$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: 3dHUhQPWl+NcnNXXBNxuXbt3LbLtx+IAPebpCGmwKV4= Subject key identifier: AC:F6:F1:37:5C:99:85:76:1E:62:1C:10:5D:17:61:31:31:5C:B5:51 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0640 Signing time: Sun 19 Oct 2025 00:15:39 +0000 Manifest this update: Sun 19 Oct 2025 00:15:38 +0000 Manifest next update: Sun 26 Oct 2025 00:15:38 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: xB7WjNVLc/pZ37prb++Sk1f1Bvj1HuTaGzg5aJTxniQ=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: OBNzTX6aR4jmrgmRDfzbRnwCFSG478b3wNooMI8zuUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Oct 19 00:15:38 2025 GMT Not After : Oct 26 00:15:38 2025 GMT Subject: CN=68f42daa-5738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:42:20:68:b2:95:f2:08:25:c3:ff:db:e9: 0f:bf:59:eb:be:1a:5e:f4:96:f0:f0:78:d0:e6:3e: fe:02:89:00:2a:a9:fb:19:20:02:b1:2b:46:45:36: ef:3d:25:d3:17:a5:c7:eb:1b:6e:8e:6f:9d:a3:44: 78:9d:5d:83:8a:3a:3f:81:24:c0:e2:c9:58:4a:a1: 56:b4:69:38:ba:73:86:ed:70:dd:b7:8e:26:83:78: e5:f7:1e:b4:6c:a4:c3:a6:b2:81:d1:b8:40:19:61: 04:d2:d6:61:23:a5:c8:70:24:36:6b:24:c9:f2:46: 15:54:3a:37:32:8f:da:a8:de:a1:90:eb:b0:e9:cf: 45:88:c4:e6:6e:6c:55:cf:82:c5:cb:25:eb:c8:8c: 5a:14:9d:3d:2e:4c:65:fd:3a:83:b6:b9:27:b4:4f: d0:c3:ae:5f:77:7c:8f:51:6d:1f:96:a3:7c:a8:b3: 29:81:2c:e4:e5:a7:bb:74:c9:26:f5:a6:53:32:7c: 1b:46:a4:07:f4:21:5c:2a:26:47:3e:75:0c:d0:18: fa:14:b8:80:63:1f:8f:6b:b2:a8:38:c9:7b:b5:9b: fa:7a:a7:6c:b7:69:3c:c3:02:71:96:d7:42:93:a0: e3:82:81:48:bc:d9:ae:b1:5a:0d:a6:34:ef:56:da: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:F1:37:5C:99:85:76:1E:62:1C:10:5D:17:61:31:31:5C:B5:51 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b5:a0:76:36:9e:00:f4:71:1f:bc:47:4f:e8:f3:a3:df:7b: a6:1c:03:1c:c1:0a:7d:e7:5b:9e:b1:ce:53:cd:b4:65:21:52: a9:2c:76:e6:90:3e:84:51:73:66:30:d0:2b:5e:7e:12:0a:48: 10:e9:24:55:2b:25:ff:12:63:c0:05:d5:3d:ab:92:ff:dd:a1: a3:1f:eb:4f:33:cf:54:2b:7c:58:57:01:26:20:b1:2b:fc:43: 07:ff:3f:03:15:f2:57:89:ec:cf:6b:66:b0:39:c2:e9:73:4b: f2:aa:6c:04:5f:ee:b6:b8:98:7c:a2:63:3a:4e:1d:c4:63:fd: 57:60:79:cd:cf:fe:ec:55:de:07:ce:16:ae:2e:30:b8:42:77: 23:a8:6e:a4:37:8c:f3:74:24:62:b1:39:27:c1:bc:e0:8c:3c: 2d:cb:a0:49:48:9b:e8:09:33:bc:52:3c:ba:3d:a0:9a:75:46: 3a:eb:67:34:27:aa:71:a5:b7:df:00:7d:e9:ef:b4:5b:f2:0f: 79:5b:cb:4a:ae:4b:5e:52:16:91:c7:d5:68:cc:7a:77:5a:15: a5:99:95:b5:0e:43:7b:01:45:1c:a1:e0:8c:a3:a4:f9:c7:e8: 22:97:74:c1:1e:a7:c1:03:d8:c4:dd:12:09:83:b1:c9:2e:24: bb:3a:8e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUxMDE5MDAxNTM4WhcNMjUxMDI2MDAxNTM4WjAYMRYwFAYD VQQDEw02OGY0MmRhYS01NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37FCIGiylfIIJcP/2+kPv1nrvhpe9Jbw8HjQ5j7+AokAKqn7GSACsStGRTbv PSXTF6XH6xtujm+do0R4nV2Dijo/gSTA4slYSqFWtGk4unOG7XDdt44mg3jl9x60 bKTDprKB0bhAGWEE0tZhI6XIcCQ2ayTJ8kYVVDo3Mo/aqN6hkOuw6c9FiMTmbmxV z4LFyyXryIxaFJ09Lkxl/TqDtrkntE/Qw65fd3yPUW0flqN8qLMpgSzk5ae7dMkm 9aZTMnwbRqQH9CFcKiZHPnUM0Bj6FLiAYx+Pa7KoOMl7tZv6eqdst2k8wwJxltdC k6DjgoFIvNmusVoNpjTvVtouVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz28Tdc mYV2HmIcEF0XYTExXLVRMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQtaB2Np4A9HEfvEdP6POj33umHAMcwQp951uesc5TzbRlIVKpLHbm kD6EUXNmMNArXn4SCkgQ6SRVKyX/EmPABdU9q5L/3aGjH+tPM89UK3xYVwEmILEr /EMH/z8DFfJXiezPa2awOcLpc0vyqmwEX+62uJh8omM6Th3EY/1XYHnNz/7sVd4H zhauLjC4QncjqG6kN4zzdCRisTknwbzgjDwty6BJSJvoCTO8Ujy6PaCadUY662c0 J6pxpbffAH3p77Rb8g95W8tKrkteUhaRx9VozHp3WhWlmZW1DkN7AUUcoeCMo6T5 x+gil3TBHqfBA9jE3RIJg7HJLiS7Oo7Y -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:08 2025 by rpki-client