$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json) Hash identifier: VN6RujtKPrIk8o6cUWwxLsB5z7NkR0BuJB1/yQVU59A= Subject key identifier: 45:33:E1:69:92:DD:A1:28:5E:8F:EF:55:9B:C1:19:A2:01:D9:95:95 Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Certificate serial: 1B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft Manifest number: 1B3D Signing time: Tue 04 Nov 2025 16:22:36 +0000 Manifest this update: Tue 04 Nov 2025 16:22:36 +0000 Manifest next update: Tue 11 Nov 2025 16:22:36 +0000 Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: 8r3UJ3JQr25hegvGJ8LzWTep4kxIDXOuqcV4DNl6qKs=) 2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6980 (0x1b44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Validity Not Before: Nov 4 16:22:36 2025 GMT Not After : Nov 11 16:22:36 2025 GMT Subject: CN=690a284c-b4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:cb:dd:e1:bc:cd:f5:82:80:fa:3c:87:c3: 13:36:c2:01:1c:88:7c:3d:a6:fc:04:ab:e1:dc:d7: 3f:ad:0f:01:19:72:e9:16:b8:93:b8:dc:00:7a:5e: 65:3d:52:42:10:38:41:6a:b1:64:1a:c9:08:50:8d: 9d:a1:1c:ed:57:57:b6:11:c1:ef:d8:95:f2:de:8e: 18:b2:b9:41:84:15:74:c4:d2:14:f3:ea:1b:58:d0: 65:a0:7a:b7:ec:3a:c6:a6:f5:46:2d:d3:ac:97:70: ad:e5:4a:26:9a:70:8a:8b:2f:76:88:5e:e1:97:81: 1d:2b:87:cf:3c:53:09:d2:f5:fb:df:8e:7a:09:ec: a2:74:a3:05:f5:85:5e:00:f2:53:3f:34:81:85:be: 31:e1:11:a1:08:f1:df:ea:06:83:ce:1c:70:3f:64: db:08:95:0f:6b:c4:c2:51:3b:9d:36:a9:6f:18:83: 07:b4:49:db:ad:cf:5f:8c:07:c6:87:b7:29:6e:d2: f6:a6:ca:02:90:0e:b8:ba:67:2d:9c:a0:42:19:1b: be:20:21:d3:8f:a2:e8:e5:09:34:44:58:99:3b:23: a3:73:b7:6f:82:7c:df:95:38:e9:c9:b6:2e:d9:18: ec:1a:72:0b:99:81:d6:00:12:81:2a:11:47:e0:c1: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:33:E1:69:92:DD:A1:28:5E:8F:EF:55:9B:C1:19:A2:01:D9:95:95 X509v3 Authority Key Identifier: keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9d:58:4b:3b:e2:f8:74:ea:b9:af:35:84:b5:da:97:b0:09: 16:c0:8f:1f:49:02:69:a2:4e:89:b5:69:50:e6:ec:2b:b5:0a: b2:a7:20:ac:44:44:38:4c:fc:a9:35:18:9d:97:50:db:97:34: 38:bf:29:2a:6b:72:a8:a9:65:4b:f9:14:5a:4e:75:95:f6:7e: 1e:16:8b:b7:87:6c:f5:24:05:cd:33:d8:f7:be:cb:1b:94:ec: 7d:05:5b:e0:73:7f:5e:35:a4:0b:44:4f:9c:ac:e8:48:d3:cb: 8b:bb:ab:89:fc:21:d5:01:23:33:64:db:f8:38:d0:a1:0a:96: e2:8a:4a:f5:60:9a:4a:ac:3c:42:d7:6e:45:cd:66:3b:d2:8b: d5:73:0d:7e:1f:56:ae:ea:b2:e4:32:e6:c8:f8:1d:ab:e8:ff: 28:d6:0e:d6:bf:94:f6:67:4f:fb:c7:4f:f8:7c:44:e9:9d:71: 21:40:3f:df:96:02:42:f4:c8:2c:e4:21:ce:6e:d7:dd:aa:37: e3:d7:41:08:ff:ee:5c:d7:13:9a:d3:ed:9a:8f:24:8a:69:1e: 2e:57:8b:5c:db:32:e3:1a:55:25:b2:ca:66:51:62:aa:7b:62: 79:c2:b5:2d:4c:a5:3e:f5:1e:60:a8:84:8d:4d:6a:16:7a:b1: 29:ad:d1:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3RTA2QjQ4QUVD OTU1MUY2NUIwHhcNMjUxMTA0MTYyMjM2WhcNMjUxMTExMTYyMjM2WjAYMRYwFAYD VQQDEw02OTBhMjg0Yy1iNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT3L3eG8zfWCgPo8h8MTNsIBHIh8Pab8BKvh3Nc/rQ8BGXLpFriTuNwAel5l PVJCEDhBarFkGskIUI2doRztV1e2EcHv2JXy3o4YsrlBhBV0xNIU8+obWNBloHq3 7DrGpvVGLdOsl3Ct5UommnCKiy92iF7hl4EdK4fPPFMJ0vX73456CeyidKMF9YVe APJTPzSBhb4x4RGhCPHf6gaDzhxwP2TbCJUPa8TCUTudNqlvGIMHtEnbrc9fjAfG h7cpbtL2psoCkA64umctnKBCGRu+ICHTj6Lo5Qk0RFiZOyOjc7dvgnzflTjpybYu 2RjsGnILmYHWABKBKhFH4MEnYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUz4WmS 3aEoXo/vVZvBGaIB2ZWVMB8GA1UdIwQYMBaAFAuwQx9VCAN9/JL3fga0iuyVUfZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI1NS9CRTYyREM5RTIz MkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEzMzhrdmQtQnJTSzdKVlI5 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QkRIMVVJQTMzOGt2ZC1CclNLN0pWUjlscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEz MzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbnVhLO+L4dOq5rzWEtdqXsAkWwI8fSQJpok6JtWlQ5uwrtQqypyCs REQ4TPypNRidl1DblzQ4vykqa3KoqWVL+RRaTnWV9n4eFou3h2z1JAXNM9j3vssb lOx9BVvgc39eNaQLRE+crOhI08uLu6uJ/CHVASMzZNv4ONChCpbiikr1YJpKrDxC 125FzWY70ovVcw1+H1au6rLkMubI+B2r6P8o1g7Wv5T2Z0/7x0/4fETpnXEhQD/f lgJC9Mgs5CHObtfdqjfj10EI/+5c1xOa0+2ajySKaR4uV4tc2zLjGlUlsspmUWKq e2J5wrUtTKU+9R5gqISNTWoWerEprdE6 -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:20 2025 by rpki-client