$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft File: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json) Hash identifier: 0pzUH9i2wL4XfD0b/eYZJho7u0LZ/LKL/ZfhLNSbiPY= Subject key identifier: E3:EC:32:FD:46:7A:55:DF:D5:F6:57:F5:27:E7:F1:B4:FE:5E:59:5D Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft Manifest number: 0141 Signing time: Wed 05 Nov 2025 04:36:37 +0000 Manifest this update: Wed 05 Nov 2025 04:36:37 +0000 Manifest next update: Wed 12 Nov 2025 04:36:37 +0000 Files and hashes: 1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: BwVLDO2DoZKidKFDOGXSOJkdTQiTRdSnYa2r9xNVeQI=) 2: 905F46DEE05A11EFA20EC133C4F9AE02.roa (hash: NVqWotupuz8BWtoYreL5BX+y3xeJG+CMVF0kE4qkEmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Validity Not Before: Nov 5 04:36:37 2025 GMT Not After : Nov 12 04:36:37 2025 GMT Subject: CN=690ad455-e7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:d8:0f:dc:d9:85:7d:93:1e:5d:37:5a:04: a7:b8:3f:14:81:34:2f:9e:25:58:9c:74:93:59:5f: f8:63:ae:0a:ee:d5:2d:69:07:5c:29:e9:9f:f5:b3: f3:1c:f3:0b:03:f8:a2:0c:34:9b:47:e9:88:31:19: d2:3a:e6:ea:bf:d3:9f:15:5e:ff:b3:f8:68:66:72: 28:22:68:50:53:14:0a:3c:69:de:aa:6d:1d:df:7c: 41:33:a3:5c:36:1d:40:c3:6d:bd:95:23:73:72:f3: 0f:3f:12:1a:11:72:68:07:ca:64:53:77:b0:05:2f: 63:99:e1:ee:96:8d:ac:3e:4f:89:3b:96:8a:42:cf: e0:bb:e4:e4:c6:8a:0f:82:b4:ab:37:d3:5a:fd:3b: fb:60:d1:fa:f5:72:b5:c1:6e:20:f3:62:0a:37:53: 67:90:4e:a5:60:48:0e:72:2e:c7:8b:6f:ad:e5:86: 49:d8:f0:54:78:4f:55:d5:9f:be:c9:1a:61:f1:51: 46:5a:a1:8c:67:93:f1:2c:45:e6:25:64:8d:3a:d5: 3c:01:28:c7:c2:94:85:59:6f:c9:85:d6:00:17:23: b7:73:76:71:d5:06:1d:c7:68:17:f0:42:33:d0:10: 16:10:e3:07:70:f4:84:41:bb:a8:00:11:03:88:f1: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EC:32:FD:46:7A:55:DF:D5:F6:57:F5:27:E7:F1:B4:FE:5E:59:5D X509v3 Authority Key Identifier: keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:8f:14:be:4e:24:a6:3b:48:cb:7f:c4:0a:de:3a:83:51:9b: 79:d4:ac:df:1d:a7:ef:b0:77:47:25:af:d1:48:f2:86:6f:72: e3:4a:4c:07:b3:4e:f4:6e:1a:63:99:9c:e4:8b:d0:d4:3d:36: f9:f4:e5:a1:4e:21:ef:6c:b0:79:b1:cb:c8:20:81:54:73:b9: 7e:a4:8c:90:f1:d0:24:bc:82:0e:ed:35:58:97:98:4e:af:45: fc:1c:2c:5c:e2:9c:1c:40:c0:6c:6b:97:db:7a:52:0f:2e:51: 4c:87:e7:3f:e3:a0:35:81:54:80:a7:a6:3f:9e:86:c8:e6:c0: 9a:b5:3d:6b:a7:7f:22:9e:e4:7f:50:e6:fa:01:bb:cc:f0:70: 24:da:55:71:45:59:e0:23:dd:fe:f5:fe:fb:93:18:f7:d3:90: a3:0f:ff:de:ea:79:ed:c6:6e:fa:6d:eb:3b:83:aa:66:60:e3: 6f:f5:e9:bb:56:24:f1:a0:4d:00:44:f7:e9:de:df:df:d6:1d: 09:46:23:7d:3b:1a:cf:e9:2a:0c:d0:67:66:54:52:38:b9:f2: 8b:f5:69:95:43:f5:52:92:80:4b:d1:d8:86:ee:65:c0:ef:0e: 99:b8:18:21:22:ab:dd:ac:92:62:3f:10:4c:01:9a:8e:0a:a9: 6c:6c:22:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4MDYxMTAvBgNVBAUTKEVEMUU2M0M0Q0E4NTIwNEVDQkFEMjZDRTJDOTQ2MjY0 NUUwQjFDQUQwHhcNMjUxMTA1MDQzNjM3WhcNMjUxMTEyMDQzNjM3WjAYMRYwFAYD VQQDEw02OTBhZDQ1NS1lN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3b7YD9zZhX2THl03WgSnuD8UgTQvniVYnHSTWV/4Y64K7tUtaQdcKemf9bPz HPMLA/iiDDSbR+mIMRnSOubqv9OfFV7/s/hoZnIoImhQUxQKPGneqm0d33xBM6Nc Nh1Aw229lSNzcvMPPxIaEXJoB8pkU3ewBS9jmeHulo2sPk+JO5aKQs/gu+TkxooP grSrN9Na/Tv7YNH69XK1wW4g82IKN1NnkE6lYEgOci7Hi2+t5YZJ2PBUeE9V1Z++ yRph8VFGWqGMZ5PxLEXmJWSNOtU8ASjHwpSFWW/JhdYAFyO3c3Zx1QYdx2gX8EIz 0BAWEOMHcPSEQbuoABEDiPGHeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPsMv1G elXf1fZX9Sfn8bT+XlldMB8GA1UdIwQYMBaAFO0eY8TKhSBOy60mziyUYmReCxyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODgwNi8zOUQwODdBQUQ2 OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklFN0xyU2JPTEpSaVpGNExI SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODgwNi8zOUQwODdBQUQ2OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklF N0xyU2JPTEpSaVpGNExISzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTjxS+TiSmO0jLf8QK3jqDUZt51KzfHafvsHdHJa/RSPKGb3LjSkwH s070bhpjmZzki9DUPTb59OWhTiHvbLB5scvIIIFUc7l+pIyQ8dAkvIIO7TVYl5hO r0X8HCxc4pwcQMBsa5fbelIPLlFMh+c/46A1gVSAp6Y/nobI5sCatT1rp38inuR/ UOb6AbvM8HAk2lVxRVngI93+9f77kxj305CjD//e6nntxm76bes7g6pmYONv9em7 ViTxoE0ARPfp3t/f1h0JRiN9OxrP6SoM0GdmVFI4ufKL9WmVQ/VSkoBL0diG7mXA 7w6ZuBghIqvdrJJiPxBMAZqOCqlsbCIL -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:07 2025 by rpki-client