$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: BJZzWfVTXww9kTI64kQ6p56y8JbkNx9ZLCIr890TtwQ= Subject key identifier: 33:47:D7:A7:83:B1:1B:BE:9E:36:D7:16:7E:81:10:D9:A2:79:32:DF Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3576 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 3526 Signing time: Tue 04 Nov 2025 14:23:00 +0000 Manifest this update: Tue 04 Nov 2025 14:22:59 +0000 Manifest next update: Tue 11 Nov 2025 14:22:59 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: kLAUVuWUB94C6iWCV4JLSero2Dg/lnRLpV7/4nlq6WA=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Nov 4 14:22:59 2025 GMT Not After : Nov 11 14:22:59 2025 GMT Subject: CN=690a0c43-8c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:24:21:99:b5:2b:4d:f8:1a:92:3e:b5:ef: f1:91:63:96:16:4f:7a:52:12:d6:02:46:e1:9e:5e: d1:38:4d:d4:34:df:30:8f:3a:37:0e:15:06:55:8e: c9:6d:b7:0d:d3:7d:d2:95:fe:3d:f1:25:e9:6b:97: 05:84:5d:3d:a6:59:de:91:e3:2e:fa:a4:ab:63:75: 25:5e:6c:a4:ba:d3:74:32:e6:25:24:f3:95:da:e1: a7:62:a1:5a:dd:e3:44:1e:57:24:18:4b:3a:99:7a: 17:5a:4d:1e:2c:17:47:a1:7a:af:07:0c:e0:54:bb: 31:79:ea:2e:c3:c0:21:f2:51:b0:44:95:80:56:4e: 64:20:19:52:da:e6:08:c0:4a:57:76:6e:a6:2d:d5: 52:d0:51:ea:d7:11:d5:4e:eb:1f:2b:6d:fe:a3:10: bc:84:a3:56:99:ea:1b:6e:d9:16:f5:ac:58:be:f9: 34:44:79:d3:25:17:4c:47:ce:8d:e9:50:a2:26:2b: 0a:2d:f2:bc:f4:d8:02:f3:04:71:00:f2:7c:8c:45: c7:1a:79:e7:ae:c5:72:fe:00:f8:e6:d9:56:82:ec: 9c:bc:9e:57:ea:8b:b3:a9:1b:f7:83:b5:ca:81:61: 15:c0:3b:84:c0:8b:a9:02:cc:a1:cb:c1:3a:58:6d: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:47:D7:A7:83:B1:1B:BE:9E:36:D7:16:7E:81:10:D9:A2:79:32:DF X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0f:6e:90:5d:3c:f0:9e:8c:87:9c:1e:2c:61:7d:6b:43:ec: 72:43:d5:38:5a:2d:c3:5e:db:6f:98:fb:1b:b3:20:fb:eb:ff: 97:38:d4:e1:f9:8f:6e:ea:e9:f1:26:82:bf:e7:24:a6:f8:39: 6b:92:82:af:43:d8:98:5e:e2:2f:88:f1:67:96:db:8a:d5:a8: 7a:3a:30:c6:16:31:b9:05:9c:65:aa:8a:40:c0:0a:a9:4d:9b: 0e:f0:ae:7e:be:c7:a9:ea:e1:8d:a9:47:7e:00:01:27:38:42: 90:52:a1:f9:8b:fd:9f:8d:d1:80:4a:35:24:da:ef:ad:31:b3: b6:02:ea:c0:12:eb:26:56:38:6b:55:ee:19:3f:8d:5d:32:14: fb:44:ec:5e:c8:f7:36:bd:e5:1c:2b:ce:a3:45:c8:28:c7:db: 90:df:00:4c:18:0a:ab:e8:f8:ac:28:cd:1d:66:b4:11:da:a0: 63:1c:d4:5b:d8:c7:df:42:19:80:41:f2:fb:a8:51:79:2f:0f: 32:cf:00:93:f1:b4:9e:e8:f5:55:64:5d:58:8a:9b:95:69:4c: 2f:b9:ce:a2:d3:39:a4:40:3b:4f:56:6f:2f:cd:6e:02:43:49: 0a:54:d2:28:f7:d5:91:e4:87:cb:1b:31:c8:44:a9:b6:6d:39: 80:ad:66:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUxMTA0MTQyMjU5WhcNMjUxMTExMTQyMjU5WjAYMRYwFAYD VQQDEw02OTBhMGM0My04YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdkkIZm1K034GpI+te/xkWOWFk96UhLWAkbhnl7ROE3UNN8wjzo3DhUGVY7J bbcN033Slf498SXpa5cFhF09plnekeMu+qSrY3UlXmykutN0MuYlJPOV2uGnYqFa 3eNEHlckGEs6mXoXWk0eLBdHoXqvBwzgVLsxeeouw8Ah8lGwRJWAVk5kIBlS2uYI wEpXdm6mLdVS0FHq1xHVTusfK23+oxC8hKNWmeobbtkW9axYvvk0RHnTJRdMR86N 6VCiJisKLfK89NgC8wRxAPJ8jEXHGnnnrsVy/gD45tlWguycvJ5X6ouzqRv3g7XK gWEVwDuEwIupAsyhy8E6WG29wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNH16eD sRu+njbXFn6BENmieTLfMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuD26QXTzwnoyHnB4sYX1rQ+xyQ9U4Wi3DXttvmPsbsyD76/+XONTh +Y9u6unxJoK/5ySm+DlrkoKvQ9iYXuIviPFnltuK1ah6OjDGFjG5BZxlqopAwAqp TZsO8K5+vsep6uGNqUd+AAEnOEKQUqH5i/2fjdGASjUk2u+tMbO2AurAEusmVjhr Ve4ZP41dMhT7ROxeyPc2veUcK86jRcgox9uQ3wBMGAqr6PisKM0dZrQR2qBjHNRb 2MffQhmAQfL7qFF5Lw8yzwCT8bSe6PVVZF1YipuVaUwvuc6i0zmkQDtPVm8vzW4C Q0kKVNIo99WR5IfLGzHIRKm2bTmArWbI -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:08 2025 by rpki-client