$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: Mz4mPMcAtpeJrgRYdcqMmXk9pR/EG/kjPFizFx75/P0= Subject key identifier: E3:DA:EA:B4:51:AD:B8:9E:1B:9B:E8:DF:AB:29:3B:4B:2D:1D:35:56 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: E4 Signing time: Sun 19 Oct 2025 08:26:10 +0000 Manifest this update: Sun 19 Oct 2025 08:26:10 +0000 Manifest next update: Sun 26 Oct 2025 08:26:10 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: AnB7HzvANfil+hWj70zxpYZUWn79LrWm/80u2UWQRXo=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: DO2YJbZIejvhdRtGsWt15hXuGZ1AtCApUsm5r0ZPTOY=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Oct 19 08:26:10 2025 GMT Not After : Oct 26 08:26:10 2025 GMT Subject: CN=68f4a0a2-7a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:56:33:07:b6:69:14:15:86:ee:9c:95:14: 1d:8c:b9:a2:29:62:b2:eb:3d:8e:15:20:5e:e2:56: 17:86:af:8a:1d:d2:96:9d:8b:da:57:f2:d7:fa:3d: 69:5c:d2:44:2b:b6:98:95:d3:b1:bb:fb:8a:73:de: 98:2d:22:5a:25:f7:a8:5b:7e:0b:29:3f:3f:4d:6c: 82:a0:bf:a1:25:ab:53:4c:c3:bb:d0:ed:f2:eb:cd: da:1d:64:e0:03:23:0a:a8:56:7b:83:85:82:a1:61: 91:9e:16:27:bd:05:4a:05:56:9f:90:73:0f:bc:d4: 31:11:ce:ea:1e:f1:11:b9:2f:db:62:d1:65:78:d9: d2:90:a1:1a:12:02:96:d8:d9:83:7d:73:4a:cb:ee: 04:1f:1e:92:f3:85:1b:0e:68:e2:a7:df:60:ee:76: 89:83:a5:58:4b:d3:4c:67:06:6a:62:07:fe:d0:f8: d8:df:83:a1:5b:84:ef:74:6c:54:ee:65:94:a9:e1: 73:74:8c:a2:45:4d:91:43:4b:92:e1:2c:3f:91:e8: c1:70:74:91:33:36:6a:7f:36:2e:6f:76:86:1e:37: 13:8d:31:0b:d7:61:f7:fb:2c:9d:75:df:fe:dd:be: 78:31:a7:46:77:39:bc:bb:fb:4b:67:75:87:bb:3c: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DA:EA:B4:51:AD:B8:9E:1B:9B:E8:DF:AB:29:3B:4B:2D:1D:35:56 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:08:2f:a8:22:06:27:46:f9:14:66:52:4e:01:a3:28:ea:ae: c4:3e:20:f4:59:3f:0e:e6:c3:f0:cd:a0:b2:b5:d6:30:91:e0: c0:f0:27:e3:21:b4:e0:ad:eb:65:ae:23:4d:9a:1d:35:5a:7f: 66:24:1c:37:d3:cf:64:b8:ac:25:2b:90:32:3d:32:4f:e7:08: ba:c7:73:0c:76:4b:c8:3e:47:ea:3c:e7:33:e3:79:4e:fc:c1: ce:8b:8b:2a:b3:09:b4:ff:9c:41:79:83:f2:e8:94:ca:10:09: b1:96:94:58:59:87:bb:3c:dd:a4:a8:64:96:8c:c0:7d:9b:22: 47:da:fa:b5:59:ee:c3:2b:fd:78:b5:6a:a5:38:b3:df:87:5e: 93:5f:fc:f9:0f:ba:1b:3d:d2:c9:5c:20:62:d7:84:cb:f9:63: dc:2e:85:d6:d1:3e:c3:e1:f1:67:44:98:64:fd:1e:8f:0c:d3: 6e:05:c7:f4:24:0d:b9:a3:0b:ad:10:57:13:35:58:ae:08:c7: 66:7e:14:ce:1c:6b:28:b9:5e:df:13:f6:39:97:8f:ad:00:0f: eb:8d:f7:42:f4:6b:2a:bc:29:63:6a:a7:93:b9:de:35:cc:fc: d6:8d:72:a6:18:81:d4:4c:2d:21:0e:40:dc:22:fa:85:42:e9: 23:8c:bb:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUxMDE5MDgyNjEwWhcNMjUxMDI2MDgyNjEwWjAYMRYwFAYD VQQDEw02OGY0YTBhMi03YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UlWMwe2aRQVhu6clRQdjLmiKWKy6z2OFSBe4lYXhq+KHdKWnYvaV/LX+j1p XNJEK7aYldOxu/uKc96YLSJaJfeoW34LKT8/TWyCoL+hJatTTMO70O3y683aHWTg AyMKqFZ7g4WCoWGRnhYnvQVKBVafkHMPvNQxEc7qHvERuS/bYtFleNnSkKEaEgKW 2NmDfXNKy+4EHx6S84UbDmjip99g7naJg6VYS9NMZwZqYgf+0PjY34OhW4TvdGxU 7mWUqeFzdIyiRU2RQ0uS4Sw/kejBcHSRMzZqfzYub3aGHjcTjTEL12H3+yyddd/+ 3b54MadGdzm8u/tLZ3WHuzyQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPa6rRR rbieG5vo36spO0stHTVWMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5CC+oIgYnRvkUZlJOAaMo6q7EPiD0WT8O5sPwzaCytdYwkeDA8Cfj IbTgretlriNNmh01Wn9mJBw3089kuKwlK5AyPTJP5wi6x3MMdkvIPkfqPOcz43lO /MHOi4sqswm0/5xBeYPy6JTKEAmxlpRYWYe7PN2kqGSWjMB9myJH2vq1We7DK/14 tWqlOLPfh16TX/z5D7obPdLJXCBi14TL+WPcLoXW0T7D4fFnRJhk/R6PDNNuBcf0 JA25owutEFcTNViuCMdmfhTOHGsouV7fE/Y5l4+tAA/rjfdC9GsqvCljaqeTud41 zPzWjXKmGIHUTC0hDkDcIvqFQukjjLu6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:20 2025 by rpki-client