$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: kq+nPPdtGLxfhzubeMwUCyoTLQcMNK7kHhvoRwHIg4o= Subject key identifier: 2B:84:6A:96:F3:29:35:25:30:34:FF:35:93:93:CB:65:8C:A8:12:3E Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: DF Signing time: Sun 19 Oct 2025 08:30:34 +0000 Manifest this update: Sun 19 Oct 2025 08:30:33 +0000 Manifest next update: Sun 26 Oct 2025 08:30:33 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: Qh5ZwHWv2wMHXhrB5qPwYkarl5HMdJ7Rs2ot+K8/6uU=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Oct 19 08:30:33 2025 GMT Not After : Oct 26 08:30:33 2025 GMT Subject: CN=68f4a1a9-8aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:d2:aa:29:75:27:45:fd:40:26:60:70:db: 43:b0:ff:83:f8:b9:59:84:9b:98:06:42:aa:04:5e: 1a:10:85:6e:29:11:90:00:55:fc:f5:7d:e2:4f:a7: 5d:2d:c9:73:3e:cd:e3:6d:63:b3:76:97:f6:01:78: 4d:ba:ab:82:99:be:11:88:22:bf:e1:01:24:82:92: 64:34:04:9c:93:da:f7:e8:3a:de:db:64:5f:4d:0e: bc:ca:68:89:fe:86:b4:49:2d:33:bf:10:3c:58:27: bf:31:c6:c7:31:cb:88:83:3f:d7:11:01:62:99:f1: 3b:08:e1:bc:93:35:29:9b:c5:2c:d0:42:ac:f0:57: ec:3b:4b:1c:73:99:68:de:5c:a2:56:4f:99:63:8a: 37:18:92:a5:26:c2:6b:04:42:43:d0:bb:5c:e0:34: b6:59:d6:45:bf:0e:c5:f4:75:1f:ba:57:5d:a4:6f: 18:c6:ca:b7:49:fe:4f:05:40:46:08:d9:6a:1e:46: 70:a5:a5:70:86:45:28:aa:d2:3b:f8:4f:e9:7d:82: 08:04:3a:0c:e9:fe:ed:a4:a0:1d:93:d1:29:3c:0c: b5:81:37:3a:3d:46:14:a8:5a:26:7e:3a:49:6d:73: 59:b8:0d:f7:ca:c7:eb:23:c8:ab:f0:3f:33:e7:5e: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:84:6A:96:F3:29:35:25:30:34:FF:35:93:93:CB:65:8C:A8:12:3E X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a9:1c:94:c1:cc:c3:66:6a:9c:18:58:70:fd:ca:3c:3e:cc: d3:7f:18:d6:6c:9b:a7:ef:ee:1f:7a:2b:a2:f8:7c:e6:cf:4a: 22:9d:7a:00:0a:0b:ba:39:8a:39:21:a7:67:92:31:37:63:dd: a0:6a:30:58:d0:d0:2c:bc:9d:d2:0b:23:7d:d9:67:28:de:d0: 71:a9:f7:2a:ef:e1:19:8e:cd:be:86:b5:da:c0:53:2b:33:1c: f6:30:df:5f:fd:9d:53:c6:ab:d9:0f:f6:0f:7f:e6:29:a5:15: ae:8b:44:4b:64:6b:50:aa:1c:53:0e:65:1a:a5:fe:fd:ac:b6: f3:c9:28:83:fe:68:7b:34:a0:21:5f:50:ab:54:77:5d:2b:b7: 7f:23:de:26:a4:cd:49:c3:fa:f1:35:d5:44:74:1f:70:3f:59: 98:3a:99:c9:b1:7a:92:70:c6:c2:ad:6b:d2:af:53:f6:42:99: 2b:c7:40:d3:38:65:6b:04:77:92:7c:5a:dd:6d:18:82:86:57: 6f:85:78:c6:27:86:30:9a:df:81:49:24:0a:b3:eb:db:28:78: 13:98:9b:a3:64:20:37:20:d4:46:6d:7f:1f:d4:8c:45:fd:e5: 32:99:b2:0d:6f:5e:0b:dd:82:af:a3:fb:4c:f3:e9:2e:8e:c5: a2:4e:d1:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjUxMDE5MDgzMDMzWhcNMjUxMDI2MDgzMDMzWjAYMRYwFAYD VQQDEw02OGY0YTFhOS04YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+bSqil1J0X9QCZgcNtDsP+D+LlZhJuYBkKqBF4aEIVuKRGQAFX89X3iT6dd LclzPs3jbWOzdpf2AXhNuquCmb4RiCK/4QEkgpJkNASck9r36Dre22RfTQ68ymiJ /oa0SS0zvxA8WCe/McbHMcuIgz/XEQFimfE7COG8kzUpm8Us0EKs8FfsO0scc5lo 3lyiVk+ZY4o3GJKlJsJrBEJD0Ltc4DS2WdZFvw7F9HUfulddpG8Yxsq3Sf5PBUBG CNlqHkZwpaVwhkUoqtI7+E/pfYIIBDoM6f7tpKAdk9EpPAy1gTc6PUYUqFomfjpJ bXNZuA33ysfrI8ir8D8z514FHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuEapbz KTUlMDT/NZOTy2WMqBI+MB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrqRyUwczDZmqcGFhw/co8PszTfxjWbJun7+4feiui+Hzmz0oinXoA Cgu6OYo5IadnkjE3Y92gajBY0NAsvJ3SCyN92Wco3tBxqfcq7+EZjs2+hrXawFMr Mxz2MN9f/Z1TxqvZD/YPf+YppRWui0RLZGtQqhxTDmUapf79rLbzySiD/mh7NKAh X1CrVHddK7d/I94mpM1Jw/rxNdVEdB9wP1mYOpnJsXqScMbCrWvSr1P2Qpkrx0DT OGVrBHeSfFrdbRiChldvhXjGJ4Ywmt+BSSQKs+vbKHgTmJujZCA3INRGbX8f1IxF /eUymbINb14L3YKvo/tM8+kujsWiTtED -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:32 2025 by rpki-client