$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json) Hash identifier: +14VKXusFhw87EmYdbzkS8iXLJk6s7QebjVR5EXFxss= Subject key identifier: 6F:A6:4D:1A:24:98:0B:06:C5:C3:A6:C7:5D:37:C5:F4:E3:79:9D:3C Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Certificate serial: 1D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft Manifest number: 1D45 Signing time: Mon 20 Oct 2025 16:25:58 +0000 Manifest this update: Mon 20 Oct 2025 16:25:57 +0000 Manifest next update: Mon 27 Oct 2025 16:25:57 +0000 Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: fjpOIkxjJtBf3yHdPi1mHzSssKt/dYI36B0oGHUldy0=) 2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=) 3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=) 4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7502 (0x1d4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Validity Not Before: Oct 20 16:25:57 2025 GMT Not After : Oct 27 16:25:57 2025 GMT Subject: CN=68f66296-ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:24:ae:92:ce:88:9b:1f:63:1c:6f:d8:53: 53:82:83:74:28:58:65:62:cf:b8:4a:78:1e:22:2b: 3e:20:be:69:c3:e9:d1:0d:75:f1:29:aa:78:c4:d1: 1e:de:a5:40:8d:c1:95:48:c8:81:ca:f0:40:9f:72: 05:15:ab:73:ed:aa:17:5f:1d:27:e6:0e:04:49:5d: 12:c7:0c:9f:e6:bb:9e:91:0e:c5:9b:e2:8f:85:99: bf:01:5e:6a:fe:49:c3:98:b7:1c:22:dc:52:b6:dc: 17:1e:bc:37:2a:0d:ea:2a:6d:24:16:49:36:e2:00: cb:ad:fe:88:62:3b:d1:d1:77:39:11:81:6e:2b:33: f9:df:80:bc:aa:b5:01:6f:4b:42:62:c6:03:ea:b6: 6a:12:d5:3f:2e:98:59:bc:25:a9:13:c3:7d:74:49: 08:0f:64:87:b6:07:09:38:a7:81:b8:1c:44:84:5c: 90:fd:2f:1d:f6:71:8f:26:79:8a:47:6c:93:58:f4: 94:b4:15:ab:12:3f:18:c8:ce:56:4d:97:a8:eb:7e: 4d:70:aa:bc:dd:a6:93:44:bd:bc:c2:b9:18:4b:ce: dc:8f:0b:d8:0e:70:37:42:7c:dd:95:b5:1e:ba:72: 12:52:52:ac:b9:cc:0f:a0:7e:f3:4e:15:c5:26:e7: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A6:4D:1A:24:98:0B:06:C5:C3:A6:C7:5D:37:C5:F4:E3:79:9D:3C X509v3 Authority Key Identifier: keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:98:7e:a1:a6:ab:c6:5b:e4:6f:1b:1a:2a:31:b1:87:ab:f9: f5:ca:16:4d:9e:7b:3c:82:be:73:f1:ef:20:55:5d:b3:b3:35: 2c:91:47:6a:80:ee:0a:a4:2a:18:31:a2:5b:dd:28:8b:85:4e: db:fe:be:56:41:8b:fb:19:d5:8e:d0:a8:b0:dd:bd:ba:31:07: dc:6e:aa:57:13:c3:bd:a2:08:55:21:9f:48:cb:12:9f:c1:cf: 20:1d:42:16:35:c6:1a:70:f8:2a:dc:19:ca:fa:66:ac:2d:e7: d9:fc:b1:ca:bd:31:98:55:95:84:f6:ef:7e:01:4a:1a:0a:ce: 04:bd:ce:60:aa:48:2a:0a:6e:16:8b:10:a1:dd:9d:e0:8a:8a: 0d:31:82:9b:9d:1e:d5:22:a9:e3:c1:04:d6:e6:52:6e:3a:cf: ef:84:24:a0:a4:1a:a1:ab:48:51:20:ff:94:c2:5c:75:89:d8: b9:3b:ca:8b:82:32:62:ba:86:2f:1c:05:d1:70:43:ab:5d:64: 86:bb:0f:da:11:f7:2c:0a:3e:f6:e1:2e:47:c0:e9:0c:07:0c: 56:50:e5:7b:5d:46:1c:8e:e8:94:55:52:ca:cd:33:f4:4f:36: d7:e3:c1:37:a4:02:2a:01:f6:23:12:d1:7a:81:c7:0e:f1:1a: 2c:ee:bd:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw OThDOUNCM0QwHhcNMjUxMDIwMTYyNTU3WhcNMjUxMDI3MTYyNTU3WjAYMRYwFAYD VQQDEw02OGY2NjI5Ni1jYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhMkrpLOiJsfYxxv2FNTgoN0KFhlYs+4SngeIis+IL5pw+nRDXXxKap4xNEe 3qVAjcGVSMiByvBAn3IFFatz7aoXXx0n5g4ESV0Sxwyf5ruekQ7Fm+KPhZm/AV5q /knDmLccItxSttwXHrw3Kg3qKm0kFkk24gDLrf6IYjvR0Xc5EYFuKzP534C8qrUB b0tCYsYD6rZqEtU/LphZvCWpE8N9dEkID2SHtgcJOKeBuBxEhFyQ/S8d9nGPJnmK R2yTWPSUtBWrEj8YyM5WTZeo635NcKq83aaTRL28wrkYS87cjwvYDnA3QnzdlbUe unISUlKsucwPoH7zThXFJudT0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+mTRok mAsGxcOmx103xfTjeZ08MB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt MEpSeDZ3VkZIcXdKakp5ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnmH6hpqvGW+RvGxoqMbGHq/n1yhZNnns8gr5z8e8gVV2zszUskUdq gO4KpCoYMaJb3SiLhU7b/r5WQYv7GdWO0Kiw3b26MQfcbqpXE8O9oghVIZ9IyxKf wc8gHUIWNcYacPgq3BnK+masLefZ/LHKvTGYVZWE9u9+AUoaCs4Evc5gqkgqCm4W ixCh3Z3giooNMYKbnR7VIqnjwQTW5lJuOs/vhCSgpBqhq0hRIP+Uwlx1idi5O8qL gjJiuoYvHAXRcEOrXWSGuw/aEfcsCj724S5HwOkMBwxWUOV7XUYcjuiUVVLKzTP0 TzbX48E3pAIqAfYjEtF6gccO8Ros7r0b -----END CERTIFICATE-----Generated at Tue Oct 21 07:19:45 2025 by rpki-client