$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: CFtSjrhPST+d0oANPPVq2wVIQ9VH2HGVysmPqXgCTxU= Subject key identifier: 5C:00:85:C6:FC:59:E1:62:D4:05:1B:0A:68:89:09:CC:56:B8:BC:E5 Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 34D3 Signing time: Sun 02 Nov 2025 14:34:26 +0000 Manifest this update: Sun 02 Nov 2025 14:34:25 +0000 Manifest next update: Sun 09 Nov 2025 14:34:25 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: NEH6U7yvoHrebe8nhJWJHg+GUj45nZQzvdDOYFMTbuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: Nov 2 14:34:25 2025 GMT Not After : Nov 9 14:34:25 2025 GMT Subject: CN=69076bf1-b9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:1a:9a:d6:98:e8:0b:1d:8a:7a:16:53:db: ba:cd:25:46:ae:64:cb:33:88:2e:9a:c5:b4:ad:5d: 80:47:b2:29:15:84:83:11:9d:09:d9:e4:ba:04:8b: 24:57:17:99:39:d8:cd:01:69:7d:59:43:d5:c1:d3: b9:eb:60:03:9c:b5:fa:20:0a:e8:30:5f:c9:a1:9a: 6f:c7:93:27:66:c9:d0:7c:12:91:c4:32:ff:c0:34: c0:9c:08:67:1e:e5:60:cc:38:6d:96:ef:d4:0f:8b: 2d:a1:ad:b2:57:8e:4e:78:12:4c:fd:f4:07:3e:33: 2b:1c:89:78:26:8f:f7:b7:a8:34:ba:fd:89:87:28: e0:56:31:39:78:4f:34:b6:96:17:1e:40:16:b5:90: 20:f8:fb:69:ba:1a:bb:10:48:ea:bd:8b:ad:8e:4e: 0c:62:59:18:68:49:5b:15:16:25:4f:2e:ae:ee:e8: 36:f7:04:73:57:d6:76:3e:d1:58:86:15:26:f5:f2: f9:60:e9:a1:4e:fd:06:2a:2c:5e:52:d6:4d:25:d7: fa:14:c3:34:4f:61:a8:94:04:28:66:54:c5:f3:4e: ea:51:5f:fa:02:6a:9f:62:93:68:e3:ed:a0:6b:21: 5a:f4:af:57:04:5b:7e:5f:b5:36:15:32:d9:1f:78: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:00:85:C6:FC:59:E1:62:D4:05:1B:0A:68:89:09:CC:56:B8:BC:E5 X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:41:69:b5:10:df:fb:77:61:03:7f:20:67:7f:48:23:24:39: 27:71:81:fa:f1:6b:65:2e:0e:f8:fc:4f:94:bb:58:24:19:f7: a8:2a:23:16:b6:86:e2:0b:fa:f9:47:c7:c1:0d:e7:f8:b9:b0: e9:f7:07:f5:b3:6a:2d:2c:8b:51:aa:d5:2f:00:e6:38:8e:d2: 3a:97:93:83:1e:44:30:aa:ef:b3:9d:8c:4c:be:59:29:2e:e2: 56:b1:f8:7c:00:e8:25:db:f9:41:e9:fa:1d:c9:c7:cd:57:c6: 1f:ec:50:2d:1d:8e:01:f9:56:74:34:b6:73:c1:ba:b4:f2:68: 95:23:13:44:1d:f7:27:8c:d3:4c:6a:9c:2f:b6:15:47:e3:b0: 09:91:49:42:d0:0f:5c:90:36:f0:53:d6:15:08:8f:00:a7:ab: e6:39:b5:8a:0a:a0:ef:be:e9:aa:fa:91:ff:f2:1b:48:3b:62: eb:7d:73:90:ec:62:8e:fe:f3:b0:53:e7:78:b4:c6:fb:ef:0c: 39:37:aa:14:7a:43:37:c8:87:5a:61:9b:8f:23:30:83:cc:d0: 78:1f:48:0b:fb:8f:a3:bf:3c:be:22:01:65:0d:70:4d:57:bc: f7:7e:cd:99:2b:61:38:c0:cb:3a:bb:c0:ee:5f:e7:9e:7e:0b: db:82:1f:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjUxMTAyMTQzNDI1WhcNMjUxMTA5MTQzNDI1WjAYMRYwFAYD VQQDEw02OTA3NmJmMS1iOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/gamtaY6AsdinoWU9u6zSVGrmTLM4gumsW0rV2AR7IpFYSDEZ0J2eS6BIsk VxeZOdjNAWl9WUPVwdO562ADnLX6IAroMF/JoZpvx5MnZsnQfBKRxDL/wDTAnAhn HuVgzDhtlu/UD4stoa2yV45OeBJM/fQHPjMrHIl4Jo/3t6g0uv2JhyjgVjE5eE80 tpYXHkAWtZAg+Ptpuhq7EEjqvYutjk4MYlkYaElbFRYlTy6u7ug29wRzV9Z2PtFY hhUm9fL5YOmhTv0GKixeUtZNJdf6FMM0T2GolAQoZlTF807qUV/6AmqfYpNo4+2g ayFa9K9XBFt+X7U2FTLZH3h8JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwAhcb8 WeFi1AUbCmiJCcxWuLzlMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGQWm1EN/7d2EDfyBnf0gjJDkncYH68WtlLg74/E+Uu1gkGfeoKiMW tobiC/r5R8fBDef4ubDp9wf1s2otLItRqtUvAOY4jtI6l5ODHkQwqu+znYxMvlkp LuJWsfh8AOgl2/lB6fodycfNV8Yf7FAtHY4B+VZ0NLZzwbq08miVIxNEHfcnjNNM apwvthVH47AJkUlC0A9ckDbwU9YVCI8Ap6vmObWKCqDvvumq+pH/8htIO2LrfXOQ 7GKO/vOwU+d4tMb77ww5N6oUekM3yIdaYZuPIzCDzNB4H0gL+4+jvzy+IgFlDXBN V7z3fs2ZK2E4wMs6u8DuX+eefgvbgh9k -----END CERTIFICATE-----Generated at Tue Nov 4 12:32:10 2025 by rpki-client