$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft File: erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json) Hash identifier: mVQ1zZLfunJhBV/pCPfM27F6myAmIsGf9KKpb007f9g= Subject key identifier: C1:16:2A:F6:41:2C:33:E7:99:74:D3:AA:9B:4D:7D:ED:51:44:18:32 Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC Certificate issuer: /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft Manifest number: 7A Signing time: Wed 05 Nov 2025 07:01:00 +0000 Manifest this update: Wed 05 Nov 2025 07:01:00 +0000 Manifest next update: Wed 12 Nov 2025 07:01:00 +0000 Files and hashes: 1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: KxFiAnd+QJkNLlnKcCr1G8+PB/Tm+3cK/ogGb6oik00=) 2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC Validity Not Before: Nov 5 07:01:00 2025 GMT Not After : Nov 12 07:01:00 2025 GMT Subject: CN=690af62c-0b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:3e:44:37:27:99:ee:80:a3:ca:30:13:ab: d1:8f:3b:c1:51:bd:76:80:02:4a:d6:ab:48:05:a2: 19:9b:cc:f9:0d:e6:75:c8:77:2a:dd:b5:4a:96:5e: ea:68:02:00:8f:53:b1:7c:5d:8a:74:88:2b:d1:ff: 5e:12:01:cc:c0:86:49:9e:a1:69:60:c6:e8:34:6f: c9:0c:1d:86:ba:27:ea:9a:a6:1f:80:86:c0:f9:f5: fa:e2:0e:f2:b4:92:7f:be:3d:1e:62:34:4d:1e:2a: 92:3a:56:6d:4b:b9:28:9b:0b:ce:4d:aa:ad:a0:3d: ce:f4:b8:97:b2:78:72:9f:be:43:bf:e5:b2:1c:bc: 04:85:ab:de:92:82:b5:0c:90:54:04:70:fe:f7:14: cf:73:99:06:16:66:41:d8:1c:df:a7:32:d3:8a:01: d6:4f:5e:e4:ef:7b:e7:b3:81:3f:67:14:da:94:0b: 2b:7b:d8:97:3b:d2:c0:02:90:2c:02:bf:1d:fd:ee: 28:51:14:c6:a6:8f:51:f9:81:08:35:3c:d0:57:0f: a0:07:7a:24:61:67:24:f0:32:10:99:08:7f:3c:8b: 15:b4:b2:d8:8f:ec:0d:36:d4:23:27:f0:d3:6d:22: 1d:de:f6:6e:97:bc:c1:8d:45:3e:5f:ef:58:03:e1: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:2A:F6:41:2C:33:E7:99:74:D3:AA:9B:4D:7D:ED:51:44:18:32 X509v3 Authority Key Identifier: keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:2a:11:3c:3b:7f:9a:df:62:3c:12:28:61:79:9e:c6:12:27: 2c:99:30:08:b1:17:03:68:cf:2d:99:c5:7c:b3:49:5b:91:10: 4c:1b:f1:c2:91:6d:a9:33:05:e8:e2:77:1f:2a:af:84:e6:51: f7:ed:e7:75:d5:6a:80:6a:f1:23:e2:15:64:bb:77:7b:f8:0b: 4c:bb:35:8e:06:76:13:b5:f5:3d:dc:aa:4b:fd:f6:4e:9e:b8: 59:b3:93:e4:ba:09:af:17:d9:cb:cc:60:b4:c2:a0:c0:99:f6: 1a:63:5d:b9:09:7f:6a:c7:08:55:b1:74:67:2f:7b:80:15:ab: 41:54:16:c9:c5:93:87:8f:65:a2:33:84:07:11:76:61:08:30: ca:4e:5c:b6:14:89:63:86:5b:c9:4c:63:6d:f3:ee:4b:bc:d5: ea:b2:04:36:66:eb:36:65:c5:66:3f:df:3f:0c:2d:73:5f:d5: eb:d9:a1:0d:c5:75:78:27:ed:b6:17:52:27:24:e9:91:0d:1a: 1a:d3:c1:a5:b3:01:c0:00:0e:7e:34:c5:4d:d8:19:ea:c0:10: 82:52:a5:a8:b8:41:f2:52:59:33:0d:c3:5c:0e:39:b8:f2:ba: b0:fd:f8:f5:65:8c:44:54:30:b6:5b:b4:3e:ee:35:7e:55:23: d8:34:1a:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzI0NDExMC8GA1UEBRMoN0FCQkEwQUQ5RUM4RUQ2NTVFRkM3OTk1N0QwMzE1RUFG Nzg1RkFFQzAeFw0yNTExMDUwNzAxMDBaFw0yNTExMTIwNzAxMDBaMBgxFjAUBgNV BAMTDTY5MGFmNjJjLTBiMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8mz5ENyeZ7oCjyjATq9GPO8FRvXaAAkrWq0gFohmbzPkN5nXIdyrdtUqWXupo AgCPU7F8XYp0iCvR/14SAczAhkmeoWlgxug0b8kMHYa6J+qaph+AhsD59friDvK0 kn++PR5iNE0eKpI6Vm1LuSibC85Nqq2gPc70uJeyeHKfvkO/5bIcvASFq96SgrUM kFQEcP73FM9zmQYWZkHYHN+nMtOKAdZPXuTve+ezgT9nFNqUCyt72Jc70sACkCwC vx397ihRFMamj1H5gQg1PNBXD6AHeiRhZyTwMhCZCH88ixW0stiP7A021CMn8NNt Ih3e9m6XvMGNRT5f71gD4cA3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwRYq9kEs M+eZdNOqm0197VFEGDIwHwYDVR0jBBgwFoAUerugrZ7I7WVe/HmVfQMV6veF+uww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MjQ0L0YyRjEyM0Y4MDND MzExRjA4OEY0NkQxRUM0RjlBRTAyL2VydWdyWjdJN1dWZV9IbVZmUU1WNnZlRi11 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXJ1Z3JaN0k3V1ZlX0htVmZRTVY2dmVGLXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MjQ0L0YyRjEyM0Y4MDNDMzExRjA4OEY0NkQxRUM0RjlBRTAyL2VydWdyWjdJN1dW ZV9IbVZmUU1WNnZlRi11dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIIqETw7f5rfYjwSKGF5nsYSJyyZMAixFwNozy2ZxXyzSVuREEwb8cKR bakzBejidx8qr4TmUfft53XVaoBq8SPiFWS7d3v4C0y7NY4GdhO19T3cqkv99k6e uFmzk+S6Ca8X2cvMYLTCoMCZ9hpjXbkJf2rHCFWxdGcve4AVq0FUFsnFk4ePZaIz hAcRdmEIMMpOXLYUiWOGW8lMY23z7ku81eqyBDZm6zZlxWY/3z8MLXNf1evZoQ3F dXgn7bYXUick6ZENGhrTwaWzAcAADn40xU3YGerAEIJSpai4QfJSWTMNw1wOObjy urD9+PVljERUMLZbtD7uNX5VI9g0GlM= -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:08 2025 by rpki-client