$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: edjMoQNGubfyz4BwGtRQt03afVx6pzhz+cymcmEqn0s= Subject key identifier: 45:ED:99:FA:67:72:71:54:4D:32:02:1A:14:BB:CC:8D:39:DA:D1:8C Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 0207 Signing time: Wed 05 Nov 2025 02:30:40 +0000 Manifest this update: Wed 05 Nov 2025 02:30:40 +0000 Manifest next update: Wed 12 Nov 2025 02:30:40 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: M56MGTLjQmr5G9u/Q+y000O7r1uCL8OHkrOkVEzpSNg=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Nov 5 02:30:40 2025 GMT Not After : Nov 12 02:30:40 2025 GMT Subject: CN=690ab6d0-9d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:85:ae:7b:ee:c2:7a:3d:a0:5a:af:1a:ce:e4: 62:9e:11:8a:a8:32:9a:5e:12:6d:15:95:9e:aa:4b: 15:90:eb:15:cd:c2:ff:f1:96:f4:24:28:b3:83:99: af:65:3a:98:d8:cb:25:1a:2a:f8:63:54:98:4a:18: 92:46:ca:a9:75:18:9f:1a:e9:3f:c4:51:41:d7:b6: 23:ec:22:34:25:15:05:6b:fc:c7:fa:4c:fd:61:c8: e4:bb:4a:a7:c8:9a:e7:da:b0:02:5b:cf:d6:f4:92: 59:1e:28:83:2c:7a:8e:2d:ba:da:89:e6:e2:b7:e9: 44:d4:84:71:2a:38:09:62:4d:92:e5:5b:11:0b:91: 80:db:c4:f6:ca:30:e8:9f:a3:66:05:bc:cb:98:98: 66:43:2c:e9:4e:28:45:31:e5:c4:c4:fb:a4:ac:08: 57:45:70:e6:0d:f2:91:df:74:07:70:3b:62:ef:f9: 35:51:2b:4e:62:28:30:02:43:5f:0b:e7:85:a9:af: 25:79:57:e8:c9:49:d3:a6:de:d4:98:04:4a:2f:f3: 97:72:c9:17:b0:9b:28:b1:8d:26:46:6e:26:87:38: 55:31:25:36:d2:5b:fb:d3:5a:8a:10:af:6d:e1:d1: 3d:03:92:c6:83:0f:a5:a3:f2:6f:10:8d:ae:c7:7f: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:99:FA:67:72:71:54:4D:32:02:1A:14:BB:CC:8D:39:DA:D1:8C X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2c:9a:0d:4c:d0:7a:e6:42:d8:8c:62:e9:6f:1d:bf:84:8b: 80:26:ba:49:03:36:a9:8e:e5:42:69:44:22:87:40:c6:94:dc: 11:bc:f3:54:26:2f:4f:b5:8a:9c:bf:b9:12:51:3b:86:5e:b1: be:7d:52:46:5f:8e:59:e1:ca:6f:52:8c:eb:e9:63:f3:94:02: 10:7a:c4:82:c8:72:d8:2e:a0:3c:a9:c9:61:da:bd:ec:4d:c1: 8c:20:13:2a:63:f6:39:f4:25:19:48:82:dc:8f:6f:99:40:39: 43:06:ff:31:64:d2:78:83:a5:8c:9b:a0:50:5c:7e:87:06:08: f4:91:ec:e0:73:0a:84:db:f4:55:c4:8c:0a:d9:be:1e:c9:c5: 6c:5d:03:d5:59:ad:ca:b0:12:20:9a:3d:e8:9c:15:96:d6:a7: 24:6d:ad:39:73:8c:e9:5d:01:81:8a:1b:57:76:62:c7:76:ea: 89:05:d4:7c:ef:04:27:46:23:40:bb:db:88:45:da:16:d5:52: 0d:6a:50:fd:93:2b:42:85:2c:4a:da:75:e6:b9:14:9f:7a:65: 19:05:83:5b:9d:98:c1:9c:48:38:66:e6:f4:7d:1b:48:11:63: fd:a8:77:22:69:e6:e1:54:bf:05:37:9d:6f:8e:be:1d:c8:7f: 57:50:dd:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUxMTA1MDIzMDQwWhcNMjUxMTEyMDIzMDQwWjAYMRYwFAYD VQQDEw02OTBhYjZkMC05ZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9IWue+7Cej2gWq8azuRinhGKqDKaXhJtFZWeqksVkOsVzcL/8Zb0JCizg5mv ZTqY2MslGir4Y1SYShiSRsqpdRifGuk/xFFB17Yj7CI0JRUFa/zH+kz9Ycjku0qn yJrn2rACW8/W9JJZHiiDLHqOLbraiebit+lE1IRxKjgJYk2S5VsRC5GA28T2yjDo n6NmBbzLmJhmQyzpTihFMeXExPukrAhXRXDmDfKR33QHcDti7/k1UStOYigwAkNf C+eFqa8leVfoyUnTpt7UmARKL/OXcskXsJsosY0mRm4mhzhVMSU20lv701qKEK9t 4dE9A5LGgw+lo/JvEI2ux38HywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXtmfpn cnFUTTICGhS7zI052tGMMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7LJoNTNB65kLYjGLpbx2/hIuAJrpJAzapjuVCaUQih0DGlNwRvPNU Ji9PtYqcv7kSUTuGXrG+fVJGX45Z4cpvUozr6WPzlAIQesSCyHLYLqA8qclh2r3s TcGMIBMqY/Y59CUZSILcj2+ZQDlDBv8xZNJ4g6WMm6BQXH6HBgj0kezgcwqE2/RV xIwK2b4eycVsXQPVWa3KsBIgmj3onBWW1qckba05c4zpXQGBihtXdmLHduqJBdR8 7wQnRiNAu9uIRdoW1VINalD9kytChSxK2nXmuRSfemUZBYNbnZjBnEg4Zub0fRtI EWP9qHciaebhVL8FN51vjr4dyH9XUN0l -----END CERTIFICATE-----Generated at Wed Nov 5 21:40:18 2025 by rpki-client