$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: RqxoWSu8R5FT4U2auClqMXYZxBytQFPifg2Ki/yCxoE= Subject key identifier: BB:B4:8D:EE:66:63:62:D2:44:95:C3:31:8E:D6:42:E7:7C:8E:52:54 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 14D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 14B4 Signing time: Tue 04 Nov 2025 16:58:31 +0000 Manifest this update: Tue 04 Nov 2025 16:58:31 +0000 Manifest next update: Tue 11 Nov 2025 16:58:31 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: bQyUoO+NAxCgg6ch2f7tlmWLc5yxUZ4x4D7Ne9b6dW0=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5330 (0x14d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Nov 4 16:58:31 2025 GMT Not After : Nov 11 16:58:31 2025 GMT Subject: CN=690a30b7-6102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:30:d2:97:52:f4:c6:54:9b:cf:72:c0:0e: d7:ec:42:0a:45:2c:52:cf:62:ec:85:66:5f:ba:01: 6d:54:30:e1:c5:4e:e7:12:77:4f:db:85:3b:55:30: cb:e8:3e:bd:e0:c9:42:e1:d0:8c:66:97:dc:be:f7: 1a:c1:c3:be:25:a9:72:7e:0f:42:f1:f7:29:17:63: ac:e7:3a:ac:d2:e2:92:c5:c5:f6:66:4a:62:bd:0a: b6:a0:71:7a:15:f2:84:9c:7b:33:8d:f1:dd:a2:c3: 97:f2:45:d1:f0:f0:d3:4b:06:96:9a:8e:b6:09:6e: 67:ce:e8:98:18:f1:c2:ae:76:af:bd:1d:92:68:4f: 80:95:f1:b3:64:a6:32:48:48:75:dc:72:93:c1:6b: 00:1b:78:7d:da:c2:be:c7:53:5b:24:a0:0e:ca:11: a1:97:9b:39:89:9c:63:0f:56:c9:09:7a:91:3b:55: 44:e4:9a:44:db:69:45:1b:db:57:d8:b4:50:2e:31: 42:3d:0c:67:96:31:6d:9d:78:0b:3f:ee:84:90:25: 19:9d:ed:98:44:dc:63:ab:2c:82:c6:ba:08:fd:e3: 0c:69:af:9f:6c:b4:82:8a:90:48:c0:d6:8a:e9:ca: 11:bd:53:68:10:37:3f:b7:8d:c2:88:96:24:28:57: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:8D:EE:66:63:62:D2:44:95:C3:31:8E:D6:42:E7:7C:8E:52:54 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e0:32:ca:ff:44:30:a9:be:82:df:22:38:17:6c:1a:99:b5: 49:a2:07:04:3b:62:aa:61:97:77:e4:b7:5a:bd:6f:7c:02:ab: 66:32:29:49:1c:81:1d:25:ab:06:24:73:c5:39:1a:c8:44:52: 9d:cf:9f:ea:c9:e8:e7:84:24:61:b1:fe:08:3a:7f:ca:a0:a5: f2:b4:83:f0:77:70:b3:28:70:5b:8f:75:e9:94:28:5b:c2:1c: da:17:4d:cc:f4:39:05:99:70:89:e9:e6:84:0c:57:d6:b7:1e: b4:d1:fb:50:f3:dd:cd:59:b0:26:05:04:22:12:a0:0d:ad:00: 5b:e9:e7:9d:b3:9a:c1:37:cf:5d:04:e6:db:fa:0d:0a:7a:0c: 8f:85:6c:87:fb:7f:a8:da:79:77:a8:ed:ce:95:d3:ad:29:40: 81:70:ae:df:9a:9d:6b:21:f2:52:f8:e9:f4:9a:5e:f0:1a:c7: 45:6a:d2:0d:c6:85:1e:e3:ab:4b:e2:a4:8b:52:d9:f5:1e:84: 1b:3e:cf:39:c0:ab:db:b5:11:5a:3c:8e:20:c3:ae:87:d3:99: 4f:5f:7f:03:44:27:3c:77:a3:8c:a9:49:44:e7:a2:96:0f:a8: ef:df:7d:b9:90:9c:f1:b3:05:7d:28:5d:a2:e2:f9:d7:1c:2e: 3e:f7:6c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUxMTA0MTY1ODMxWhcNMjUxMTExMTY1ODMxWjAYMRYwFAYD VQQDEw02OTBhMzBiNy02MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjMw0pdS9MZUm89ywA7X7EIKRSxSz2LshWZfugFtVDDhxU7nEndP24U7VTDL 6D694MlC4dCMZpfcvvcawcO+Jalyfg9C8fcpF2Os5zqs0uKSxcX2ZkpivQq2oHF6 FfKEnHszjfHdosOX8kXR8PDTSwaWmo62CW5nzuiYGPHCrnavvR2SaE+AlfGzZKYy SEh13HKTwWsAG3h92sK+x1NbJKAOyhGhl5s5iZxjD1bJCXqRO1VE5JpE22lFG9tX 2LRQLjFCPQxnljFtnXgLP+6EkCUZne2YRNxjqyyCxroI/eMMaa+fbLSCipBIwNaK 6coRvVNoEDc/t43CiJYkKFciFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLu0je5m Y2LSRJXDMY7WQud8jlJUMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK4DLK/0Qwqb6C3yI4F2wambVJogcEO2KqYZd35LdavW98AqtmMilJ HIEdJasGJHPFORrIRFKdz5/qyejnhCRhsf4IOn/KoKXytIPwd3CzKHBbj3XplChb whzaF03M9DkFmXCJ6eaEDFfWtx600ftQ893NWbAmBQQiEqANrQBb6eeds5rBN89d BObb+g0KegyPhWyH+3+o2nl3qO3OldOtKUCBcK7fmp1rIfJS+On0ml7wGsdFatIN xoUe46tL4qSLUtn1HoQbPs85wKvbtRFaPI4gw66H05lPX38DRCc8d6OMqUlE56KW D6jv3325kJzxswV9KF2i4vnXHC4+92xY -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:00 2025 by rpki-client