$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: YuTfV3nu+qOxhBwgpgTF5OW4bJJtmodaxvmAHE1jL94= Subject key identifier: 85:D6:8F:73:32:93:5F:F7:EB:EA:B3:F5:12:59:38:2E:2F:C4:F2:B3 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0876 Signing time: Sun 02 Nov 2025 20:34:16 +0000 Manifest this update: Sun 02 Nov 2025 20:34:15 +0000 Manifest next update: Sun 09 Nov 2025 20:34:15 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: ts/+zjcm354CMS5wvVWzS2Rv1Srcest5hqSZfGkZUS8=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: 9/6FBIuUpW3NyM8fzRBAE8GJH3DWuJevjPt7vt5pHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Nov 2 20:34:15 2025 GMT Not After : Nov 9 20:34:15 2025 GMT Subject: CN=6907c047-a121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:d1:52:80:62:f0:af:1f:7b:82:bc:2d:33: 78:15:2b:8c:93:72:42:65:83:4a:b2:37:40:cc:93: 10:1a:58:4d:5c:f2:1a:00:15:1b:5c:9a:83:17:6c: 9e:9b:af:ff:dd:25:c0:76:e6:26:16:6a:3d:0b:55: 28:bb:76:6c:34:c7:bc:f9:c2:08:69:e4:e8:3a:17: 24:48:5d:2b:68:f0:7e:c3:56:8b:75:e0:a7:f0:8c: 54:be:87:a9:7d:07:51:06:0d:63:4b:b9:6a:70:4f: 69:41:5c:2f:50:37:a5:7b:cf:1e:a5:d7:30:5c:d2: 59:d4:2b:02:3a:6f:61:18:7e:59:54:37:df:98:05: 29:cb:e6:cb:9d:7c:13:6b:97:da:e0:1d:34:a2:50: 62:d4:f5:69:61:d1:89:27:f7:fd:66:8e:2e:91:e9: 82:b1:92:53:54:28:9f:e6:62:37:e0:1a:f9:3a:af: 7f:50:6c:62:c0:bb:3b:14:e2:8a:3b:61:68:f2:58: e8:9a:5f:77:a4:6c:f2:74:e9:a7:9e:73:27:7e:a6: 2b:d2:7e:d6:b2:e0:5b:b5:d7:e2:2b:a6:72:4f:24: 7b:e9:4d:22:97:e4:36:c8:71:f0:07:f9:39:51:78: e4:b8:5d:20:0d:ea:b1:a4:64:f1:93:c8:c5:1a:a7: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:8F:73:32:93:5F:F7:EB:EA:B3:F5:12:59:38:2E:2F:C4:F2:B3 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d2:56:0f:1c:42:d7:7a:e9:0f:fb:3e:53:d9:3c:2e:a5:3c: 13:0a:1c:39:7e:b3:51:41:61:08:8d:7e:c3:f3:85:d6:cc:c5: 4c:62:c3:fe:28:3e:2e:83:a4:a6:ca:2b:d4:5e:2a:f9:8c:d2: 06:bc:5e:55:61:33:33:a0:03:db:c1:c3:14:78:ba:c3:b5:d7: f3:4f:f4:a2:c4:80:51:ab:da:a9:ed:61:d0:7c:72:77:df:fe: c2:8e:a7:39:b0:97:ef:f6:37:fb:d9:a1:6a:c0:02:b8:c2:64: e9:0e:e2:5f:39:32:78:e3:34:35:bc:5e:0b:b4:dd:fd:48:e8: e0:d8:05:9e:52:df:19:8d:7f:f6:40:2c:34:d7:42:0b:84:98: ed:9c:c7:60:6a:a8:3f:59:0c:a8:8e:84:2b:d0:e3:66:3d:46: b7:5e:33:5c:36:cc:62:40:48:69:54:f6:e1:3c:8b:7b:41:7e: 36:27:56:c3:a1:81:91:05:73:9e:5d:61:29:8a:81:0e:77:1c: b8:95:39:27:ba:6e:db:a3:26:0e:57:82:67:f6:8b:7a:96:12: 0e:20:41:e8:53:02:cb:85:b3:6e:9f:84:ee:ab:4e:bc:f3:ae: cf:17:c2:fd:94:96:7f:d6:c6:03:3c:65:cd:c7:8b:95:f7:8b: 15:a5:28:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjUxMTAyMjAzNDE1WhcNMjUxMTA5MjAzNDE1WjAYMRYwFAYD VQQDEw02OTA3YzA0Ny1hMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvbRUoBi8K8fe4K8LTN4FSuMk3JCZYNKsjdAzJMQGlhNXPIaABUbXJqDF2ye m6//3SXAduYmFmo9C1Uou3ZsNMe8+cIIaeToOhckSF0raPB+w1aLdeCn8IxUvoep fQdRBg1jS7lqcE9pQVwvUDele88epdcwXNJZ1CsCOm9hGH5ZVDffmAUpy+bLnXwT a5fa4B00olBi1PVpYdGJJ/f9Zo4ukemCsZJTVCif5mI34Br5Oq9/UGxiwLs7FOKK O2Fo8ljoml93pGzydOmnnnMnfqYr0n7WsuBbtdfiK6ZyTyR76U0il+Q2yHHwB/k5 UXjkuF0gDeqxpGTxk8jFGqdCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXWj3My k1/36+qz9RJZOC4vxPKzMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB60lYPHELXeukP+z5T2TwupTwTChw5frNRQWEIjX7D84XWzMVMYsP+ KD4ug6SmyivUXir5jNIGvF5VYTMzoAPbwcMUeLrDtdfzT/SixIBRq9qp7WHQfHJ3 3/7Cjqc5sJfv9jf72aFqwAK4wmTpDuJfOTJ44zQ1vF4LtN39SOjg2AWeUt8ZjX/2 QCw010ILhJjtnMdgaqg/WQyojoQr0ONmPUa3XjNcNsxiQEhpVPbhPIt7QX42J1bD oYGRBXOeXWEpioEOdxy4lTknum7boyYOV4Jn9ot6lhIOIEHoUwLLhbNun4Tuq068 867PF8L9lJZ/1sYDPGXNx4uV94sVpSgt -----END CERTIFICATE-----Generated at Tue Nov 4 20:33:07 2025 by rpki-client