$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: 1X9FLhlR7ZDPljwHdY4+wIQVRPD+8U42NBNlNWCjk98= Subject key identifier: EA:03:90:B0:98:4E:2F:E9:0E:5D:42:50:88:3F:ED:E7:76:A0:1A:BB Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 19F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 19DD Signing time: Tue 04 Nov 2025 16:28:03 +0000 Manifest this update: Tue 04 Nov 2025 16:28:03 +0000 Manifest next update: Tue 11 Nov 2025 16:28:03 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: FmwraDHoh7idjtKSh8RBDDj94UhFDRbi//ar27QVNqY=) 2: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 93fAGoBbKb8s2g7H+M2m6OkfN68jU6Ckev28RigcvkM=) 3: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: 0hRL6yZO6PYkNxlevkrCS0rz63r1YCZDrVAR2Fyxyls=) 4: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: l9XdWoi7pZ0Z/aLBaCXXv7SbiureJhqjsfmA2AlQcsM=) 5: DCD75050315011F0BC916269C4F9AE02.roa (hash: Bf1fxzL+4m9g8KrBwC7vnrDgD/7yz2XeDX4e5Hb6WLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6642 (0x19f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Nov 4 16:28:03 2025 GMT Not After : Nov 11 16:28:03 2025 GMT Subject: CN=690a2993-3dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:c4:0a:20:11:b4:13:62:80:40:73:3e:1b: 90:75:e4:5f:e0:8f:f9:60:36:f6:95:2d:0d:b7:e7: 88:32:8b:2a:86:b5:ba:3c:11:54:f2:ab:da:6f:18: 76:8d:5a:c9:3f:a5:8c:41:c1:1b:19:ec:92:c0:f4: 36:ce:e9:de:24:bd:a6:c6:98:ef:54:75:27:c4:73: 40:e7:73:25:49:71:b0:1e:da:18:a7:fc:7d:d5:f5: 92:9f:6d:85:f9:63:76:aa:95:d1:bf:72:79:58:89: 4b:a4:6b:c5:ed:d2:12:81:f2:3e:59:f4:16:23:3e: 37:e0:0f:ea:04:c0:23:ce:bc:47:ae:97:9a:3e:6e: 9b:67:44:4d:d3:b8:5d:1a:00:77:36:5d:46:b5:00: e7:39:f6:57:38:2a:44:cc:59:7d:cc:e2:b4:e0:40: 1d:5c:5d:98:e8:da:85:f3:6a:fd:ff:e1:f2:db:25: be:d9:16:fb:c0:fe:7d:29:fc:6f:c9:8d:67:ff:5f: 96:25:4b:f6:d5:cd:cf:99:0c:d5:33:29:7b:72:5a: 9e:78:21:74:dc:50:ae:d6:1d:62:5e:20:b8:a4:d7: 9c:93:57:a4:35:25:cb:59:1e:85:e7:da:0f:2a:d7: ed:ca:55:a8:52:27:1d:2d:30:f3:ee:bf:45:f5:db: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:90:B0:98:4E:2F:E9:0E:5D:42:50:88:3F:ED:E7:76:A0:1A:BB X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9a:0e:03:53:1d:a8:d7:67:69:ab:45:3c:2f:1d:43:64:07: 5b:da:5e:5c:ed:09:e0:97:72:3d:53:40:62:29:e2:0f:1c:07: 86:fa:22:af:85:67:8c:e8:da:a6:64:76:fa:6d:c0:88:8e:77: af:a6:73:49:b1:01:ba:1a:a6:5f:35:ae:f5:da:06:ed:f3:2e: 79:2b:ed:d0:6a:5c:0b:13:12:f4:77:3a:b5:ba:10:c4:25:6a: bb:d7:12:df:35:4e:1e:b9:6e:55:f0:17:28:c3:2b:5f:ba:74: e3:21:3d:a9:cd:4d:9a:9c:25:4a:6a:34:0f:e6:be:2d:2a:9f: 25:96:8f:cb:73:07:50:a2:44:92:08:0f:2e:34:64:bd:52:89: 22:8b:dc:ba:08:85:34:56:f0:bb:6a:ff:55:d6:70:74:aa:ec: 9f:e9:79:a0:49:36:d6:a7:e6:58:59:26:a7:98:61:96:65:3b: 31:cd:ee:9a:34:71:93:81:3a:22:68:11:b6:3c:ef:1f:64:bc: 3d:31:5e:0a:69:07:20:6e:bc:4f:39:9c:70:44:f2:3e:a5:c8: 55:6c:f1:cc:cc:52:75:7b:4d:6f:f0:6c:63:76:ef:84:b8:66: 17:16:41:9b:40:39:b7:53:de:fc:04:c6:79:6b:3c:d4:f7:81: ac:d7:64:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUxMTA0MTYyODAzWhcNMjUxMTExMTYyODAzWjAYMRYwFAYD VQQDEw02OTBhMjk5My0zZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcTECiARtBNigEBzPhuQdeRf4I/5YDb2lS0Nt+eIMosqhrW6PBFU8qvabxh2 jVrJP6WMQcEbGeySwPQ2zuneJL2mxpjvVHUnxHNA53MlSXGwHtoYp/x91fWSn22F +WN2qpXRv3J5WIlLpGvF7dISgfI+WfQWIz434A/qBMAjzrxHrpeaPm6bZ0RN07hd GgB3Nl1GtQDnOfZXOCpEzFl9zOK04EAdXF2Y6NqF82r9/+Hy2yW+2Rb7wP59Kfxv yY1n/1+WJUv21c3PmQzVMyl7clqeeCF03FCu1h1iXiC4pNeck1ekNSXLWR6F59oP KtftylWoUicdLTDz7r9F9dsgZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoDkLCY Ti/pDl1CUIg/7ed2oBq7MB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJmg4DUx2o12dpq0U8Lx1DZAdb2l5c7Qngl3I9U0BiKeIPHAeG+iKv hWeM6NqmZHb6bcCIjnevpnNJsQG6GqZfNa712gbt8y55K+3QalwLExL0dzq1uhDE JWq71xLfNU4euW5V8BcowytfunTjIT2pzU2anCVKajQP5r4tKp8llo/LcwdQokSS CA8uNGS9Uokii9y6CIU0VvC7av9V1nB0quyf6XmgSTbWp+ZYWSanmGGWZTsxze6a NHGTgToiaBG2PO8fZLw9MV4KaQcgbrxPOZxwRPI+pchVbPHMzFJ1e01v8Gxjdu+E uGYXFkGbQDm3U978BMZ5azzU94Gs12T6 -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:27 2025 by rpki-client