$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: Hc4NLKT6q2OmUOYj5Vpg5WitKejhlrWiTyBj+kWBo8g= Subject key identifier: 31:0F:62:CE:9C:27:25:4C:EF:98:7B:9E:77:0B:09:96:39:42:13:8C Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 1A17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 1A17 Signing time: Sun 02 Nov 2025 16:22:19 +0000 Manifest this update: Sun 02 Nov 2025 16:22:18 +0000 Manifest next update: Sun 09 Nov 2025 16:22:18 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: 8vr5eraZl77z1zvQPe+OnDYdYDHTaMjm8Ikg68XmNNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6679 (0x1a17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Nov 2 16:22:18 2025 GMT Not After : Nov 9 16:22:18 2025 GMT Subject: CN=6907853a-e02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:d7:3a:c5:d3:23:89:e1:73:d5:b3:5a:a7: cb:39:eb:bd:3a:4e:c7:dc:ba:9e:82:4c:94:d9:c9: 84:11:cf:00:2c:76:f1:37:e3:7f:07:cf:f9:a3:11: 48:79:d1:91:fa:fd:0c:72:4b:5c:27:08:39:3a:81: f0:f5:c7:f2:0f:00:ff:da:f9:20:c6:d0:21:0b:0f: a0:3d:4d:2e:60:8e:aa:fc:62:1f:aa:85:93:2a:78: c1:d3:00:0e:b1:da:0d:16:a9:08:36:57:13:1a:29: 43:7b:75:66:8e:e7:c4:c0:0d:17:00:0f:24:36:21: 77:ba:08:0b:66:04:4f:e9:41:79:7d:b5:2a:a4:ce: f8:a9:f6:40:24:a7:fe:a9:b5:94:79:95:93:2c:27: 29:cd:44:d2:62:fb:ec:b4:ba:bf:88:3e:6a:f9:dd: 48:fd:fd:32:44:c1:61:db:61:a3:b4:9d:b7:9a:f8: 72:d9:d0:c7:c3:39:84:12:19:7f:46:f0:c0:db:ca: bf:b2:8b:67:7c:6c:d1:ae:1a:a3:69:e3:5d:96:5c: c6:b9:bd:1f:65:ae:46:c9:fe:dd:a2:9a:65:78:e2: 10:51:f2:e6:1f:cc:e2:d3:f8:fc:21:4e:d7:17:cc: eb:ab:bc:95:6d:ed:86:69:e2:e3:c6:4c:4c:ee:68: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0F:62:CE:9C:27:25:4C:EF:98:7B:9E:77:0B:09:96:39:42:13:8C X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3f:72:65:76:5d:7a:1a:c5:3f:ae:99:9b:78:81:2c:56:eb: 79:30:50:c9:32:1a:53:91:c8:51:b8:f0:19:d0:34:64:b8:c3: cb:a8:e9:72:cd:c5:0a:db:93:56:77:19:03:14:91:7e:e5:d9: b7:b5:d6:e7:e2:0c:f4:bf:9c:22:4b:87:14:99:6f:91:62:33: c2:9e:a9:68:61:56:d5:4e:60:dd:e9:e2:06:d8:97:02:48:21: 2e:98:b2:e6:b2:79:9a:d5:2f:d2:1a:d2:b2:5a:fb:49:57:d4: 53:d9:3c:b1:3f:6c:ee:a6:1e:4a:df:fb:2b:4e:f0:80:22:6a: 6b:ef:fe:2a:ac:cf:cd:fa:6a:4a:dd:47:5c:a1:f2:a8:10:b7: 1f:fe:2d:8e:c1:d1:08:3d:1a:8f:d6:25:25:06:7d:48:e2:62: 41:bb:a9:57:20:9c:87:22:3f:47:39:a5:df:49:e2:55:e9:cc: 26:0f:b0:25:24:51:a6:f9:c8:f8:02:49:5b:f2:0c:4e:07:5d: bd:76:64:76:a6:83:09:20:f0:cb:c7:72:d7:5b:f9:c3:d9:84: cd:c3:6d:9d:55:82:6d:1e:28:90:dd:27:39:85:3b:6c:4c:63: ba:b5:b6:9f:f0:bb:e5:d6:54:d5:fa:52:9f:86:85:89:50:93: 59:55:33:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjUxMTAyMTYyMjE4WhcNMjUxMTA5MTYyMjE4WjAYMRYwFAYD VQQDEw02OTA3ODUzYS1lMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRbXOsXTI4nhc9WzWqfLOeu9Ok7H3LqegkyU2cmEEc8ALHbxN+N/B8/5oxFI edGR+v0McktcJwg5OoHw9cfyDwD/2vkgxtAhCw+gPU0uYI6q/GIfqoWTKnjB0wAO sdoNFqkINlcTGilDe3VmjufEwA0XAA8kNiF3uggLZgRP6UF5fbUqpM74qfZAJKf+ qbWUeZWTLCcpzUTSYvvstLq/iD5q+d1I/f0yRMFh22GjtJ23mvhy2dDHwzmEEhl/ RvDA28q/sotnfGzRrhqjaeNdllzGub0fZa5Gyf7doppleOIQUfLmH8zi0/j8IU7X F8zrq7yVbe2GaeLjxkxM7mgk9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEPYs6c JyVM75h7nncLCZY5QhOMMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlP3Jldl16GsU/rpmbeIEsVut5MFDJMhpTkchRuPAZ0DRkuMPLqOly zcUK25NWdxkDFJF+5dm3tdbn4gz0v5wiS4cUmW+RYjPCnqloYVbVTmDd6eIG2JcC SCEumLLmsnma1S/SGtKyWvtJV9RT2TyxP2zuph5K3/srTvCAImpr7/4qrM/N+mpK 3UdcofKoELcf/i2OwdEIPRqP1iUlBn1I4mJBu6lXIJyHIj9HOaXfSeJV6cwmD7Al JFGm+cj4Aklb8gxOB129dmR2poMJIPDLx3LXW/nD2YTNw22dVYJtHiiQ3Sc5hTts TGO6tbaf8Lvl1lTV+lKfhoWJUJNZVTO7 -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:45 2025 by rpki-client