$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: hJl9ALi3y3PQqB9H/1Tt5rHNI4vxBqiqnl44PKFCSO0= Subject key identifier: CE:34:F7:03:C1:2B:7C:C3:4A:1E:78:B8:02:D0:91:54:CE:96:16:A3 Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 0231 Signing time: Sun 19 Oct 2025 04:06:32 +0000 Manifest this update: Sun 19 Oct 2025 04:06:32 +0000 Manifest next update: Sun 26 Oct 2025 04:06:32 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: 0QEH5mGs0GiJMrjpvW8gJIZOFR03GQ0upLsnLbf3FlM=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Oct 19 04:06:32 2025 GMT Not After : Oct 26 04:06:32 2025 GMT Subject: CN=68f463c8-15e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:dc:43:86:bb:5d:f2:37:00:ec:e8:c8:23: d0:72:d2:a8:02:5b:0d:dd:89:05:34:13:20:a7:5d: 82:1e:b9:1a:2f:6b:bf:df:92:f3:20:14:47:8f:2e: 25:7a:be:2c:b0:f3:2a:5a:1c:a2:3f:26:65:7f:a4: e6:d2:f6:0b:34:42:86:a4:eb:b3:38:4b:9c:5e:c8: 2b:72:0a:37:16:79:8b:ba:f6:a3:0d:f3:85:db:d6: 25:98:1d:b3:7b:65:86:50:68:aa:88:0b:80:4f:f7: f6:fc:fe:0d:eb:8d:35:a6:bf:28:e9:ff:73:0a:b4: 7a:20:27:14:0a:39:20:76:ee:e3:b4:10:7a:d5:f2: 6d:f5:e8:fb:be:1d:b4:f0:52:2f:08:93:1f:f6:2f: b1:ad:fd:98:49:35:17:73:d2:e7:07:5b:ff:d3:7a: eb:7f:c6:3f:8a:fe:06:88:b9:56:c5:d3:20:05:ba: ce:d3:ad:ac:7b:8a:47:e8:c8:39:77:ad:5f:06:b2: c5:46:e4:9b:6b:43:06:4f:bc:78:a4:2a:1a:05:dc: 56:65:9d:e4:22:f1:75:2b:93:1d:c9:b4:bc:ab:d5: d9:23:36:ae:aa:2c:ca:d5:a4:63:82:65:db:eb:70: 98:8f:08:35:bd:44:c2:fc:65:a1:b0:7d:a0:ba:30: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:34:F7:03:C1:2B:7C:C3:4A:1E:78:B8:02:D0:91:54:CE:96:16:A3 X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:81:df:3e:2a:60:01:c5:bb:63:4f:10:4c:99:6a:09:e0: 7e:e7:4d:93:f1:61:12:c9:4a:9c:f5:6e:01:85:a6:5d:88:56: f0:5b:14:47:92:3a:78:ab:e1:bf:84:ee:1d:a1:8b:88:74:cf: 49:6e:11:05:c2:1a:b7:a2:8f:ae:d9:e8:0a:ed:6c:b9:0d:32: 23:69:ed:55:af:2b:38:07:89:2c:38:28:09:82:8a:76:7e:b8: 42:45:73:ba:9d:6a:6c:70:12:fa:d5:4e:c0:93:ef:21:e2:0b: 65:db:4e:39:e9:6e:35:94:ad:c9:fe:cc:c8:5d:7f:c6:2d:8c: 10:1c:8c:1e:50:31:4c:70:1a:57:00:ba:e4:cc:30:84:d1:41: 49:46:9a:6f:94:5d:4a:b1:3c:b9:4b:86:be:86:47:22:2d:62: cb:c3:ca:6e:ca:62:3d:1b:3b:17:36:a1:e5:40:fc:60:94:d8: 94:e0:e0:c0:ec:bd:0e:48:fb:5d:13:ad:e2:d4:d9:5b:7f:cd: f9:11:f5:cf:6c:09:c9:86:66:2c:11:0e:cc:8a:a1:54:a6:e2: d1:af:f8:51:a1:72:4a:60:0c:66:3f:d2:3c:29:60:9c:0b:69: dc:cc:9b:db:87:50:1d:3b:5e:06:20:5a:4a:28:2f:93:21:ed: 7b:55:6d:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUxMDE5MDQwNjMyWhcNMjUxMDI2MDQwNjMyWjAYMRYwFAYD VQQDEw02OGY0NjNjOC0xNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJXcQ4a7XfI3AOzoyCPQctKoAlsN3YkFNBMgp12CHrkaL2u/35LzIBRHjy4l er4ssPMqWhyiPyZlf6Tm0vYLNEKGpOuzOEucXsgrcgo3FnmLuvajDfOF29YlmB2z e2WGUGiqiAuAT/f2/P4N6401pr8o6f9zCrR6ICcUCjkgdu7jtBB61fJt9ej7vh20 8FIvCJMf9i+xrf2YSTUXc9LnB1v/03rrf8Y/iv4GiLlWxdMgBbrO062se4pH6Mg5 d61fBrLFRuSba0MGT7x4pCoaBdxWZZ3kIvF1K5MdybS8q9XZIzauqizK1aRjgmXb 63CYjwg1vUTC/GWhsH2gujB1PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM409wPB K3zDSh54uALQkVTOlhajMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcFIHfPipgAcW7Y08QTJlqCeB+502T8WESyUqc9W4BhaZdiFbwWxRH kjp4q+G/hO4doYuIdM9JbhEFwhq3oo+u2egK7Wy5DTIjae1Vrys4B4ksOCgJgop2 frhCRXO6nWpscBL61U7Ak+8h4gtl20456W41lK3J/szIXX/GLYwQHIweUDFMcBpX ALrkzDCE0UFJRppvlF1KsTy5S4a+hkciLWLLw8puymI9GzsXNqHlQPxglNiU4ODA 7L0OSPtdE63i1Nlbf835EfXPbAnJhmYsEQ7MiqFUpuLRr/hRoXJKYAxmP9I8KWCc C2nczJvbh1AdO14GIFpKKC+TIe17VW2C -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:12 2025 by rpki-client