$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: CpomYh+fUOI35UoVc2r9s1w9QITUs7ga0tEf648ajbY= Subject key identifier: AE:F5:E5:CA:95:09:0F:0B:66:0A:95:F6:06:CE:72:CE:A7:9E:10:5C Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: BC Signing time: Sun 19 Oct 2025 09:07:04 +0000 Manifest this update: Sun 19 Oct 2025 09:07:03 +0000 Manifest next update: Sun 26 Oct 2025 09:07:03 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: 6pZmulKP+Qn7/tUAtfi//lunlQep3SsLmYNKOAz37P8=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Oct 19 09:07:03 2025 GMT Not After : Oct 26 09:07:03 2025 GMT Subject: CN=68f4aa37-1c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:40:e4:d2:93:b4:c0:ce:4c:c3:0a:53:2b: 23:e5:91:b0:49:f6:51:12:cc:d2:00:5d:58:29:47: 32:e8:c2:d7:04:b8:98:81:8d:f6:27:a2:c4:ed:1c: 3e:92:39:9c:25:45:b9:9b:00:65:a3:14:dd:c5:61: a8:a6:4a:94:c8:2f:2a:a8:73:4d:8b:7a:ed:c7:73: dd:18:a4:da:84:a2:54:2b:46:d2:ae:f9:dd:d0:d7: 67:d4:9a:53:7f:15:81:12:50:41:74:d5:42:aa:4d: e2:b5:55:bf:71:16:26:ee:be:eb:5c:33:2e:c6:d6: aa:1f:cf:04:06:be:5d:d8:19:79:f1:02:2b:54:51: 32:bd:a2:0c:06:c6:af:0d:0d:ff:d7:48:54:6c:d9: 23:ce:1e:fc:47:bd:52:4a:45:21:c1:ec:d6:a7:9e: b9:8c:c8:1c:18:ad:63:c3:06:3e:7f:ec:48:cd:d4: 4c:23:a4:b5:f6:a4:99:10:63:f1:26:7e:a9:ae:46: c0:4b:d3:61:88:7a:d6:0a:3f:97:86:1f:d0:cc:0e: f1:66:b9:d4:88:02:a0:b4:82:45:c7:af:69:da:68: b5:8a:23:7f:87:2a:0b:fd:3c:c7:c9:4d:28:5e:ea: 98:32:aa:c2:6a:66:2e:39:23:53:a1:45:8d:93:1d: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:E5:CA:95:09:0F:0B:66:0A:95:F6:06:CE:72:CE:A7:9E:10:5C X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a2:01:02:e5:58:63:b9:d8:cd:97:33:63:f5:e8:d3:96:a1: cb:84:2d:dd:75:c1:01:65:ea:d6:08:db:c3:d3:32:ff:ee:01: ae:b0:98:9c:1f:b7:5e:b7:b0:2d:cb:41:e4:6a:a9:3a:e7:63: d4:a2:43:fb:95:2b:e1:fe:b1:3a:04:85:40:32:f3:82:8e:f6: d7:08:26:d4:00:46:7d:9e:78:a7:ed:d8:85:c3:2f:28:3e:20: de:e2:b2:3b:72:e2:22:ac:ef:fb:db:c4:19:7c:f4:42:cf:87: ff:43:fc:11:16:a9:9f:b0:10:78:3f:e3:a5:14:3a:0d:35:49: 28:6f:38:3b:a7:47:a8:ac:83:de:fa:cf:aa:13:1b:6f:ca:39: e1:57:a5:14:82:ef:bb:9d:39:25:41:d9:55:5a:3f:38:31:72: 8e:61:a9:d7:71:cf:86:d5:e0:1d:fb:e7:ea:9a:27:a1:bc:18: 83:4d:d4:be:2f:7e:cc:6b:dd:f4:dd:6e:e0:68:e7:65:e2:ed: 7b:ad:de:b7:6d:cd:cc:ba:89:32:53:9b:13:41:fd:b8:9e:20: d4:a7:56:2f:67:5e:74:39:83:aa:72:0d:4c:13:e7:ed:12:65: 3f:d4:9f:69:d3:62:9b:08:fd:6a:90:d1:95:a9:c9:b7:44:c6: 6f:50:e3:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUxMDE5MDkwNzAzWhcNMjUxMDI2MDkwNzAzWjAYMRYwFAYD VQQDEw02OGY0YWEzNy0xYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnxA5NKTtMDOTMMKUysj5ZGwSfZREszSAF1YKUcy6MLXBLiYgY32J6LE7Rw+ kjmcJUW5mwBloxTdxWGopkqUyC8qqHNNi3rtx3PdGKTahKJUK0bSrvnd0Ndn1JpT fxWBElBBdNVCqk3itVW/cRYm7r7rXDMuxtaqH88EBr5d2Bl58QIrVFEyvaIMBsav DQ3/10hUbNkjzh78R71SSkUhwezWp565jMgcGK1jwwY+f+xIzdRMI6S19qSZEGPx Jn6prkbAS9NhiHrWCj+Xhh/QzA7xZrnUiAKgtIJFx69p2mi1iiN/hyoL/TzHyU0o XuqYMqrCamYuOSNToUWNkx1pZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK715cqV CQ8LZgqV9gbOcs6nnhBcMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ogEC5VhjudjNlzNj9ejTlqHLhC3ddcEBZerWCNvD0zL/7gGusJic H7det7Aty0Hkaqk652PUokP7lSvh/rE6BIVAMvOCjvbXCCbUAEZ9nnin7diFwy8o PiDe4rI7cuIirO/728QZfPRCz4f/Q/wRFqmfsBB4P+OlFDoNNUkobzg7p0eorIPe +s+qExtvyjnhV6UUgu+7nTklQdlVWj84MXKOYanXcc+G1eAd++fqmiehvBiDTdS+ L37Ma9303W7gaOdl4u17rd63bc3MuokyU5sTQf24niDUp1YvZ150OYOqcg1ME+ft EmU/1J9p02KbCP1qkNGVqcm3RMZvUONV -----END CERTIFICATE-----Generated at Tue Oct 21 06:02:12 2025 by rpki-client