$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json) Hash identifier: mnCzL3tia36VSC/ueT9T/elakTfKLOtUZW6iDclTQBg= Subject key identifier: D6:BB:6D:63:46:C7:52:6D:80:09:7F:F6:74:09:79:85:2B:33:B9:C2 Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft Manifest number: 074D Signing time: Tue 04 Nov 2025 21:47:45 +0000 Manifest this update: Tue 04 Nov 2025 21:47:45 +0000 Manifest next update: Tue 11 Nov 2025 21:47:45 +0000 Files and hashes: 1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: 0+nBFttDV6F8Q/FOOTQyDbOyZNcvPTLtni4K4ohknkk=) 2: 43854B4044D411EB85615640C4F9AE02.roa (hash: kHAZG3jN+HiEy9SCAyuumysCPoFNupJBB0jqW1iCUdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Validity Not Before: Nov 4 21:47:45 2025 GMT Not After : Nov 11 21:47:45 2025 GMT Subject: CN=690a7481-2fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:e0:04:f6:59:a1:8c:46:f4:02:0e:13:5f: bf:83:c1:a9:37:e1:f1:7b:93:43:ca:4f:21:e3:79: f9:4e:f9:32:21:b2:54:57:ba:50:f4:ac:b1:bd:44: ba:fa:36:00:b7:2f:f2:59:ed:7e:d9:05:04:d8:f2: 1e:41:83:8d:34:31:7c:90:85:4e:f1:9d:c5:e0:44: 5c:99:8f:6c:38:e5:a3:fa:f4:66:64:0c:7a:f3:9b: 7f:59:c7:0a:db:2a:3b:86:5d:80:42:da:ca:46:f9: 89:24:65:ee:a0:c2:bd:a7:f6:0c:88:c1:9d:08:61: ed:38:c2:33:bc:5a:d2:ba:43:de:bd:8c:d6:42:fc: 8a:9a:65:79:2e:9c:60:8b:70:94:d3:4e:12:82:4d: 74:66:a8:94:61:66:db:32:91:7c:ae:62:ee:cd:ea: 58:aa:2e:e3:38:16:0e:b2:b4:a4:b8:ff:9d:cb:f7: 9f:1d:c2:dc:1f:bf:db:f4:9f:2e:13:48:9c:0a:9d: 80:43:c4:9b:78:1d:53:0e:79:7c:7a:b8:e8:7a:04: 77:4c:0d:90:19:75:56:d7:b9:c6:c9:65:12:cf:f6: b0:98:01:8f:c8:bb:b3:91:ff:fa:4b:e3:3a:b0:a0: cd:65:63:91:a8:c5:43:ff:a5:66:37:f0:be:4f:e2: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BB:6D:63:46:C7:52:6D:80:09:7F:F6:74:09:79:85:2B:33:B9:C2 X509v3 Authority Key Identifier: keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:91:7f:94:67:d9:20:27:c1:97:be:23:a8:c6:8e:50:87:3e: 12:c9:10:8c:88:b6:83:16:3d:b4:89:f4:ad:33:21:7c:56:e4: 24:8e:df:d9:aa:32:a2:9f:0e:c1:49:24:a5:fd:51:53:89:93: 90:9a:6c:99:e8:64:44:e5:e9:4a:03:03:95:52:56:b3:46:ef: 3d:11:73:1f:1a:9b:04:09:72:e3:17:ad:31:01:0a:30:a1:b0: 59:b0:0a:84:7c:3e:3e:b9:f6:8d:09:bf:f3:34:8d:ff:24:1f: 7a:04:a0:0a:c3:ca:f0:99:8c:3f:ee:35:0f:7e:0d:41:25:6d: b4:1c:4f:42:16:be:44:c3:00:2f:60:fd:da:3b:52:8c:b3:d4: 8b:09:80:ff:60:4c:63:fc:7f:6b:0b:18:6d:99:44:59:07:e9: db:2d:95:bf:71:37:53:94:61:36:cd:ca:5d:f2:5d:80:7f:f8: 84:fa:c0:10:80:af:42:ac:38:3e:4d:35:3a:75:6e:91:af:6e: c4:d6:21:2d:3b:9b:51:b0:7a:bd:22:23:13:f5:9f:75:1e:ad: a4:2a:19:bc:1a:b1:e4:a6:ed:ff:55:2b:e7:d0:81:fd:4b:9c: ad:c5:0c:1c:3d:65:a7:3f:3a:ff:52:15:17:92:ce:f3:80:6e: 3e:a0:ff:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxOTcxMTAvBgNVBAUTKEMzQjY0OEVCMkUyMzg3MkE5MThEMDU3NzEzMEYzNTg1 M0Y2RjYzOUUwHhcNMjUxMTA0MjE0NzQ1WhcNMjUxMTExMjE0NzQ1WjAYMRYwFAYD VQQDEw02OTBhNzQ4MS0yZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4vgBPZZoYxG9AIOE1+/g8GpN+Hxe5NDyk8h43n5TvkyIbJUV7pQ9KyxvUS6 +jYAty/yWe1+2QUE2PIeQYONNDF8kIVO8Z3F4ERcmY9sOOWj+vRmZAx685t/WccK 2yo7hl2AQtrKRvmJJGXuoMK9p/YMiMGdCGHtOMIzvFrSukPevYzWQvyKmmV5Lpxg i3CU004Sgk10ZqiUYWbbMpF8rmLuzepYqi7jOBYOsrSkuP+dy/efHcLcH7/b9J8u E0icCp2AQ8SbeB1TDnl8erjoegR3TA2QGXVW17nGyWUSz/awmAGPyLuzkf/6S+M6 sKDNZWORqMVD/6VmN/C+T+LCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa7bWNG x1JtgAl/9nQJeYUrM7nCMB8GA1UdIwQYMBaAFMO2SOsuI4cqkY0FdxMPNYU/b2Oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE5Ny9BNEREQTUyNDQ0 RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0amh5cVJqUVYzRXc4MWhUOXZZ NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Wkk2eTRqaHlxUmpRVjNFdzgxaFQ5dlk1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE5Ny9BNEREQTUyNDQ0RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0amh5 cVJqUVYzRXc4MWhUOXZZNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjkX+UZ9kgJ8GXviOoxo5Qhz4SyRCMiLaDFj20ifStMyF8VuQkjt/Z qjKinw7BSSSl/VFTiZOQmmyZ6GRE5elKAwOVUlazRu89EXMfGpsECXLjF60xAQow obBZsAqEfD4+ufaNCb/zNI3/JB96BKAKw8rwmYw/7jUPfg1BJW20HE9CFr5EwwAv YP3aO1KMs9SLCYD/YExj/H9rCxhtmURZB+nbLZW/cTdTlGE2zcpd8l2Af/iE+sAQ gK9CrDg+TTU6dW6Rr27E1iEtO5tRsHq9IiMT9Z91Hq2kKhm8GrHkpu3/VSvn0IH9 S5ytxQwcPWWnPzr/UhUXks7zgG4+oP/F -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:45 2025 by rpki-client