$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: mwkDuTzOzwkzC2T8TLvANSm7RftGBL7k2dRtiIFg7r4= Subject key identifier: B9:94:B0:12:8F:6B:B6:8B:FB:A5:4B:17:4E:D0:44:BB:33:23:F5:C9 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 09B6 Signing time: Tue 04 Nov 2025 20:05:35 +0000 Manifest this update: Tue 04 Nov 2025 20:05:35 +0000 Manifest next update: Tue 11 Nov 2025 20:05:35 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: afiyXPCDRyiVNKLKKQgK2QWLP+jqs6VrxZRD2ratH4Y=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Nov 4 20:05:35 2025 GMT Not After : Nov 11 20:05:35 2025 GMT Subject: CN=690a5c8f-5075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:d6:36:a6:05:0f:16:b0:0a:cd:60:27:86: af:2c:a4:b9:d4:e7:92:f4:93:ee:64:5e:c5:77:a4: 1e:0a:12:e1:cf:0c:44:7f:06:43:3d:11:7b:ac:24: e0:97:a6:34:3f:59:4e:9c:0b:64:2a:f9:dc:2d:8f: 37:26:17:5e:21:d0:4a:77:a6:b5:db:da:eb:60:38: 36:e9:c3:5a:8b:c5:ac:bf:7f:b8:bd:a3:c2:0c:ee: 68:5d:9a:58:23:12:59:3e:5e:96:35:6c:37:3c:fe: 24:8d:5e:d1:a4:53:ea:d9:06:d5:bd:63:00:95:cb: 09:1f:3e:18:b5:a2:3e:c5:26:ce:5a:bf:b5:5a:c5: 19:d2:af:8c:9b:d8:3e:4d:96:7b:aa:0f:eb:7e:cc: 13:69:aa:94:29:8e:96:d1:1b:7e:d6:f0:db:d9:99: 8c:37:ee:a6:f1:03:b3:bd:d9:12:88:6b:24:1c:b1: 35:ff:f0:0c:9c:93:5e:d5:8e:97:f2:14:9f:bb:0c: 8b:e5:a4:46:df:47:c7:d7:f7:19:ec:00:49:e9:cc: f2:84:71:e3:33:4f:63:f8:19:63:0d:70:4b:3e:de: 09:52:02:44:2d:0d:87:52:02:31:77:59:85:73:4a: a6:0a:19:6b:82:b9:16:7d:8d:61:06:e0:b6:68:75: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:B0:12:8F:6B:B6:8B:FB:A5:4B:17:4E:D0:44:BB:33:23:F5:C9 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c3:8f:74:1f:ad:a4:03:9d:e2:1a:44:bf:d5:eb:39:9d:c8: c8:3b:51:1a:42:2c:5d:8b:e8:65:59:22:4e:3e:52:e1:0e:ef: e5:6b:44:13:53:7e:a8:c7:90:93:f9:31:ee:07:93:90:b8:c9: f3:59:1b:41:34:d5:f7:89:e9:ec:4d:f3:33:78:60:61:b8:69: 7b:f1:81:ed:01:ac:d5:c8:9f:97:73:a1:3d:b9:09:6d:19:be: b4:95:b2:40:a7:db:77:df:f0:7b:c2:1d:57:95:69:c5:7a:1f: c5:f2:6a:68:64:50:37:5a:c0:5e:01:b5:b4:99:bd:6e:02:94: df:6d:4d:61:15:80:62:2e:95:06:95:e6:f8:7d:cc:0c:0b:33: 6c:96:00:bc:54:5a:51:4c:15:c9:f3:93:3e:e9:b7:50:40:de: 10:15:cd:91:f8:49:1a:4f:b4:76:15:00:a8:a3:ea:5a:42:58: 19:d3:77:3b:8f:ac:19:d7:af:da:77:04:d1:58:b7:0b:04:fe: dd:09:e5:a2:25:f2:d5:38:86:ae:77:d8:07:bf:1b:a5:c9:73: c7:b8:a2:61:e2:60:33:a1:31:c0:8a:72:aa:ad:7e:9e:91:b4: 3a:a9:39:51:19:bf:eb:b9:85:5e:57:ba:ec:7e:b6:ab:a3:0e: 3a:01:46:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUxMTA0MjAwNTM1WhcNMjUxMTExMjAwNTM1WjAYMRYwFAYD VQQDEw02OTBhNWM4Zi01MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJvWNqYFDxawCs1gJ4avLKS51OeS9JPuZF7Fd6QeChLhzwxEfwZDPRF7rCTg l6Y0P1lOnAtkKvncLY83JhdeIdBKd6a129rrYDg26cNai8Wsv3+4vaPCDO5oXZpY IxJZPl6WNWw3PP4kjV7RpFPq2QbVvWMAlcsJHz4YtaI+xSbOWr+1WsUZ0q+Mm9g+ TZZ7qg/rfswTaaqUKY6W0Rt+1vDb2ZmMN+6m8QOzvdkSiGskHLE1//AMnJNe1Y6X 8hSfuwyL5aRG30fH1/cZ7ABJ6czyhHHjM09j+BljDXBLPt4JUgJELQ2HUgIxd1mF c0qmChlrgrkWfY1hBuC2aHU3dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmUsBKP a7aL+6VLF07QRLszI/XJMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4w490H62kA53iGkS/1es5ncjIO1EaQixdi+hlWSJOPlLhDu/la0QT U36ox5CT+THuB5OQuMnzWRtBNNX3iensTfMzeGBhuGl78YHtAazVyJ+Xc6E9uQlt Gb60lbJAp9t33/B7wh1XlWnFeh/F8mpoZFA3WsBeAbW0mb1uApTfbU1hFYBiLpUG leb4fcwMCzNslgC8VFpRTBXJ85M+6bdQQN4QFc2R+EkaT7R2FQCoo+paQlgZ03c7 j6wZ16/adwTRWLcLBP7dCeWiJfLVOIaud9gHvxulyXPHuKJh4mAzoTHAinKqrX6e kbQ6qTlRGb/ruYVeV7rsfrarow46AUaY -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:14 2025 by rpki-client