$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: rG6hYdU/efxL3grjAED9qW9Jhg0XqENPDymlR7LNTv0= Subject key identifier: A0:CD:45:4E:8E:1A:0F:B8:E3:57:39:BB:6D:76:1E:1B:6A:FC:7E:C6 Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 0221 Signing time: Wed 05 Nov 2025 02:15:11 +0000 Manifest this update: Wed 05 Nov 2025 02:15:10 +0000 Manifest next update: Wed 12 Nov 2025 02:15:10 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: VcmmhnekkW4kBkX6yXJ2pW5yrmJNPuYIFuHTBmnxBew=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Nov 5 02:15:10 2025 GMT Not After : Nov 12 02:15:10 2025 GMT Subject: CN=690ab32e-9173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:33:07:73:55:70:e9:73:6f:d1:8a:f7:42: da:69:cc:81:b8:64:89:bb:42:21:ea:a8:59:35:7b: 73:d8:51:a0:49:e1:3f:42:0d:ad:0e:7b:93:1c:79: 16:6d:1b:2a:41:c5:ee:bb:28:a6:a6:f0:af:e1:d8: 40:28:3b:e5:f3:70:f6:45:f8:36:24:07:d5:8a:ee: c4:d8:f0:2f:b7:15:35:fc:e8:09:f8:29:c4:7a:21: 3a:59:0d:cc:89:c1:95:bc:59:19:39:cd:69:c2:5f: bb:87:75:e4:f3:d2:ff:a0:f5:4b:a2:aa:50:78:04: 7b:49:da:1e:63:5e:19:09:eb:e9:95:70:53:c3:76: e6:55:b6:15:82:b2:a9:60:0b:72:b3:af:16:a3:5c: 30:20:a6:75:6e:1b:32:c1:eb:99:6c:68:74:e2:28: bb:27:25:f9:3b:57:28:b3:9a:40:12:12:62:7a:2e: 19:d8:f1:1d:14:6b:dc:c8:86:e4:b7:47:3b:89:e9: 9c:37:b3:14:8d:df:7b:69:02:a1:f2:57:0c:3f:a0: 25:d2:10:f2:6f:40:99:2a:e1:41:01:b2:5d:01:e5: 46:5c:75:ed:1d:f4:17:e0:4f:89:1d:5e:67:4a:46: 86:23:d1:5b:0f:42:9a:d7:09:dc:18:bc:e4:8d:52: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CD:45:4E:8E:1A:0F:B8:E3:57:39:BB:6D:76:1E:1B:6A:FC:7E:C6 X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:85:89:df:ab:cc:68:a3:df:2c:68:04:94:0e:b3:31:24: 1e:a4:2e:80:34:99:4e:d1:bc:0d:53:f0:f5:61:83:d5:30:a4: 6e:50:1f:15:01:b7:02:3f:13:da:8b:5d:fd:6d:d9:c7:fb:0b: bb:2f:6e:d8:79:b9:e4:f7:e4:f3:65:29:02:7a:e9:67:b0:63: e8:80:75:27:e3:b2:27:a2:20:52:10:fa:4e:46:2f:b8:e2:7c: 77:28:22:c5:b3:54:e5:0e:e9:6f:d9:7f:d6:36:bf:26:52:e0: 21:21:06:54:67:be:e9:6f:2f:4e:65:de:1c:59:23:4c:f2:dc: 37:21:94:17:50:cd:65:d1:23:a0:ec:18:71:fe:e0:20:a2:93: 38:2a:e3:b9:e2:39:4e:ce:b3:87:2c:a8:6b:9a:8e:ef:d9:a3: 62:8a:57:ac:21:14:3c:5d:ce:0a:1a:0f:5c:89:20:27:be:d8: 28:e6:06:3c:e0:88:13:10:3c:f6:55:35:e6:af:57:44:a6:20: db:83:34:d4:e0:06:cd:00:98:c2:83:92:5f:c8:33:05:54:98: 43:28:bb:b0:9b:21:3c:a8:7c:6f:2c:40:7d:88:1a:dc:71:9d: 7d:6f:d3:10:87:7c:f6:70:17:97:a9:e3:e0:f3:ff:41:d7:23: 00:66:3e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjUxMTA1MDIxNTEwWhcNMjUxMTEyMDIxNTEwWjAYMRYwFAYD VQQDEw02OTBhYjMyZS05MTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiYzB3NVcOlzb9GK90LaacyBuGSJu0Ih6qhZNXtz2FGgSeE/Qg2tDnuTHHkW bRsqQcXuuyimpvCv4dhAKDvl83D2Rfg2JAfViu7E2PAvtxU1/OgJ+CnEeiE6WQ3M icGVvFkZOc1pwl+7h3Xk89L/oPVLoqpQeAR7SdoeY14ZCevplXBTw3bmVbYVgrKp YAtys68Wo1wwIKZ1bhsyweuZbGh04ii7JyX5O1cos5pAEhJiei4Z2PEdFGvcyIbk t0c7iemcN7MUjd97aQKh8lcMP6Al0hDyb0CZKuFBAbJdAeVGXHXtHfQX4E+JHV5n SkaGI9FbD0Ka1wncGLzkjVInswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDNRU6O Gg+441c5u212Hhtq/H7GMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFYWJ36vMaKPfLGgElA6zMSQepC6ANJlO0bwNU/D1YYPVMKRuUB8V AbcCPxPai139bdnH+wu7L27Yebnk9+TzZSkCeulnsGPogHUn47InoiBSEPpORi+4 4nx3KCLFs1TlDulv2X/WNr8mUuAhIQZUZ77pby9OZd4cWSNM8tw3IZQXUM1l0SOg 7Bhx/uAgopM4KuO54jlOzrOHLKhrmo7v2aNiilesIRQ8Xc4KGg9ciSAnvtgo5gY8 4IgTEDz2VTXmr1dEpiDbgzTU4AbNAJjCg5JfyDMFVJhDKLuwmyE8qHxvLEB9iBrc cZ19b9MQh3z2cBeXqePg8/9B1yMAZj7G -----END CERTIFICATE-----Generated at Wed Nov 5 22:22:36 2025 by rpki-client