$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json) Hash identifier: ++o58Zc2SXvxjP9bBqdVx85JVenLNBWoOWIpAPh5lTQ= Subject key identifier: C4:9A:2D:FB:8D:39:D5:2A:51:28:AF:C8:BB:D2:98:52:8D:26:6E:88 Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft Manifest number: 022F Signing time: Wed 05 Nov 2025 02:01:30 +0000 Manifest this update: Wed 05 Nov 2025 02:01:29 +0000 Manifest next update: Wed 12 Nov 2025 02:01:29 +0000 Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: xnk7+FTADqmicFfrnKu3TjdfLeFHyio9EN2AKXVYbwg=) 2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 3spAcopzpeJWyW5mR0mGk38MM078PmmdgI27LOSYIH0=) 3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: aYUm1aVtuDy+5vYCksuuiVbwXJaF0tNfwYSEMBfgydU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Validity Not Before: Nov 5 02:01:29 2025 GMT Not After : Nov 12 02:01:29 2025 GMT Subject: CN=690aaffa-66ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:3e:c6:49:9f:3c:0e:3f:75:e3:9c:28:f9: 64:7d:67:c3:90:1c:7e:2d:1d:bd:10:5a:ec:aa:c7: 80:1a:fb:cd:2d:46:6f:a1:c3:d0:31:a1:fa:35:95: 03:ce:5f:03:fd:c8:b9:c9:c5:cf:e8:37:8f:8e:b5: 45:3f:14:be:6a:f9:1c:47:21:a8:af:c1:39:59:0f: 1d:a8:d8:e2:8f:57:69:d9:31:9d:ad:57:85:06:bd: 36:a5:dc:bc:05:81:8c:a8:2c:2a:e9:e8:1b:17:dc: 0a:30:7b:d9:c9:26:fb:63:f9:66:c2:a7:0f:86:9e: 92:00:e1:a9:5c:9d:51:9e:8c:13:7d:f9:ba:0f:34: 56:7e:12:f0:a4:b3:9c:09:ad:2f:a9:a0:63:7c:ff: dd:a5:e8:fa:bf:cd:a6:14:68:16:8e:77:cf:46:ea: 98:9e:ab:6f:0d:47:54:8d:a4:a1:a7:24:6c:ad:11: f2:c3:c9:08:46:af:8a:a2:71:32:5a:62:b9:71:f6: a8:56:d3:22:93:95:a1:60:30:73:a9:27:df:04:cd: 3a:98:76:f5:28:a1:a8:b1:35:66:71:2c:80:36:0d: 57:4c:d1:71:ca:5f:12:93:54:ef:70:ef:fa:32:d6: da:45:d3:d8:b4:ea:1c:0d:62:4c:0b:54:91:25:ed: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:2D:FB:8D:39:D5:2A:51:28:AF:C8:BB:D2:98:52:8D:26:6E:88 X509v3 Authority Key Identifier: keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4d:6e:47:a8:63:6a:42:97:02:d4:de:3e:7a:f4:9f:a8:e6: 68:06:44:23:a6:cd:6a:4a:a9:e3:16:24:3a:14:03:ee:dc:d5: cd:5e:f0:67:76:ae:bf:bf:87:5a:d6:8d:0e:9a:78:b3:7f:08: 7f:bb:40:66:0a:83:68:60:a1:c9:01:46:68:59:69:e3:de:09: 05:bb:5b:1f:f4:8e:64:1b:f7:a4:94:3d:b4:3d:bc:2b:14:55: 21:a0:52:05:9d:ea:b9:05:28:88:f3:98:08:a7:14:3a:91:4c: 70:1f:d0:8e:99:31:1e:5a:6d:33:3d:46:7d:4e:71:3f:b6:2c: 9e:ed:1d:32:b0:ba:38:2d:e6:8d:81:18:a9:20:dc:05:04:17: 20:d1:2a:0d:e4:05:b5:a5:2f:9b:55:38:50:b9:63:60:41:c7: c7:b6:64:8f:48:65:7c:c8:75:99:35:7d:50:4b:25:e0:00:c7: e2:85:bc:4b:22:c7:a1:35:25:16:67:dd:b3:16:c4:0f:e9:3c: 0a:58:1f:35:b7:57:74:e1:3c:21:29:e4:58:dc:b8:bb:60:31: ec:96:3f:72:69:85:ea:ff:57:53:28:30:34:1e:6f:70:03:17: fe:15:35:db:1d:f2:54:61:62:c4:42:0b:6d:35:d1:75:b2:f7: 9c:6e:05:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD MzEyQzZCRUIwHhcNMjUxMTA1MDIwMTI5WhcNMjUxMTEyMDIwMTI5WjAYMRYwFAYD VQQDEw02OTBhYWZmYS02NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLM+xkmfPA4/deOcKPlkfWfDkBx+LR29EFrsqseAGvvNLUZvocPQMaH6NZUD zl8D/ci5ycXP6DePjrVFPxS+avkcRyGor8E5WQ8dqNjij1dp2TGdrVeFBr02pdy8 BYGMqCwq6egbF9wKMHvZySb7Y/lmwqcPhp6SAOGpXJ1RnowTffm6DzRWfhLwpLOc Ca0vqaBjfP/dpej6v82mFGgWjnfPRuqYnqtvDUdUjaShpyRsrRHyw8kIRq+KonEy WmK5cfaoVtMik5WhYDBzqSffBM06mHb1KKGosTVmcSyANg1XTNFxyl8Sk1TvcO/6 MtbaRdPYtOocDWJMC1SRJe1+xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSaLfuN OdUqUSivyLvSmFKNJm6IMB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR Wm1PV3RNSTlqdlhERXNhLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPTW5HqGNqQpcC1N4+evSfqOZoBkQjps1qSqnjFiQ6FAPu3NXNXvBn dq6/v4da1o0Omnizfwh/u0BmCoNoYKHJAUZoWWnj3gkFu1sf9I5kG/eklD20Pbwr FFUhoFIFneq5BSiI85gIpxQ6kUxwH9COmTEeWm0zPUZ9TnE/tiye7R0ysLo4LeaN gRipINwFBBcg0SoN5AW1pS+bVThQuWNgQcfHtmSPSGV8yHWZNX1QSyXgAMfihbxL IsehNSUWZ92zFsQP6TwKWB81t1d04TwhKeRY3Li7YDHslj9yaYXq/1dTKDA0Hm9w Axf+FTXbHfJUYWLEQgttNdF1svecbgV2 -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:28 2025 by rpki-client