$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: gIJ2FV79TKAH54WpMS1+0acqiYRMdm3V9s4h+z79QJA= Subject key identifier: 9D:F4:F9:1E:22:C8:5D:8F:C4:AB:0C:40:9F:A3:B4:6B:0D:2B:3A:84 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 0829 Signing time: Tue 04 Nov 2025 20:56:42 +0000 Manifest this update: Tue 04 Nov 2025 20:56:41 +0000 Manifest next update: Tue 11 Nov 2025 20:56:41 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: otD5wE50SOtgAZoujvDa8I0lMjARdjeituo/csnXpdg=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: A+8vz2aU+wC552KBg2dFDTbTWJJd1ELKdd2raygWGUA=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Vo3PCsdHmPC7RHzYgOW5sXRasLzQm3wjobK8wMgaD5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Nov 4 20:56:41 2025 GMT Not After : Nov 11 20:56:41 2025 GMT Subject: CN=690a688a-fea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:08:43:fb:84:82:d3:a7:1e:da:b6:f9:f0:b7: 29:33:23:d3:fb:fa:e4:31:d1:80:57:31:c0:3e:a6: 3d:70:7d:57:78:31:f1:fe:fa:79:a5:5f:4b:03:d5: 02:3f:fd:7b:86:b0:69:66:7d:f3:12:08:9d:24:b0: 4e:81:97:ed:71:e9:09:f2:52:0d:ac:56:02:14:18: a3:a2:01:c6:f6:3f:08:b1:d6:81:80:1a:7f:f4:73: b8:a5:f4:01:ba:b4:95:0f:2a:ed:e7:c4:03:1c:f5: ab:32:95:19:72:f7:dd:48:64:92:5f:84:2c:76:76: 0e:98:3c:ea:86:ed:8a:29:9c:f5:4b:08:66:c3:0c: d5:35:70:b6:29:72:9c:a7:26:40:7d:74:2c:66:7e: 63:a8:59:13:0d:e1:e4:fb:71:d1:55:ee:a9:a0:54: 3e:17:be:75:2e:40:2d:7c:74:f6:93:32:8a:2d:59: 94:45:81:9c:50:0f:7c:f4:a0:1d:31:b6:62:2f:cc: 50:d2:21:6d:c8:f4:7d:32:9e:51:b3:32:d5:ee:16: 86:2a:bc:31:32:0c:c3:3c:5e:70:2a:4f:bd:5b:71: 83:8c:2a:ff:75:9a:50:bc:fa:73:8e:74:d3:bd:5e: 5e:96:1d:a1:cc:e5:63:a3:20:e6:c1:69:52:95:6c: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:F9:1E:22:C8:5D:8F:C4:AB:0C:40:9F:A3:B4:6B:0D:2B:3A:84 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4a:7e:64:5b:66:a4:e9:d6:a1:56:0b:5c:69:7d:f1:21:28: 87:68:b5:08:26:5b:f7:92:91:64:b5:fd:b7:69:6e:c7:93:07: 8c:f6:a1:24:40:d1:f2:3a:fa:e0:36:95:11:b5:0a:de:69:89: 1d:73:bc:dd:b6:20:a1:3b:74:6f:ae:81:cb:0c:41:25:37:ae: 07:5b:a3:26:5e:6a:61:7c:0a:65:97:e3:9f:22:71:33:75:e9: 24:3f:ab:10:64:52:b8:ce:be:b2:7e:15:d3:00:13:df:82:e7: 42:d9:0a:0e:14:c1:db:b5:82:40:1b:a8:05:ef:5f:a0:90:88: b1:72:a0:03:6e:07:01:a9:c0:44:d6:16:f0:3c:e7:0d:c7:ab: b2:d0:95:83:40:2a:1c:61:75:eb:ac:45:94:13:89:f5:09:c3: 2a:90:bf:65:16:97:86:80:a5:e1:94:af:97:e1:6b:b9:4b:b9: 97:18:e5:a6:7a:6f:3b:e6:64:b5:45:31:76:63:93:b5:29:5d: 7a:96:b9:ad:19:e8:76:4e:1c:d8:1f:fd:79:99:e1:ff:f7:44: 23:81:ea:a6:15:c4:a9:75:10:0f:d1:09:f7:22:d5:ac:be:84: ec:bd:e3:f6:10:30:8a:2f:d4:bf:55:ff:26:f5:f3:ab:20:a8: fe:e4:ed:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjUxMTA0MjA1NjQxWhcNMjUxMTExMjA1NjQxWjAYMRYwFAYD VQQDEw02OTBhNjg4YS1mZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QhD+4SC06ce2rb58LcpMyPT+/rkMdGAVzHAPqY9cH1XeDHx/vp5pV9LA9UC P/17hrBpZn3zEgidJLBOgZftcekJ8lINrFYCFBijogHG9j8IsdaBgBp/9HO4pfQB urSVDyrt58QDHPWrMpUZcvfdSGSSX4QsdnYOmDzqhu2KKZz1SwhmwwzVNXC2KXKc pyZAfXQsZn5jqFkTDeHk+3HRVe6poFQ+F751LkAtfHT2kzKKLVmURYGcUA989KAd MbZiL8xQ0iFtyPR9Mp5RszLV7haGKrwxMgzDPF5wKk+9W3GDjCr/dZpQvPpzjnTT vV5elh2hzOVjoyDmwWlSlWwG2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ30+R4i yF2PxKsMQJ+jtGsNKzqEMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHSn5kW2ak6dahVgtcaX3xISiHaLUIJlv3kpFktf23aW7HkweM9qEk QNHyOvrgNpURtQreaYkdc7zdtiChO3RvroHLDEElN64HW6MmXmphfApll+OfInEz dekkP6sQZFK4zr6yfhXTABPfgudC2QoOFMHbtYJAG6gF71+gkIixcqADbgcBqcBE 1hbwPOcNx6uy0JWDQCocYXXrrEWUE4n1CcMqkL9lFpeGgKXhlK+X4Wu5S7mXGOWm em875mS1RTF2Y5O1KV16lrmtGeh2ThzYH/15meH/90QjgeqmFcSpdRAP0Qn3ItWs voTsveP2EDCKL9S/Vf8m9fOrIKj+5O2e -----END CERTIFICATE-----Generated at Thu Nov 6 00:41:11 2025 by rpki-client