$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: jLaPM1QOKC/gh2KUgFZeFO6goYfr+gyVOt6nWszhbxo= Subject key identifier: A3:38:7F:7D:53:9A:EA:C0:E3:B3:FF:6B:15:10:64:23:72:E4:04:EF Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 0132 Signing time: Wed 05 Nov 2025 04:42:57 +0000 Manifest this update: Wed 05 Nov 2025 04:42:56 +0000 Manifest next update: Wed 12 Nov 2025 04:42:56 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: OAbdNshzE60QNouqN/W6r+ADRgoagv4AaGk4OvpmVX8=) 2: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: PG1Zg9YWfOZJBdRe/N5qDFjYHzUKz1vx7yczTSRfIp8=) 3: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Nov 5 04:42:56 2025 GMT Not After : Nov 12 04:42:56 2025 GMT Subject: CN=690ad5d1-270a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:d6:7e:0f:33:3c:76:a3:a3:00:db:f7:7e: 38:ff:b0:51:89:1e:dc:09:0a:60:0e:a9:b1:6d:31: a5:39:4e:6a:08:ad:91:18:d8:1f:f0:37:bd:c4:fc: 94:3d:8a:09:b8:f7:11:87:b8:ad:a3:f3:90:0d:f6: 91:8c:c0:13:52:0e:9f:e7:3e:a4:d0:2c:e3:15:14: 83:c8:3a:66:56:95:d9:1e:bb:ee:45:bf:22:a4:7e: 6a:07:51:14:d2:35:a9:de:08:e7:fc:04:53:6f:37: c6:2a:87:d3:62:06:59:47:6a:60:3b:39:86:6e:6c: 8c:64:c8:dd:51:71:ea:e7:e6:17:d4:df:d6:df:33: 0d:ee:b9:1a:e4:24:07:b3:93:90:4b:d8:38:36:d8: 32:31:88:36:b4:26:4d:2d:2a:5c:65:31:3d:60:d2: bb:56:b6:15:d8:06:7b:b6:2c:b7:41:a6:9d:40:ba: 24:43:42:1e:50:9f:9c:ac:b3:3d:ce:ea:8c:2c:ac: 62:19:f2:c1:ff:45:f5:4c:5e:8b:2f:e9:38:9d:da: f1:21:b2:61:20:2c:a7:23:4f:3d:d2:98:50:3a:94: c8:de:7f:66:c3:8e:98:e3:bf:bd:69:44:01:6c:b6: 88:16:f9:bd:fa:a9:17:01:a6:cd:4a:22:37:0b:e4: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:38:7F:7D:53:9A:EA:C0:E3:B3:FF:6B:15:10:64:23:72:E4:04:EF X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:95:a8:1f:af:7f:c9:3f:b4:00:d3:8a:12:4b:1a:38:9b:56: 1d:5b:17:aa:d9:ae:80:14:9c:f3:82:62:d0:db:52:30:9b:14: 1c:e9:ec:c9:48:ab:7d:13:bd:5a:dc:4d:d3:a9:8f:af:6e:a6: 60:e5:df:c7:56:57:44:15:6d:ae:13:69:a8:58:70:c3:4c:29: cd:bd:76:13:69:77:19:1e:1d:f0:3d:bf:f4:53:bf:87:b9:99: 1f:0d:01:1c:c3:2b:b5:c3:aa:fd:ab:7c:d5:4a:19:c9:cd:b0: b0:d0:71:fa:57:44:ab:a1:24:f2:05:ad:78:2f:06:0c:0b:32: 22:12:dd:b4:1a:7b:51:1e:51:04:6d:ba:04:5a:4b:c1:7f:98: f6:b8:da:57:95:43:d4:63:fe:c2:7e:0e:26:73:3b:57:4e:b2: b4:ee:f8:00:b5:92:ad:0f:a6:de:76:da:7a:1f:b5:de:56:8e: 37:e7:c0:be:8c:0e:37:2f:e1:06:08:63:2e:8e:f6:23:b0:54: 56:79:63:fe:16:f2:cd:4b:04:b6:4b:25:0f:3c:3f:7c:9a:25: c3:76:9e:ce:27:e2:e5:4e:b2:77:2e:5a:62:bc:93:20:dc:48: b6:6b:5d:0c:eb:62:81:b4:3a:60:2d:34:b5:54:ae:95:b3:9d: 24:92:de:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjUxMTA1MDQ0MjU2WhcNMjUxMTEyMDQ0MjU2WjAYMRYwFAYD VQQDEw02OTBhZDVkMS0yNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3jWfg8zPHajowDb9344/7BRiR7cCQpgDqmxbTGlOU5qCK2RGNgf8De9xPyU PYoJuPcRh7ito/OQDfaRjMATUg6f5z6k0CzjFRSDyDpmVpXZHrvuRb8ipH5qB1EU 0jWp3gjn/ARTbzfGKofTYgZZR2pgOzmGbmyMZMjdUXHq5+YX1N/W3zMN7rka5CQH s5OQS9g4NtgyMYg2tCZNLSpcZTE9YNK7VrYV2AZ7tiy3QaadQLokQ0IeUJ+crLM9 zuqMLKxiGfLB/0X1TF6LL+k4ndrxIbJhICynI0890phQOpTI3n9mw46Y47+9aUQB bLaIFvm9+qkXAabNSiI3C+TvzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKM4f31T murA47P/axUQZCNy5ATvMB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvlagfr3/JP7QA04oSSxo4m1YdWxeq2a6AFJzzgmLQ21IwmxQc6ezJ SKt9E71a3E3TqY+vbqZg5d/HVldEFW2uE2moWHDDTCnNvXYTaXcZHh3wPb/0U7+H uZkfDQEcwyu1w6r9q3zVShnJzbCw0HH6V0SroSTyBa14LwYMCzIiEt20GntRHlEE bboEWkvBf5j2uNpXlUPUY/7Cfg4mcztXTrK07vgAtZKtD6bedtp6H7XeVo4358C+ jA43L+EGCGMujvYjsFRWeWP+FvLNSwS2SyUPPD98miXDdp7OJ+LlTrJ3LlpivJMg 3Ei2a10M62KBtDpgLTS1VK6Vs50kkt6I -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:51 2025 by rpki-client