$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: OdCXnLWc9WCNqwjAI1xWmoOlHYesOTL11MZvUQYx6m8= Subject key identifier: 89:46:49:64:7F:FB:AA:A1:A5:1E:22:8F:DB:AF:D4:C9:EC:29:C4:D0 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0E4B Signing time: Sun 02 Nov 2025 17:48:09 +0000 Manifest this update: Sun 02 Nov 2025 17:48:09 +0000 Manifest next update: Sun 09 Nov 2025 17:48:08 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: pF12i0Olel5jdmG+hiq8ElpvorLeMJNNt9J54AbRlXE=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3668 (0xe54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Nov 2 17:48:09 2025 GMT Not After : Nov 9 17:48:08 2025 GMT Subject: CN=69079959-1f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:20:48:54:b4:48:20:87:f4:27:15:d1:83: 87:53:7a:3b:c7:22:2a:fd:7e:6b:23:3d:1e:32:f1: 46:33:fb:c6:5b:59:38:1f:0d:be:6b:68:a4:19:13: ff:01:24:72:bb:af:1f:ea:1c:70:bb:f5:fa:8b:33: cd:fb:d6:9a:0b:79:96:76:b0:1d:3b:92:ad:28:45: c4:59:45:67:8e:23:ac:11:03:cd:0d:49:84:e8:5d: 51:a9:62:39:a9:5a:52:71:42:4f:1c:9c:f4:b9:24: ba:2c:62:2e:1e:d3:34:6e:33:e6:e4:80:fa:b6:87: 78:f0:75:99:b8:be:a6:2d:33:a0:b2:bd:a4:52:57: 75:dc:64:e5:6a:5e:40:71:13:84:52:a5:8e:04:40: 16:7b:31:13:14:74:72:ae:eb:c8:25:0c:39:9e:d9: 36:01:82:8a:2a:30:d4:dc:49:76:b6:dc:2b:2e:2a: 2a:42:40:ed:7e:45:0a:71:cb:33:52:c1:f0:f0:8d: 7f:49:65:77:8a:ca:cc:32:0e:01:93:fd:c7:92:d0: e7:7f:85:92:09:37:ca:f2:c8:b9:02:af:99:44:2f: a3:91:7d:59:2d:40:9c:5a:34:db:d5:99:90:18:06: 82:31:c8:38:11:24:7a:05:4d:87:30:07:a5:85:a3: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:46:49:64:7F:FB:AA:A1:A5:1E:22:8F:DB:AF:D4:C9:EC:29:C4:D0 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:31:c3:29:51:d3:43:e5:aa:ee:74:64:f3:64:37:02:a4:d2: e3:56:f4:ed:ff:03:0b:4c:9d:0a:26:83:41:ab:74:be:ae:a9: bc:14:ae:64:61:9c:70:04:94:a9:ab:aa:11:14:32:f4:9a:d3: 35:b0:3b:55:68:d3:d1:f9:69:b3:75:47:1f:87:08:d9:63:03: 6f:b5:31:e2:fe:55:e8:9c:15:aa:f3:58:87:0d:5f:5e:f8:ea: 60:24:b6:1e:cc:56:32:16:be:21:98:18:0d:9e:04:22:21:eb: 1e:d4:b2:c2:9e:9f:d6:a4:f7:28:93:d5:49:54:e0:50:0d:1c: e0:28:c0:94:cc:d0:6c:d3:5d:a6:1b:eb:f2:97:82:a1:54:14: a6:5a:6a:f3:d3:43:b1:bb:f3:18:14:d8:64:1a:27:af:98:36: b7:ad:94:e9:ae:37:d7:69:da:fc:59:7f:d3:8a:1e:57:08:77: 29:52:36:2f:14:8f:2a:f9:27:b2:a8:57:e4:e4:73:2f:cc:de: b6:6e:ef:2e:3f:a2:4b:df:b2:5f:55:07:62:fc:90:62:fb:c6: 08:4f:69:22:3d:53:43:86:6d:dc:80:7b:4d:75:4d:37:98:35: 27:e9:d3:b0:53:82:0e:24:c6:02:47:3c:45:37:b8:23:bd:81: 64:6c:73:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUxMTAyMTc0ODA5WhcNMjUxMTA5MTc0ODA4WjAYMRYwFAYD VQQDEw02OTA3OTk1OS0xZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumYgSFS0SCCH9CcV0YOHU3o7xyIq/X5rIz0eMvFGM/vGW1k4Hw2+a2ikGRP/ ASRyu68f6hxwu/X6izPN+9aaC3mWdrAdO5KtKEXEWUVnjiOsEQPNDUmE6F1RqWI5 qVpScUJPHJz0uSS6LGIuHtM0bjPm5ID6tod48HWZuL6mLTOgsr2kUld13GTlal5A cROEUqWOBEAWezETFHRyruvIJQw5ntk2AYKKKjDU3El2ttwrLioqQkDtfkUKccsz UsHw8I1/SWV3isrMMg4Bk/3HktDnf4WSCTfK8si5Aq+ZRC+jkX1ZLUCcWjTb1ZmQ GAaCMcg4ESR6BU2HMAelhaOwNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlGSWR/ +6qhpR4ij9uv1MnsKcTQMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJMcMpUdND5arudGTzZDcCpNLjVvTt/wMLTJ0KJoNBq3S+rqm8FK5k YZxwBJSpq6oRFDL0mtM1sDtVaNPR+WmzdUcfhwjZYwNvtTHi/lXonBWq81iHDV9e +OpgJLYezFYyFr4hmBgNngQiIese1LLCnp/WpPcok9VJVOBQDRzgKMCUzNBs012m G+vyl4KhVBSmWmrz00Oxu/MYFNhkGievmDa3rZTprjfXadr8WX/Tih5XCHcpUjYv FI8q+SeyqFfk5HMvzN62bu8uP6JL37JfVQdi/JBi+8YIT2kiPVNDhm3cgHtNdU03 mDUn6dOwU4IOJMYCRzxFN7gjvYFkbHMs -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:03 2025 by rpki-client