$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: SnSmHxFKYf4CihtsH/UnaVf2aWzQsqUmc9CxgA4Xn+s= Subject key identifier: E2:87:C4:80:24:36:15:B1:8E:8F:58:5A:37:0A:ED:AC:63:A5:82:64 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: 0114 Signing time: Mon 03 Nov 2025 04:43:22 +0000 Manifest this update: Mon 03 Nov 2025 04:43:22 +0000 Manifest next update: Mon 10 Nov 2025 04:43:21 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: gyK//qkr2zTfr2vGxStBeHLBhBMqhb1qijTks/uT8Js=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: 9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: Nov 3 04:43:22 2025 GMT Not After : Nov 10 04:43:21 2025 GMT Subject: CN=690832ea-39be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:c3:40:c4:e5:54:96:b3:79:0b:42:69:8e: 37:07:fa:66:6e:bf:51:80:d1:3a:51:8d:0e:52:71: fb:8b:65:1e:ba:9c:56:a6:2b:f6:00:11:bc:9f:12: 93:48:a3:ea:da:18:ad:57:37:2d:ac:8b:e6:49:95: 28:15:78:c7:cf:ba:54:9b:02:a9:e4:e7:cd:a7:4c: ad:f3:84:f6:87:d7:06:49:f2:12:57:e7:bd:8f:a8: 78:d9:14:87:fc:e5:b1:c0:7c:ad:cd:42:3c:56:cc: 55:ed:fa:04:f7:6a:89:3a:2e:8c:85:5e:da:b7:70: d7:94:62:56:d3:6c:bf:3a:2b:e6:a2:be:b1:1f:d0: be:c9:59:ab:f8:73:88:0f:2b:51:f7:96:f8:c9:60: 4c:f5:50:18:d0:c9:bb:57:02:ee:56:70:14:29:de: a7:5d:c8:03:5d:c5:dc:46:9b:ff:a6:b2:cf:6a:00: 86:d7:3d:4f:f1:3f:b4:53:aa:ec:49:7f:5f:39:cf: 53:ab:9c:a1:d3:04:7c:61:39:2a:dc:95:29:2f:67: 23:4b:1c:60:22:86:e6:8c:85:d8:93:44:cf:f7:7a: 09:88:37:7d:0a:59:06:d7:5b:7f:dd:88:f9:62:57: 5a:ea:71:57:c1:0d:fc:bb:8a:5d:be:62:89:09:3a: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:87:C4:80:24:36:15:B1:8E:8F:58:5A:37:0A:ED:AC:63:A5:82:64 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:48:53:f5:df:03:94:e0:92:05:6c:fd:8a:92:c5:ce:23:90: 94:6f:c4:22:6b:a2:18:31:23:01:ca:ab:dd:32:1d:dc:44:b0: 2e:58:c0:e8:79:ea:2c:28:ca:e0:12:75:d3:01:04:43:67:1d: 9a:56:57:98:e2:9b:42:87:6e:98:c6:8b:89:35:d0:af:cf:1f: 65:0b:ee:91:b1:eb:2d:a5:0e:01:dd:1c:cf:3f:04:52:92:07: bd:0b:f2:dc:96:4d:54:3e:11:20:11:90:e1:75:a0:97:59:f6: 46:e0:12:48:59:01:ad:20:cd:06:7b:b8:22:11:ba:c0:de:ae: a7:ca:f4:15:08:b0:96:fb:dc:67:58:f8:d6:01:a6:f9:8b:b0: 1c:88:05:2f:ec:0b:5b:83:60:71:7b:e1:b8:a9:55:38:fb:86: 73:a3:36:40:e8:5f:29:6a:cc:87:a6:dd:a4:ca:51:3b:29:76: 46:83:ec:de:5c:3b:2d:a2:d1:ef:0a:22:60:c4:13:89:72:25: a2:87:e0:4f:43:ad:1a:87:07:98:62:5e:c3:62:c1:98:3f:d0: 30:2d:f8:9a:eb:58:fe:11:54:b5:7d:11:e0:f0:bd:25:20:4a: ff:8c:47:9c:5d:23:96:9e:e8:c3:9d:e4:76:5b:5b:c7:e2:d6: 13:25:7c:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUxMTAzMDQ0MzIyWhcNMjUxMTEwMDQ0MzIxWjAYMRYwFAYD VQQDEw02OTA4MzJlYS0zOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmrDQMTlVJazeQtCaY43B/pmbr9RgNE6UY0OUnH7i2UeupxWpiv2ABG8nxKT SKPq2hitVzctrIvmSZUoFXjHz7pUmwKp5OfNp0yt84T2h9cGSfISV+e9j6h42RSH /OWxwHytzUI8VsxV7foE92qJOi6MhV7at3DXlGJW02y/Oivmor6xH9C+yVmr+HOI DytR95b4yWBM9VAY0Mm7VwLuVnAUKd6nXcgDXcXcRpv/prLPagCG1z1P8T+0U6rs SX9fOc9Tq5yh0wR8YTkq3JUpL2cjSxxgIobmjIXYk0TP93oJiDd9ClkG11t/3Yj5 Ylda6nFXwQ38u4pdvmKJCTozqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKHxIAk NhWxjo9YWjcK7axjpYJkMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+SFP13wOU4JIFbP2KksXOI5CUb8Qia6IYMSMByqvdMh3cRLAuWMDo eeosKMrgEnXTAQRDZx2aVleY4ptCh26YxouJNdCvzx9lC+6RsestpQ4B3RzPPwRS kge9C/Lclk1UPhEgEZDhdaCXWfZG4BJIWQGtIM0Ge7giEbrA3q6nyvQVCLCW+9xn WPjWAab5i7AciAUv7Atbg2Bxe+G4qVU4+4ZzozZA6F8pasyHpt2kylE7KXZGg+ze XDstotHvCiJgxBOJciWih+BPQ60ahweYYl7DYsGYP9AwLfia61j+EVS1fRHg8L0l IEr/jEecXSOWnujDneR2W1vH4tYTJXyD -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:51 2025 by rpki-client