$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: WbOtSRIg+e77TrZRmYTaRoENAAo7p2eu6QK3e6Oee3Q= Subject key identifier: 94:70:4A:AC:F3:33:AF:D9:C6:D0:F4:48:EE:F1:DD:83:78:20:FC:0F Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 85 Signing time: Wed 05 Nov 2025 06:52:35 +0000 Manifest this update: Wed 05 Nov 2025 06:52:34 +0000 Manifest next update: Wed 12 Nov 2025 06:52:34 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: ttBdwOTne6O2farkyU+rFQHNURA9HAfkThGDKEZx9l0=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Nov 5 06:52:34 2025 GMT Not After : Nov 12 06:52:34 2025 GMT Subject: CN=690af433-7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:20:3a:ec:24:0b:54:d3:15:79:65:38:83: ea:dc:58:a1:1d:23:45:b3:15:08:be:29:7d:e3:68: 8f:ca:f2:af:11:40:78:cf:69:46:74:fe:47:35:65: ce:ae:88:37:d7:69:78:58:af:6f:f7:a4:8d:4e:38: fe:4c:40:55:9d:90:6c:0a:99:a5:66:1f:6f:e2:26: c1:ed:e2:aa:52:25:85:e1:7d:bb:30:10:67:55:42: 25:48:a0:9a:b1:bb:dc:42:ee:89:5b:64:7d:48:1d: 56:c9:1c:c9:f3:e2:96:f8:75:86:ab:b3:ed:91:ae: fd:23:2d:65:74:0c:23:46:ae:12:1d:ab:c2:96:f9: 23:a6:d1:a7:8b:f4:8b:3f:3a:61:41:ad:c6:06:cc: 40:77:7c:ab:af:d7:36:a9:25:76:6f:11:a8:0e:1e: bf:75:0b:7c:3d:1e:37:14:12:94:77:06:51:57:3e: 5c:e7:58:65:9a:1d:a2:3c:8b:fe:dc:2a:58:83:62: db:35:6b:b9:24:74:e8:eb:f3:cc:1a:79:55:16:e6: e9:4d:a1:b8:a3:89:04:2c:44:2a:1c:6c:5d:25:11: fe:8c:bc:28:51:15:e6:8e:02:24:10:8f:96:d6:3b: bb:8e:86:d9:ad:c0:7f:05:cb:a6:4b:b4:ee:41:09: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:4A:AC:F3:33:AF:D9:C6:D0:F4:48:EE:F1:DD:83:78:20:FC:0F X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7e:7e:a9:0b:a8:f3:51:81:b5:6b:5b:6e:1c:b5:b2:42:e4: cd:d5:4b:cc:77:88:29:42:43:e3:42:41:3d:6f:8e:1d:26:78: 9e:1f:b9:3c:eb:5a:fc:9e:d2:86:71:c5:9e:06:80:2d:a7:3e: 87:19:2c:48:12:8e:71:1f:e4:46:62:89:df:3d:0b:98:35:76: a0:04:a9:4f:41:8b:4b:2d:b1:9f:84:bb:fa:66:b7:d5:22:01: cb:e1:af:7c:72:54:4d:54:6f:6b:0c:d0:02:21:68:d0:1a:1d: b1:ee:29:80:3c:bd:0a:a5:df:56:42:44:ec:ac:97:26:3a:8a: 62:4f:b1:9e:0c:8f:c1:04:7a:27:40:3d:09:e5:76:7a:46:0e: 80:1e:69:55:40:28:66:49:41:9f:33:a6:5b:81:ad:09:ec:35: 63:1a:7b:c2:ad:76:2c:7f:ab:e8:43:48:11:af:86:1e:75:a2: cc:30:67:f3:21:59:8e:7c:f4:c0:a0:d6:e6:63:53:22:e4:39: 43:02:5d:24:12:64:47:cd:fd:bc:7d:e0:39:c1:b5:5c:4a:98: 2c:6d:df:1c:17:d5:bd:67:72:04:91:a4:bc:36:9e:71:f7:3a: 73:5b:ff:e6:be:5c:ab:c7:d3:1e:a5:6a:85:55:b7:80:11:58: fa:2d:b4:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjUxMTA1MDY1MjM0WhcNMjUxMTEyMDY1MjM0WjAYMRYwFAYD VQQDEw02OTBhZjQzMy03YzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfkgOuwkC1TTFXllOIPq3FihHSNFsxUIvil942iPyvKvEUB4z2lGdP5HNWXO rog312l4WK9v96SNTjj+TEBVnZBsCpmlZh9v4ibB7eKqUiWF4X27MBBnVUIlSKCa sbvcQu6JW2R9SB1WyRzJ8+KW+HWGq7Ptka79Iy1ldAwjRq4SHavClvkjptGni/SL PzphQa3GBsxAd3yrr9c2qSV2bxGoDh6/dQt8PR43FBKUdwZRVz5c51hlmh2iPIv+ 3CpYg2LbNWu5JHTo6/PMGnlVFubpTaG4o4kELEQqHGxdJRH+jLwoURXmjgIkEI+W 1ju7jobZrcB/BcumS7TuQQnG8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRwSqzz M6/ZxtD0SO7x3YN4IPwPMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgfn6pC6jzUYG1a1tuHLWyQuTN1UvMd4gpQkPjQkE9b44dJnieH7k8 61r8ntKGccWeBoAtpz6HGSxIEo5xH+RGYonfPQuYNXagBKlPQYtLLbGfhLv6ZrfV IgHL4a98clRNVG9rDNACIWjQGh2x7imAPL0Kpd9WQkTsrJcmOopiT7GeDI/BBHon QD0J5XZ6Rg6AHmlVQChmSUGfM6Zbga0J7DVjGnvCrXYsf6voQ0gRr4YedaLMMGfz IVmOfPTAoNbmY1Mi5DlDAl0kEmRHzf28feA5wbVcSpgsbd8cF9W9Z3IEkaS8Np5x 9zpzW//mvlyrx9MepWqFVbeAEVj6LbQf -----END CERTIFICATE-----Generated at Wed Nov 5 19:19:13 2025 by rpki-client