$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json) Hash identifier: vZV9w7FnbH6HLzLifDDrCx65deVlL8sAfv8czNSmjpQ= Subject key identifier: 09:06:AC:47:EF:3D:E4:D8:8E:26:BE:F2:55:9F:78:37:A6:7A:57:28 Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1 Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft Manifest number: 14 Signing time: Mon 03 Nov 2025 07:54:25 +0000 Manifest this update: Mon 03 Nov 2025 07:54:25 +0000 Manifest next update: Mon 10 Nov 2025 07:54:25 +0000 Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: BmPl721gXmT2GkNPn4LJ18EABhKhwnHqNwBpkC2M8y0=) 2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: OC380MFsyyoyM7tX6fVQV1xbBPX87Cl75OkK9UhRng4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1 Validity Not Before: Nov 3 07:54:25 2025 GMT Not After : Nov 10 07:54:25 2025 GMT Subject: CN=69085fb1-e303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:ca:68:73:a4:0b:91:77:1d:41:45:48:cc: d5:9e:24:74:52:7c:9a:4a:e5:d6:ac:78:14:97:2b: 22:44:b9:31:70:c3:12:04:b0:e1:83:13:dd:4a:48: 67:7c:03:dc:79:22:30:6e:72:44:03:64:2b:bb:1d: 21:04:7f:2e:f1:c5:0d:a2:c4:e8:4d:19:75:16:fe: a6:4f:53:df:50:9c:f4:8d:97:8d:d1:1b:75:6f:82: 27:34:b2:c7:9d:62:57:e9:78:79:e4:af:c0:ab:fd: 21:b6:25:a4:d0:43:13:db:e9:00:77:80:2e:e1:b1: b9:f9:ea:8e:ab:08:91:a1:91:7a:4f:de:dc:ea:62: 8a:6a:0d:01:91:5d:a8:e7:4e:fc:cd:6d:d6:82:98: b7:7a:c7:f6:55:27:74:63:68:b9:68:87:e6:9a:ba: 5c:a6:57:c4:a0:f0:7e:8e:2e:41:26:61:bb:da:57: 08:57:a3:e6:68:54:41:7e:3a:5a:9a:9e:0c:7d:c0: f8:56:77:ed:07:05:6c:36:03:2e:b2:b2:33:a8:e3: 5d:22:5d:87:a6:74:33:47:cc:81:73:e3:d9:ef:a0: b4:0a:79:e2:fe:26:7f:2f:83:c4:81:b3:5a:08:f5: e4:f5:a9:f9:49:c4:e3:1f:bb:e6:ba:9a:71:4c:94: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:06:AC:47:EF:3D:E4:D8:8E:26:BE:F2:55:9F:78:37:A6:7A:57:28 X509v3 Authority Key Identifier: keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:7a:3b:86:cc:8f:8f:0e:b5:44:98:59:d9:05:41:ca:81: e4:f5:2a:6d:9a:3d:da:4f:d1:5d:f9:fd:d9:79:8d:8b:c5:7e: f2:5b:2b:01:85:d6:47:a0:38:17:e5:2d:bc:b7:b2:c7:1c:d7: d7:ac:a4:cb:ed:55:d9:9e:c1:ca:7b:98:6a:e0:62:ea:39:57: b6:ad:c2:6b:76:7f:11:a5:f5:c0:b5:9c:fb:c3:e5:d8:06:6e: ff:e5:82:ce:31:a2:3e:3d:28:ee:02:4d:15:81:c1:33:58:d2: b2:37:8e:69:7c:c0:b0:f7:f9:c6:e0:4d:de:38:8c:42:bd:42: 79:a2:85:2b:a1:e5:0d:cf:83:df:6a:80:0f:4c:2f:18:3c:f8: e1:47:23:34:bf:16:c0:e9:56:8e:bf:54:0c:4a:ed:7a:47:37: 60:0a:01:23:20:4e:34:c5:d0:fa:02:b0:94:42:ce:f9:50:ac: 86:93:71:27:7f:cc:60:7c:b3:b5:c3:d9:43:27:4b:0c:83:85: cc:49:c2:e1:86:5f:ad:1d:5b:98:8d:12:7d:87:9a:43:de:37: 26:95:d8:17:a7:1a:04:05:a2:e2:77:0d:89:a2:df:bc:e1:5a: 15:76:23:44:71:08:ca:b9:e6:b2:ee:53:55:c3:2e:1b:9e:3d: 8a:4b:b7:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNDdCODU0MzY4NUQzMDFGRUVGOTBDRDEyRTUxNThGNzQw RDZCNkNCMTAeFw0yNTExMDMwNzU0MjVaFw0yNTExMTAwNzU0MjVaMBgxFjAUBgNV BAMTDTY5MDg1ZmIxLWUzMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClCMpoc6QLkXcdQUVIzNWeJHRSfJpK5daseBSXKyJEuTFwwxIEsOGDE91KSGd8 A9x5IjBuckQDZCu7HSEEfy7xxQ2ixOhNGXUW/qZPU99QnPSNl43RG3Vvgic0ssed YlfpeHnkr8Cr/SG2JaTQQxPb6QB3gC7hsbn56o6rCJGhkXpP3tzqYopqDQGRXajn TvzNbdaCmLd6x/ZVJ3RjaLloh+aaulymV8Sg8H6OLkEmYbvaVwhXo+ZoVEF+Olqa ngx9wPhWd+0HBWw2Ay6ysjOo410iXYemdDNHzIFz49nvoLQKeeL+Jn8vg8SBs1oI 9eT1qflJxOMfu+a6mnFMlOIVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQasR+89 5NiOJr7yVZ94N6Z6VygwHwYDVR0jBBgwFoAUR7hUNoXTAf7vkM0S5RWPdA1rbLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0VFQjgwOEI4OUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3dmtNMFM1UldQZEExcmJM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdoVU5vWFRBZjd2a00wUzVSV1BkQTFyYkxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0VFQjgwOEI4OUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3 dmtNMFM1UldQZEExcmJMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQTejuGzI+PDrVEmFnZBUHKgeT1Km2aPdpP0V35/dl5jYvFfvJbKwGF 1kegOBflLby3sscc19espMvtVdmewcp7mGrgYuo5V7atwmt2fxGl9cC1nPvD5dgG bv/lgs4xoj49KO4CTRWBwTNY0rI3jml8wLD3+cbgTd44jEK9QnmihSuh5Q3Pg99q gA9MLxg8+OFHIzS/FsDpVo6/VAxK7XpHN2AKASMgTjTF0PoCsJRCzvlQrIaTcSd/ zGB8s7XD2UMnSwyDhcxJwuGGX60dW5iNEn2HmkPeNyaV2BenGgQFouJ3DYmi37zh WhV2I0RxCMq55rLuU1XDLhuePYpLtwU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:51 2025 by rpki-client