$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: iAHZxw8x6S02pHuLKN37BmTBjFYx819h57aWRMLyCOE= Subject key identifier: C3:11:7E:72:44:01:3D:17:CD:48:D0:DD:21:3E:EC:92:17:5D:F8:3C Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: 0144 Signing time: Sun 19 Oct 2025 07:07:30 +0000 Manifest this update: Sun 19 Oct 2025 07:07:30 +0000 Manifest next update: Sun 26 Oct 2025 07:07:30 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: UvoVf2rIROQY4NdMCX/63Sp66glY4qJs1rzaSfxbkr8=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: Oct 19 07:07:30 2025 GMT Not After : Oct 26 07:07:30 2025 GMT Subject: CN=68f48e32-a1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:34:4a:1b:df:6a:d9:d1:1f:cd:1e:ef:81: 10:0a:7d:87:3b:4b:7c:2b:7e:a9:04:58:dd:5a:81: 54:a0:ed:fa:e7:ea:42:1f:05:52:ab:17:b0:50:38: 71:22:87:b9:3f:84:c2:40:d0:f2:8e:68:75:85:ee: 9c:8e:52:36:03:9c:52:0e:25:f7:bd:33:32:3b:8b: ce:21:e8:18:d5:dc:29:ac:59:4f:9f:bc:ae:43:98: 2d:72:a0:03:11:ed:d8:02:68:50:26:f2:81:22:b5: 9d:28:eb:31:f8:7d:84:a1:9d:63:80:19:ff:b5:20: 19:fe:ac:bc:aa:2e:ef:b6:29:d7:c1:4d:4a:c0:91: 62:02:67:ec:e0:3d:72:29:7f:77:02:3b:08:b5:8d: 59:62:dc:9d:14:3b:18:55:22:ce:f1:19:93:1f:ea: 68:17:23:a9:93:4b:62:2a:45:c5:c3:3f:c6:36:32: 08:24:78:81:4f:0a:eb:a8:e9:d4:1c:e4:30:6f:96: 9c:c8:f7:4b:8f:04:e5:b4:c4:f9:5e:f4:61:61:a6: a5:71:14:e1:43:79:66:ab:89:0d:0b:9d:45:b6:5d: 54:c0:da:4d:bd:0b:b5:37:68:04:a7:19:7c:bb:d9: 6e:ed:ff:da:d3:83:aa:a8:c1:8a:31:aa:9d:bc:0c: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:7E:72:44:01:3D:17:CD:48:D0:DD:21:3E:EC:92:17:5D:F8:3C X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:72:b1:de:bb:85:37:eb:70:7c:f7:65:46:19:40:6f:5f:e1: 42:23:53:e1:eb:ef:a7:93:74:15:7e:81:28:d2:e6:d5:3a:f0: ec:73:ea:99:28:31:13:b3:1f:55:d1:2b:ba:b4:9b:a8:4c:57: 48:3d:62:fb:67:e5:36:eb:91:15:49:3d:68:35:d2:35:45:a2: c2:d1:91:04:f6:b5:6f:b4:ae:d4:16:94:19:d5:6f:a8:6f:5f: d8:e9:df:51:98:82:ba:3b:16:28:77:18:46:bc:69:cc:2d:61: 91:dd:e5:ff:3f:37:3b:1b:df:16:b4:91:00:08:f6:45:c8:6a: b7:77:3f:af:80:d3:cf:2e:8b:2c:22:ff:80:d5:90:81:62:35: 2f:62:be:9b:71:55:83:23:05:66:0a:75:bd:68:50:ce:39:07: b7:46:4e:05:48:e5:7a:48:bd:21:9d:36:8b:63:d5:57:4d:9e: 3e:ef:57:35:22:c7:34:b8:9b:8c:e0:49:8f:21:cd:4d:76:97: b3:99:14:9f:46:05:d1:c3:1e:3a:85:6c:2f:27:76:5d:15:7b: f5:1a:2b:8a:1e:e7:49:6e:6b:b4:3e:46:b8:a2:fe:24:c8:68: aa:e8:5e:d3:1e:4f:2e:79:af:0f:57:12:d9:51:f0:c5:86:a1: b4:7d:cf:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx QzQzQUM5QzAwHhcNMjUxMDE5MDcwNzMwWhcNMjUxMDI2MDcwNzMwWjAYMRYwFAYD VQQDEw02OGY0OGUzMi1hMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfM0ShvfatnRH80e74EQCn2HO0t8K36pBFjdWoFUoO365+pCHwVSqxewUDhx Ioe5P4TCQNDyjmh1he6cjlI2A5xSDiX3vTMyO4vOIegY1dwprFlPn7yuQ5gtcqAD Ee3YAmhQJvKBIrWdKOsx+H2EoZ1jgBn/tSAZ/qy8qi7vtinXwU1KwJFiAmfs4D1y KX93AjsItY1ZYtydFDsYVSLO8RmTH+poFyOpk0tiKkXFwz/GNjIIJHiBTwrrqOnU HOQwb5acyPdLjwTltMT5XvRhYaalcRThQ3lmq4kNC51Ftl1UwNpNvQu1N2gEpxl8 u9lu7f/a04OqqMGKMaqdvAzE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMRfnJE AT0XzUjQ3SE+7JIXXfg8MB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncrHeu4U363B892VGGUBvX+FCI1Ph6++nk3QVfoEo0ubVOvDsc+qZ KDETsx9V0Su6tJuoTFdIPWL7Z+U265EVST1oNdI1RaLC0ZEE9rVvtK7UFpQZ1W+o b1/Y6d9RmIK6OxYodxhGvGnMLWGR3eX/Pzc7G98WtJEACPZFyGq3dz+vgNPPLoss Iv+A1ZCBYjUvYr6bcVWDIwVmCnW9aFDOOQe3Rk4FSOV6SL0hnTaLY9VXTZ4+71c1 Isc0uJuM4EmPIc1NdpezmRSfRgXRwx46hWwvJ3ZdFXv1GiuKHudJbmu0Pka4ov4k yGiq6F7THk8uea8PVxLZUfDFhqG0fc81 -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:40 2025 by rpki-client