$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: LHTbZc0XK8TwzIq8mRrcThyljvw4Fk9+a/JHeglZxDE= Subject key identifier: E7:99:30:78:20:D1:D4:C7:FC:28:C1:84:51:97:E8:2E:5D:F7:AA:1E Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 02F9 Signing time: Mon 03 Nov 2025 03:06:25 +0000 Manifest this update: Mon 03 Nov 2025 03:06:25 +0000 Manifest next update: Mon 10 Nov 2025 03:06:25 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: qQ0jprsgoW9wfHLkFXoiuoUpe45GcYGs4Sf413BbuGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Nov 3 03:06:25 2025 GMT Not After : Nov 10 03:06:25 2025 GMT Subject: CN=69081c31-154c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:1e:15:c7:46:7d:b0:c7:a6:8b:fc:94:12: 22:f4:09:c2:f4:74:ad:d6:d7:08:0e:fd:a9:fb:8a: 86:fe:7c:46:d0:1d:62:f2:4d:77:b2:b8:7f:29:3b: e6:b5:52:82:19:d2:17:1a:87:f6:6e:0a:66:0f:ae: 16:e9:5d:69:ff:06:28:0a:74:c3:f7:d9:19:de:84: a9:bc:71:f4:97:9b:01:09:61:5a:1d:9d:da:f8:3a: 45:7a:5a:67:4c:54:7a:5e:8b:b8:5a:66:56:dc:1e: 35:51:30:ae:f9:2b:0a:03:ed:92:35:d1:ae:dc:19: c5:2d:e3:7e:6d:db:3b:bd:23:f4:1f:60:9f:88:10: 38:97:2a:c7:fd:9f:0d:2c:7f:a6:9a:90:4f:56:e3: b9:43:94:a1:54:35:4e:5b:e8:ed:11:e7:d8:ef:86: 01:0a:55:95:14:30:44:59:de:9a:9d:77:72:6c:f4: 8d:94:c0:1d:29:9b:a2:6e:35:9e:c0:08:96:8c:03: 4c:90:1a:4a:1b:8f:35:1f:19:b6:5f:f2:88:52:1a: 41:76:80:3b:0b:1f:37:1c:b4:92:13:29:03:14:d5: af:15:f3:90:ff:9e:1a:7a:87:85:d7:ca:ac:29:be: 63:e4:ae:12:45:47:ba:95:f3:29:88:0a:40:7d:40: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:30:78:20:D1:D4:C7:FC:28:C1:84:51:97:E8:2E:5D:F7:AA:1E X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:43:da:92:6a:50:2b:fe:75:02:ae:0e:a7:30:32:7f:66:03: 23:d5:8a:6c:9b:32:04:a9:cf:bb:db:88:a1:a9:be:72:cf:24: 69:62:36:d9:b3:1d:9c:8d:02:74:7e:05:a6:a2:8a:21:d2:c9: 51:c7:04:d2:7c:73:47:a9:97:4a:9e:fb:f2:d1:79:a2:8e:38: 71:7c:fc:49:bd:af:15:35:4f:a6:02:42:8c:ca:44:cb:4a:4a: 53:4f:fd:5d:54:73:40:f8:d3:e3:18:3e:05:b0:96:9f:27:cc: a1:36:c6:7e:0a:78:ac:19:c1:ed:55:12:ff:18:e7:90:a8:72: dd:3a:db:e8:98:30:cb:43:9b:5c:5f:0e:4f:03:6c:10:b0:4d: 74:1c:f9:9e:b1:ad:42:54:8c:3d:84:4a:43:e6:79:95:02:d8: d8:9e:64:3a:2a:21:ea:f8:59:8b:19:6c:d2:2f:26:c0:5f:45: ee:2f:dd:e6:ae:6d:fe:82:ae:c0:11:e9:7f:36:d8:2b:82:76: 41:34:23:56:ab:24:37:e3:79:57:a2:c2:b3:87:8f:8b:90:bb: 1d:8a:e4:fc:f8:9c:8f:54:c5:27:dd:53:d5:0d:2b:c8:3c:d5: b7:12:23:88:1e:17:9b:ee:70:b4:de:7e:00:6a:51:eb:d8:26: 5c:81:63:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUxMTAzMDMwNjI1WhcNMjUxMTEwMDMwNjI1WjAYMRYwFAYD VQQDEw02OTA4MWMzMS0xNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tIeFcdGfbDHpov8lBIi9AnC9HSt1tcIDv2p+4qG/nxG0B1i8k13srh/KTvm tVKCGdIXGof2bgpmD64W6V1p/wYoCnTD99kZ3oSpvHH0l5sBCWFaHZ3a+DpFelpn TFR6Xou4WmZW3B41UTCu+SsKA+2SNdGu3BnFLeN+bds7vSP0H2CfiBA4lyrH/Z8N LH+mmpBPVuO5Q5ShVDVOW+jtEefY74YBClWVFDBEWd6anXdybPSNlMAdKZuibjWe wAiWjANMkBpKG481Hxm2X/KIUhpBdoA7Cx83HLSSEykDFNWvFfOQ/54aeoeF18qs Kb5j5K4SRUe6lfMpiApAfUCVMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeZMHgg 0dTH/CjBhFGX6C5d96oeMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJQ9qSalAr/nUCrg6nMDJ/ZgMj1YpsmzIEqc+724ihqb5yzyRpYjbZ sx2cjQJ0fgWmoooh0slRxwTSfHNHqZdKnvvy0XmijjhxfPxJva8VNU+mAkKMykTL SkpTT/1dVHNA+NPjGD4FsJafJ8yhNsZ+CnisGcHtVRL/GOeQqHLdOtvomDDLQ5tc Xw5PA2wQsE10HPmesa1CVIw9hEpD5nmVAtjYnmQ6KiHq+FmLGWzSLybAX0XuL93m rm3+gq7AEel/NtgrgnZBNCNWqyQ343lXosKzh4+LkLsdiuT8+JyPVMUn3VPVDSvI PNW3EiOIHheb7nC03n4AalHr2CZcgWPk -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:52 2025 by rpki-client