$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: gvVZCZqmELjIgZ9cc2gsMTpKjnIVgxLz7R+UMjZNnvA= Subject key identifier: 3F:BA:AB:BC:FD:61:AB:74:5A:1D:F4:D4:49:AB:94:EC:3E:E5:4D:C5 Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 03CE Signing time: Sun 19 Oct 2025 03:53:59 +0000 Manifest this update: Sun 19 Oct 2025 03:53:58 +0000 Manifest next update: Sun 26 Oct 2025 03:53:58 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: ecqYDhkA75O4/5GAGdXdKKWlOXCv3kz0chmRVd+44sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Oct 19 03:53:58 2025 GMT Not After : Oct 26 03:53:58 2025 GMT Subject: CN=68f460d6-eb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d4:28:38:ed:45:5b:08:d3:a9:93:12:d2:87: 4f:0c:40:34:ea:5c:e7:60:70:f1:d3:82:37:96:8f: 72:37:e6:3f:ed:25:35:47:d1:74:10:b6:5b:98:91: 45:e5:74:ec:33:99:05:5e:09:a6:36:39:4a:fb:62: 80:3e:52:bc:86:00:7b:d6:79:d1:eb:63:8d:f7:d6: b7:ae:5a:d9:40:85:50:e0:69:2c:d0:ae:9a:f7:1d: b0:12:1a:38:73:e3:63:48:14:7f:5f:af:17:76:f7: 40:b4:30:ef:7b:fe:ce:df:f3:f4:45:ad:4c:b1:ce: 49:a7:d4:e2:cc:e6:a2:87:ff:e3:7a:44:34:80:7e: 74:dd:d8:a4:12:27:4b:b6:9b:56:e6:27:37:78:f9: e2:e8:f7:92:fb:bd:6a:f7:8b:c2:ab:b2:5c:8f:88: f3:27:84:59:fa:24:4d:a9:26:72:0b:3c:88:69:6c: 68:ab:de:c0:7a:bc:4f:7f:22:95:68:07:5b:bb:07: 12:fb:8e:38:8e:79:6a:39:04:d9:86:63:5f:b2:a7: c6:ae:2f:46:8d:2c:71:9e:35:0c:4e:9f:22:85:4c: 2c:cd:96:7b:ed:38:fb:b6:9a:6d:31:67:97:5b:e4: 5a:1b:8a:27:a7:54:33:54:ba:03:d9:58:5c:87:28: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BA:AB:BC:FD:61:AB:74:5A:1D:F4:D4:49:AB:94:EC:3E:E5:4D:C5 X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7f:e3:33:28:40:77:fc:b7:6b:24:c4:2e:20:a9:e5:4a:e7: 29:51:4b:40:39:10:1f:46:78:36:a4:0f:df:7b:a2:32:2c:44: b4:13:78:c9:0f:d4:84:7f:44:96:e4:e9:c2:7c:1b:0a:cb:83: 62:dc:df:9b:4b:fc:5b:01:71:5f:26:13:15:57:8e:7b:32:57: 06:44:09:c8:04:85:e0:cc:5a:4c:08:7c:4e:54:43:48:aa:15: 50:75:6b:15:a6:e5:4f:56:7b:13:bf:bb:76:d0:ba:80:da:69: 3a:00:16:bf:cb:67:e4:7c:ba:a6:d7:7b:d4:ad:b4:28:a7:1d: 00:e0:ff:24:ce:a2:0b:9f:a8:18:06:ca:cf:e5:9e:0c:99:13: 79:b6:9e:d2:e0:e5:67:c6:26:3f:96:41:1d:2f:3a:4a:af:3a: 81:d1:ba:d5:67:e6:96:7e:c0:4d:ab:3d:cd:ce:d9:62:6b:ec: e6:39:fc:0c:e9:ac:10:86:a5:df:25:64:0a:60:18:5a:a0:18: 8c:53:a5:22:53:52:b6:12:58:08:e8:cc:cc:ed:59:4b:08:cf: c3:05:04:7a:be:8e:d5:ba:ad:e3:e6:45:1f:ee:09:1a:d6:3a: c4:fa:b8:0d:8c:26:58:3a:73:e5:9b:38:46:66:98:d8:2b:61: 77:09:40:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUxMDE5MDM1MzU4WhcNMjUxMDI2MDM1MzU4WjAYMRYwFAYD VQQDEw02OGY0NjBkNi1lYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NQoOO1FWwjTqZMS0odPDEA06lznYHDx04I3lo9yN+Y/7SU1R9F0ELZbmJFF 5XTsM5kFXgmmNjlK+2KAPlK8hgB71nnR62ON99a3rlrZQIVQ4Gks0K6a9x2wEho4 c+NjSBR/X68XdvdAtDDve/7O3/P0Ra1Msc5Jp9TizOaih//jekQ0gH503dikEidL tptW5ic3ePni6PeS+71q94vCq7Jcj4jzJ4RZ+iRNqSZyCzyIaWxoq97AerxPfyKV aAdbuwcS+444jnlqOQTZhmNfsqfGri9GjSxxnjUMTp8ihUwszZZ77Tj7tpptMWeX W+RaG4onp1QzVLoD2VhchyjddQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+6q7z9 Yat0Wh301EmrlOw+5U3FMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsf+MzKEB3/LdrJMQuIKnlSucpUUtAORAfRng2pA/fe6IyLES0E3jJ D9SEf0SW5OnCfBsKy4Ni3N+bS/xbAXFfJhMVV457MlcGRAnIBIXgzFpMCHxOVENI qhVQdWsVpuVPVnsTv7t20LqA2mk6ABa/y2fkfLqm13vUrbQopx0A4P8kzqILn6gY BsrP5Z4MmRN5tp7S4OVnxiY/lkEdLzpKrzqB0brVZ+aWfsBNqz3Nztlia+zmOfwM 6awQhqXfJWQKYBhaoBiMU6UiU1K2ElgI6MzM7VlLCM/DBQR6vo7Vuq3j5kUf7gka 1jrE+rgNjCZYOnPlmzhGZpjYK2F3CUDQ -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:51 2025 by rpki-client