E:89:CC:99:16:23:E9 X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:12:95:f2:2b:94:25:04:2e:e5:49:8e:a5:a4:ba:55:65:16: 13:6b:85:f4:e1:00:82:96:dd:ac:5d:7a:d9:4a:ed:38:ac:06: b3:b4:41:42:d3:16:81:36:3e:c5:73:1d:b1:e5:00:dc:8a:e7: e4:2a:09:44:2e:f1:12:d0:93:35:0a:d1:03:4e:1d:87:f5:21: 78:fe:77:97:01:8e:e9:a6:87:cd:a6:b3:1a:87:a4:8a:a1:46: ee:eb:1b:27:14:e0:ef:ee:59:da:57:1d:f7:b6:7a:85:c6:c4: 7d:67:74:cb:8e:ce:6e:e0:28:f7:2d:a3:90:02:4b:e5:f2:2e: 8c:a8:8a:39:83:1b:8b:f0:06:18:10:86:c0:ce:42:e9:38:bd: 35:8b:58:8a:19:12:1d:67:a2:0d:90:2f:dc:64:4b:9a:fe:5a: 15:e5:31:c2:59:e9:d8:30:60:d1:cf:e9:96:03:73:fd:23:a3: b6:89:1e:a4:fe:e8:9f:30:57:e5:72:a6:8f:1c:f6:c3:c4:11: a2:b8:a9:21:c8:82:a7:5e:02:9b:56:49:aa:27:51:75:20:78: 81:0d:f1:a9:8f:01:4d:4e:9f:79:ca:fe:e8:94:70:94:7d:d0: e1:78:65:a7:46:68:f3:03:1a:84:30:15:0d:a8:66:33:db:bb: 8b:4a:33:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUxMTAyMjI0NjMxWhcNMjUxMTA5MjI0NjMxWjAYMRYwFAYD VQQDEw02OTA3ZGY0Ny1hMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBm1XkEeoOIw/kl0OKUgZNAydk85FCY5DQOkCYzEWnG+6LkPp8MoBfb2Vl/d NpOPMyh+f6GkMSOFOte/ALeMJmBM1UX7FuFuAFgwsbKi2wb5zBxa1Jh4WkeeDrDi IL7vPeDVMNOEBq6fnKJgXOw/rBPx4kJPh/ROvnqp0Bl5ntlb4YEzKXTKcEkGZWvb v/hydKgZCh/loVn6oGT7rifXu8a+AghVayHoPC8tZ4F+uOsXEb+uIR1uGMSHXuOX sU+zPSZiLamvBviOVKmtZvDurJlIs27TI1itsmDleQnEgRQabtOMAmGtuWzVmTAL 7vUethRvDDGxIw8D4dWMQsLFawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNf59nB BQ0naN1dyuhuicyZFiPpMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxEpXyK5QlBC7lSY6lpLpVZRYTa4X04QCClt2sXXrZSu04rAaztEFC 0xaBNj7Fcx2x5QDciufkKglELvES0JM1CtEDTh2H9SF4/neXAY7ppofNprMah6SK oUbu6xsnFODv7lnaVx33tnqFxsR9Z3TLjs5u4Cj3LaOQAkvl8i6MqIo5gxuL8AYY EIbAzkLpOL01i1iKGRIdZ6INkC/cZEua/loV5THCWenYMGDRz+mWA3P9I6O2iR6k /uifMFflcqaPHPbDxBGiuKkhyIKnXgKbVkmqJ1F1IHiBDfGpjwFNTp95yv7olHCU fdDheGWnRmjzAxqEMBUNqGYz27uLSjMD -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:34 2025 by rpki-client