$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: xYq/sxKkJo04pw3sTAbB5Jm2dPFVqyLD5dQBaBue5Ec= Subject key identifier: 76:B0:B4:00:9A:5B:04:73:C1:F2:8F:7A:9F:8B:10:A5:27:D8:09:DE Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0491 Signing time: Sun 19 Oct 2025 01:52:37 +0000 Manifest this update: Sun 19 Oct 2025 01:52:36 +0000 Manifest next update: Sun 26 Oct 2025 01:52:36 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: kyrTWEEPvt7m2lfLY07XpQM2YLhKarNth9gTP89z3n0=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: l8fLmMSk/DnNzXLnjLGhCq/saPEmEN6St/FpFqUG3SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Oct 19 01:52:36 2025 GMT Not After : Oct 26 01:52:36 2025 GMT Subject: CN=68f44464-1d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:94:32:94:af:b6:f6:74:82:92:0b:5e:64: 21:41:a3:f0:fd:84:9a:0a:5f:e5:fe:9e:73:1e:8e: 57:5a:36:6c:ca:81:1b:83:b1:85:b0:84:7f:b8:d0: 26:f3:8b:4d:91:1c:55:27:4a:37:ed:91:d6:75:09: ae:7d:71:68:9b:06:2b:49:7c:1c:65:dd:f4:6a:a6: 18:e9:57:c2:1b:8f:1e:16:49:dd:6f:f7:c9:50:e3: 7c:19:c5:fc:1d:e0:93:92:a4:5b:57:4a:ab:d5:4f: c3:e5:dd:12:40:63:b8:90:5e:70:1f:3b:1c:6d:6c: 79:86:53:c1:7d:42:72:1b:4f:e8:91:4f:64:c5:78: b9:22:2b:01:f3:cf:41:45:6f:9b:bb:64:71:26:02: 64:fe:94:dc:aa:9a:a6:19:c1:1b:38:a0:8f:76:e9: 9d:6b:dc:18:41:30:ef:44:b3:52:de:68:4c:1d:fa: 59:ca:0a:07:66:60:9b:9b:fe:e3:f0:0c:08:f0:8e: c8:39:5f:55:4c:1e:c0:73:72:70:2f:22:72:f8:05: f4:2a:c0:c3:f4:dd:c4:95:cb:e6:50:b7:84:61:2b: 43:66:f1:07:e0:3e:df:ca:fc:f3:78:14:c4:fb:34: 7d:53:cb:5d:5a:7a:f5:08:0b:63:e4:a6:66:81:ee: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B0:B4:00:9A:5B:04:73:C1:F2:8F:7A:9F:8B:10:A5:27:D8:09:DE X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9e:14:91:23:83:ca:e9:fe:10:17:2b:8b:27:73:e9:5b:f6: f8:8b:b5:da:a0:3b:3a:db:16:24:56:b6:21:a9:b5:3e:3f:ba: 07:3b:8e:87:87:15:ee:0f:d3:07:cc:6c:82:81:2e:b5:f3:8b: 81:a9:1b:37:51:46:38:71:e9:f6:90:56:a5:66:11:28:29:f0: 51:fc:f8:78:37:f5:6f:4b:33:5b:a4:b2:b9:b0:72:9a:3a:ec: 88:d7:1b:52:af:9b:09:d3:0c:2b:4a:3d:4d:dd:8e:36:61:b4: fc:21:b7:16:fa:07:cb:61:01:78:df:3d:34:57:53:01:b1:c5: 23:0b:c0:37:87:ae:43:4d:56:8a:6a:d1:03:33:2e:4b:5e:48: a7:2d:ad:63:fd:f1:c1:62:7e:01:44:cb:37:e5:52:ef:b7:73: 00:38:99:67:c3:6e:44:a2:0f:1e:41:ce:f1:8d:43:a9:6e:1c: 38:50:bd:b4:f5:e5:7a:44:51:a7:23:c2:c0:60:25:73:de:2d: 8e:a2:b4:61:9c:c5:83:96:9e:b9:a1:7f:9e:dd:ef:bb:40:74: ef:5d:72:de:1d:14:fc:44:af:cf:14:e2:85:09:80:26:6f:72: 03:c0:56:ee:f1:36:80:d1:21:96:c6:cf:9a:c0:b0:96:f2:85: 9c:32:74:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjUxMDE5MDE1MjM2WhcNMjUxMDI2MDE1MjM2WjAYMRYwFAYD VQQDEw02OGY0NDQ2NC0xZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXOUMpSvtvZ0gpILXmQhQaPw/YSaCl/l/p5zHo5XWjZsyoEbg7GFsIR/uNAm 84tNkRxVJ0o37ZHWdQmufXFomwYrSXwcZd30aqYY6VfCG48eFkndb/fJUON8GcX8 HeCTkqRbV0qr1U/D5d0SQGO4kF5wHzscbWx5hlPBfUJyG0/okU9kxXi5IisB889B RW+bu2RxJgJk/pTcqpqmGcEbOKCPdumda9wYQTDvRLNS3mhMHfpZygoHZmCbm/7j 8AwI8I7IOV9VTB7Ac3JwLyJy+AX0KsDD9N3ElcvmULeEYStDZvEH4D7fyvzzeBTE +zR9U8tdWnr1CAtj5KZmge6mvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHawtACa WwRzwfKPep+LEKUn2AneMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrnhSRI4PK6f4QFyuLJ3PpW/b4i7XaoDs62xYkVrYhqbU+P7oHO46H hxXuD9MHzGyCgS6184uBqRs3UUY4cen2kFalZhEoKfBR/Ph4N/VvSzNbpLK5sHKa OuyI1xtSr5sJ0wwrSj1N3Y42YbT8IbcW+gfLYQF43z00V1MBscUjC8A3h65DTVaK atEDMy5LXkinLa1j/fHBYn4BRMs35VLvt3MAOJlnw25Eog8eQc7xjUOpbhw4UL20 9eV6RFGnI8LAYCVz3i2OorRhnMWDlp65oX+e3e+7QHTvXXLeHRT8RK/PFOKFCYAm b3IDwFbu8TaA0SGWxs+awLCW8oWcMnTT -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:39 2025 by rpki-client