$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: 8gTC6paWTxw+c0q79VEa8MtRkZfEXowCrFiyJ8HjgVc= Subject key identifier: F3:4A:48:09:48:C1:07:90:63:26:65:7D:AE:17:E8:B2:6E:7B:DD:B1 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A12 Signing time: Tue 04 Nov 2025 20:02:07 +0000 Manifest this update: Tue 04 Nov 2025 20:02:06 +0000 Manifest next update: Tue 11 Nov 2025 20:02:06 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: p0KUDx/6LMgQ6gvM0lSLwDWNl2v6rW+AgIzYJqCJ5pI=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Nov 4 20:02:06 2025 GMT Not After : Nov 11 20:02:06 2025 GMT Subject: CN=690a5bbf-06e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:d4:47:83:ac:7f:a2:5b:ce:d2:50:ba:05: f4:d9:d0:cc:49:8e:70:20:f1:78:7d:1f:48:ab:da: d5:5e:93:cf:46:d1:fc:61:4f:c8:89:5d:ab:ee:72: 30:3a:4b:d0:80:e1:81:f1:33:06:77:63:70:27:b3: 14:f3:b5:d3:24:f4:49:a4:51:35:76:ed:7b:47:e1: 01:0f:41:86:3b:e2:69:54:71:5f:86:4f:b3:4b:99: 60:04:b5:df:9a:a1:3a:a8:1e:cd:79:ee:4c:a8:a0: b1:c9:71:04:74:04:bf:d4:1e:47:72:4a:e6:ed:c4: fd:03:5a:89:19:48:69:17:13:a1:02:9c:df:a4:e1: 23:10:cd:51:7d:dd:34:d8:98:a4:21:f4:4e:30:7d: 6b:f1:c5:c4:b1:cf:81:ee:8b:b4:8f:0f:37:bd:79: aa:c0:35:04:ba:23:a9:1a:1b:f6:ce:47:80:7a:ef: 14:03:bb:6a:cd:58:02:d5:56:31:78:88:7f:b3:72: e2:c4:9b:f2:42:41:df:4b:b8:0d:fc:da:ef:b7:5b: 3c:2e:bc:ad:2c:8b:ad:cb:0c:4b:15:38:a2:14:d7: fa:0e:a8:e3:5a:8f:7d:ce:1f:f2:f5:cb:2e:37:23: 6d:78:e1:1d:e7:81:ef:52:17:a8:e7:1e:f5:b8:d6: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4A:48:09:48:C1:07:90:63:26:65:7D:AE:17:E8:B2:6E:7B:DD:B1 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:ae:2c:eb:1b:0e:5a:30:6f:7b:af:7e:42:63:a0:54:e0: 36:e0:80:a4:b5:54:b8:a4:c8:c0:ba:f6:7e:37:b4:64:6e:81: 49:8c:72:5b:85:fb:79:c9:14:a6:9c:f5:4b:61:67:1d:ad:04: ca:26:6d:00:e6:f7:1e:75:fb:5b:40:49:be:fd:08:01:55:fd: 5e:18:fa:c8:68:e2:db:63:10:3f:96:75:dd:99:5b:fa:f7:ae: 43:14:54:de:6f:98:18:ab:a0:34:52:bc:d2:24:c5:5a:0c:78: e4:c6:07:2c:bc:64:7e:c9:f0:22:a5:07:e7:78:b1:92:82:87: 2d:2f:6d:95:c8:bc:3a:8f:67:09:bf:69:83:83:c1:02:05:9d: e4:a1:2a:7a:47:e2:5f:1e:00:d7:c7:24:46:cc:65:9f:25:c5: 4e:05:bf:5e:0d:e9:ac:d3:6c:ea:72:a0:63:54:17:53:79:df: 2f:87:3a:2b:87:71:2f:03:51:0d:8c:44:4d:d8:03:ba:b8:2e: c3:e2:72:6d:b0:b3:27:93:16:e4:6b:b6:e7:bc:b3:dd:f0:c4: 13:a8:cb:7d:92:d6:b6:e8:67:cc:3b:e9:2f:0e:5f:f4:df:3b: d3:4a:96:63:67:a5:2d:73:53:a9:ef:77:78:7c:74:03:35:2b: 99:b9:00:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUxMTA0MjAwMjA2WhcNMjUxMTExMjAwMjA2WjAYMRYwFAYD VQQDEw02OTBhNWJiZi0wNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9/UR4Osf6JbztJQugX02dDMSY5wIPF4fR9Iq9rVXpPPRtH8YU/IiV2r7nIw OkvQgOGB8TMGd2NwJ7MU87XTJPRJpFE1du17R+EBD0GGO+JpVHFfhk+zS5lgBLXf mqE6qB7Nee5MqKCxyXEEdAS/1B5Hckrm7cT9A1qJGUhpFxOhApzfpOEjEM1Rfd00 2JikIfROMH1r8cXEsc+B7ou0jw83vXmqwDUEuiOpGhv2zkeAeu8UA7tqzVgC1VYx eIh/s3LixJvyQkHfS7gN/Nrvt1s8LrytLIutywxLFTiiFNf6DqjjWo99zh/y9csu NyNteOEd54HvUheo5x71uNb1XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNKSAlI wQeQYyZlfa4X6LJue92xMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWlq4s6xsOWjBve69+QmOgVOA24ICktVS4pMjAuvZ+N7RkboFJjHJb hft5yRSmnPVLYWcdrQTKJm0A5vcedftbQEm+/QgBVf1eGPrIaOLbYxA/lnXdmVv6 965DFFTeb5gYq6A0UrzSJMVaDHjkxgcsvGR+yfAipQfneLGSgoctL22VyLw6j2cJ v2mDg8ECBZ3koSp6R+JfHgDXxyRGzGWfJcVOBb9eDems02zqcqBjVBdTed8vhzor h3EvA1ENjERN2AO6uC7D4nJtsLMnkxbka7bnvLPd8MQTqMt9kta26GfMO+kvDl/0 3zvTSpZjZ6Utc1Op73d4fHQDNSuZuQB/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:49 2025 by rpki-client