$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: 0GCg/qVNPGcJaeT2tRAApp01V2ycBydIvcRC2yeHAwk= Subject key identifier: CE:D7:72:18:3F:BA:4F:7D:BC:77:AB:C9:96:F3:95:73:7D:33:C0:C3 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 0529 Signing time: Tue 04 Nov 2025 15:24:56 +0000 Manifest this update: Tue 04 Nov 2025 15:24:56 +0000 Manifest next update: Tue 11 Nov 2025 15:24:56 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: +RB960oCI0JNdtLkS1s+nikmhuQmZD12yyIcRNYjEDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Nov 4 15:24:56 2025 GMT Not After : Nov 11 15:24:56 2025 GMT Subject: CN=690a1ac8-7bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:c9:52:cf:62:7e:ca:17:c4:1a:76:d0:04: 8c:b3:cb:c7:25:8b:6d:81:29:79:ae:53:76:ac:38: d6:b8:6e:73:32:04:dc:55:11:e7:ff:15:0f:d1:ab: 5e:7c:f7:8e:61:a6:65:91:37:fa:cc:84:bd:8d:21: ec:6e:08:7f:5b:88:14:76:7b:45:f2:14:17:31:bf: a9:36:1a:8c:a6:3c:69:46:7b:89:19:1d:da:ec:d0: a8:18:b4:51:61:cc:ec:80:10:65:f1:0c:8a:65:f6: 4b:1c:42:d7:6f:b2:43:fb:8c:d3:d0:ea:1f:21:a8: c9:2d:77:38:ae:b4:53:ec:7c:21:98:73:1d:f3:43: 87:cc:17:d4:bf:41:14:27:e1:e3:ec:16:b0:55:8a: 32:99:39:20:f9:e2:1b:61:a2:f1:28:53:2e:15:f3: d0:f1:4d:88:80:65:9d:8e:02:1c:32:89:ec:3b:21: c0:2e:69:42:c3:19:af:3d:2a:be:81:43:c6:1c:01: 3f:aa:83:5d:24:db:bb:90:90:d0:4c:9c:9b:7a:51: 52:6d:3b:72:23:5a:7b:5e:9b:7c:51:30:25:ff:b9: 93:4e:65:79:e0:12:f5:45:f2:a5:97:89:0b:95:17: 6e:0a:7a:46:cd:75:08:42:4b:cf:1d:7f:f2:df:46: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D7:72:18:3F:BA:4F:7D:BC:77:AB:C9:96:F3:95:73:7D:33:C0:C3 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:8f:e4:4c:e3:76:8e:7d:1a:c1:a7:ef:d3:06:d1:f5:46: 9a:6a:0b:1d:87:03:71:23:98:db:3f:84:1a:a6:9f:f8:90:6f: 45:7a:47:e0:69:e9:95:19:63:36:8d:d1:88:78:2a:a0:e6:ce: 0e:20:ba:01:0a:cd:b7:c1:6a:05:86:fe:ce:83:69:69:3b:67: a1:9f:2c:bb:c4:c2:85:6d:fc:dc:91:f6:9e:cf:73:60:22:00: c7:77:1c:52:37:b0:33:f5:6d:e1:e9:99:e9:0a:ba:93:6b:32: 61:99:4c:6e:8f:30:ee:31:17:39:ba:da:61:13:64:7e:7c:67: 4e:62:9a:4a:80:c7:38:a4:00:1e:c4:37:6a:3d:a5:1a:08:53: 1a:c6:16:ca:50:23:a8:6e:57:4f:69:28:70:33:8f:5b:de:52: 5d:2d:99:35:f0:28:e6:40:81:00:4a:97:2c:78:4a:02:b7:5f: 09:c6:3f:b8:ff:b7:00:a8:50:14:4a:0a:e2:6e:08:e0:38:bf: 68:cf:96:2d:37:50:0d:a1:82:12:48:23:5a:54:e0:f3:12:4d: 2d:09:e4:4d:99:b4:6e:ab:87:34:67:eb:ce:6a:e8:f5:30:80: 0b:80:00:9e:9a:e4:2e:6f:ea:f9:3a:30:bc:32:17:83:e8:f0: 7e:9e:91:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUxMTA0MTUyNDU2WhcNMjUxMTExMTUyNDU2WjAYMRYwFAYD VQQDEw02OTBhMWFjOC03YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2LJUs9ifsoXxBp20ASMs8vHJYttgSl5rlN2rDjWuG5zMgTcVRHn/xUP0ate fPeOYaZlkTf6zIS9jSHsbgh/W4gUdntF8hQXMb+pNhqMpjxpRnuJGR3a7NCoGLRR YczsgBBl8QyKZfZLHELXb7JD+4zT0OofIajJLXc4rrRT7HwhmHMd80OHzBfUv0EU J+Hj7BawVYoymTkg+eIbYaLxKFMuFfPQ8U2IgGWdjgIcMonsOyHALmlCwxmvPSq+ gUPGHAE/qoNdJNu7kJDQTJybelFSbTtyI1p7Xpt8UTAl/7mTTmV54BL1RfKll4kL lRduCnpGzXUIQkvPHX/y30aQNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7Xchg/ uk99vHeryZbzlXN9M8DDMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKvI/kTON2jn0awafv0wbR9UaaagsdhwNxI5jbP4Qapp/4kG9Fekfg aemVGWM2jdGIeCqg5s4OILoBCs23wWoFhv7Og2lpO2ehnyy7xMKFbfzckfaez3Ng IgDHdxxSN7Az9W3h6ZnpCrqTazJhmUxujzDuMRc5utphE2R+fGdOYppKgMc4pAAe xDdqPaUaCFMaxhbKUCOobldPaShwM49b3lJdLZk18CjmQIEASpcseEoCt18Jxj+4 /7cAqFAUSgribgjgOL9oz5YtN1ANoYISSCNaVODzEk0tCeRNmbRuq4c0Z+vOauj1 MIALgACemuQub+r5OjC8MheD6PB+npEk -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:13 2025 by rpki-client