$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json) Hash identifier: NorxGJfKgl787Sx+ou7fY4p8SaJVcAH8MBRak9NUJYk= Subject key identifier: E0:CA:C1:AE:30:EA:A5:D8:5D:F0:66:AF:30:1A:AC:0D:F8:17:7A:C7 Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft Manifest number: 0224 Signing time: Wed 05 Nov 2025 02:16:03 +0000 Manifest this update: Wed 05 Nov 2025 02:16:03 +0000 Manifest next update: Wed 12 Nov 2025 02:16:03 +0000 Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: 8UviVCmRBa/+7CLEKIbcty5d/wTsU1mcYJwZidvgb6w=) 2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Validity Not Before: Nov 5 02:16:03 2025 GMT Not After : Nov 12 02:16:03 2025 GMT Subject: CN=690ab363-f8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:b7:f6:bf:cf:8c:42:9b:2a:fc:dc:79:2c: 8b:42:03:a4:1c:3f:0c:10:66:cf:87:2e:fe:34:49: 93:41:52:e2:b9:e6:93:53:ca:88:a2:ac:bf:df:7e: ab:55:64:3f:e2:82:00:34:97:03:51:ef:f5:11:3b: 39:ad:e1:86:fe:05:c8:5e:71:44:ca:41:26:46:0e: 7d:24:d6:c8:42:95:d5:98:b6:42:83:bd:8d:2d:94: 23:af:30:f4:7f:1c:8a:13:48:84:f0:ba:7b:77:3a: ba:f7:d8:d4:26:7b:03:94:65:bd:fd:09:2a:79:ee: 16:39:5a:4b:4f:80:5d:5a:84:ce:69:33:ca:0f:d2: dc:b7:92:f7:df:3c:00:c6:f5:88:23:34:a0:82:29: a7:c6:29:1b:9e:96:6f:c9:94:71:41:1d:6f:55:bc: 77:95:47:7b:9b:b0:b0:8d:42:2d:e8:b8:8b:2c:d4: eb:19:21:33:8e:65:db:9c:31:ab:0e:5d:e1:dd:03: 7b:11:0f:bb:00:d3:9f:9e:bf:84:e0:6f:9c:4a:5e: cd:60:cd:23:a0:48:4a:ef:20:47:85:f3:f0:66:d1: 99:3b:90:45:ff:23:05:88:8e:e5:61:ef:23:3a:19: 8e:26:35:c1:9f:a6:f7:50:55:3d:30:c9:29:02:18: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CA:C1:AE:30:EA:A5:D8:5D:F0:66:AF:30:1A:AC:0D:F8:17:7A:C7 X509v3 Authority Key Identifier: keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:c7:a4:83:ac:17:f6:0f:5c:33:07:2d:cc:72:d8:73:81: 3f:76:9f:d5:66:44:38:84:6b:53:2c:74:cd:77:62:7a:8e:43: 73:fc:d4:1d:0b:88:55:9b:9c:11:e4:1a:e7:37:b0:d4:54:9a: 3b:24:a2:9a:54:2e:9a:a4:cc:6b:6e:74:27:04:20:61:e3:e0: c2:46:a0:e4:f0:ca:33:84:00:73:17:0a:c3:34:c6:ed:f8:22: f1:0c:96:15:26:e0:4d:a0:e6:b5:31:79:b6:de:e1:7a:7e:f0: 7b:f4:c9:08:d2:70:58:7f:7e:dc:18:b8:d1:e5:6d:51:19:fc: 30:48:f7:ff:5a:e7:41:26:5d:fe:33:67:8c:46:50:e5:ae:1c: 17:0c:7b:8b:7b:1e:eb:34:31:37:8f:0e:e7:18:06:b4:2c:1f: ac:29:6e:83:5d:00:eb:2b:2a:fb:68:0f:c5:90:6a:82:b1:26: 0d:57:85:00:58:b7:e1:d0:52:d7:54:80:1c:61:fb:3c:09:f5: 1a:c4:83:e7:2b:73:5c:82:c4:e7:fb:8c:b6:1a:de:2d:a6:3b: 6f:49:74:fa:0f:f7:a7:bd:44:2b:20:71:28:02:5f:58:87:1f: dd:51:90:37:3f:e5:01:27:68:8f:af:0a:0a:c9:59:2a:23:bf: 4a:24:56:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG RkZEMDgxNDAwHhcNMjUxMTA1MDIxNjAzWhcNMjUxMTEyMDIxNjAzWjAYMRYwFAYD VQQDEw02OTBhYjM2My1mOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVm39r/PjEKbKvzceSyLQgOkHD8MEGbPhy7+NEmTQVLiueaTU8qIoqy/336r VWQ/4oIANJcDUe/1ETs5reGG/gXIXnFEykEmRg59JNbIQpXVmLZCg72NLZQjrzD0 fxyKE0iE8Lp7dzq699jUJnsDlGW9/Qkqee4WOVpLT4BdWoTOaTPKD9Lct5L33zwA xvWIIzSggimnxikbnpZvyZRxQR1vVbx3lUd7m7CwjUIt6LiLLNTrGSEzjmXbnDGr Dl3h3QN7EQ+7ANOfnr+E4G+cSl7NYM0joEhK7yBHhfPwZtGZO5BF/yMFiI7lYe8j OhmOJjXBn6b3UFU9MMkpAhiKWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODKwa4w 6qXYXfBmrzAarA34F3rHMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV Snp0RjRia1lFN19fX1FnVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV08ekg6wX9g9cMwctzHLYc4E/dp/VZkQ4hGtTLHTNd2J6jkNz/NQd C4hVm5wR5BrnN7DUVJo7JKKaVC6apMxrbnQnBCBh4+DCRqDk8MozhABzFwrDNMbt +CLxDJYVJuBNoOa1MXm23uF6fvB79MkI0nBYf37cGLjR5W1RGfwwSPf/WudBJl3+ M2eMRlDlrhwXDHuLex7rNDE3jw7nGAa0LB+sKW6DXQDrKyr7aA/FkGqCsSYNV4UA WLfh0FLXVIAcYfs8CfUaxIPnK3NcgsTn+4y2Gt4tpjtvSXT6D/envUQrIHEoAl9Y hx/dUZA3P+UBJ2iPrwoKyVkqI79KJFZL -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:03 2025 by rpki-client