$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: OoCjyKN/0ASR9c05Z7UgSVJQ3EgxMCGMXPRuazsEYXU= Subject key identifier: 64:B8:73:45:63:7A:0B:FC:B9:04:D5:B0:F6:59:49:5A:41:63:9B:28 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 1883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 1862 Signing time: Mon 20 Oct 2025 16:51:28 +0000 Manifest this update: Mon 20 Oct 2025 16:51:28 +0000 Manifest next update: Mon 27 Oct 2025 16:51:27 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: o9cjWlXoeyPobGPRZ0Wyl6/B/8ua/jJSA4IlAdvONas=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6275 (0x1883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Oct 20 16:51:28 2025 GMT Not After : Oct 27 16:51:27 2025 GMT Subject: CN=68f66890-9218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:61:54:74:ae:2c:40:db:51:66:dc:ee:7e: 65:8d:1b:ed:21:c5:0c:8a:bd:47:6a:06:c2:46:ed: a9:ae:0e:77:87:b7:1d:43:77:d9:c0:01:03:f6:68: f5:7a:d1:bc:fb:bb:b4:1e:68:d9:52:44:cc:f3:60: 0e:37:33:5c:38:c0:b5:54:e4:f8:93:4b:57:05:9a: ab:cd:7f:19:88:7d:2d:c8:96:b2:84:97:39:d4:88: 2d:3e:79:dc:92:7f:6b:53:5a:1d:3b:be:9e:12:a0: a6:e8:27:d8:c9:0a:8e:62:e4:23:96:98:63:23:6d: 8a:bf:aa:8c:65:b9:27:d6:8c:72:e9:c7:ce:5f:c3: 41:cb:e5:25:20:d8:e7:ab:29:b1:5d:68:15:35:26: c7:37:b1:ad:c3:67:a8:0f:5b:13:b0:33:4f:9c:96: 3e:a4:39:1d:2a:68:36:d8:2b:01:8a:69:3b:7d:91: ae:c1:37:08:a7:be:48:f6:a8:65:fd:03:27:38:25: 66:61:c0:50:2f:a4:73:cf:7e:bd:70:eb:f9:c3:55: b4:f0:a6:8b:e5:32:00:84:8d:b2:15:4f:f7:4c:54: 21:31:ce:64:14:3e:b7:6f:58:ef:9a:de:34:30:34: 03:7a:76:82:50:4b:98:b2:5d:a9:ae:ee:ef:dd:c2: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B8:73:45:63:7A:0B:FC:B9:04:D5:B0:F6:59:49:5A:41:63:9B:28 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:10:15:20:03:91:da:5c:c3:eb:61:76:d0:a5:ff:e4:ea:82: 60:9b:bb:00:e2:da:e1:3a:2c:93:2d:c4:73:69:41:db:60:aa: 4e:5f:33:c3:bf:48:2f:df:f4:70:d3:7a:89:8b:5e:20:58:89: 23:6f:94:b0:8d:87:8b:dc:04:cf:d2:f5:b7:6e:c4:e2:7a:d0: b5:00:bd:0b:ef:5b:b2:72:14:4c:7c:b4:5f:5a:da:39:4e:2a: 14:78:32:10:5c:e0:a7:e1:7a:54:79:9d:40:98:8c:9b:d0:1c: 1c:90:50:46:44:57:8b:db:f4:4e:18:bf:2d:b5:3f:4e:32:f1: 77:2b:3d:b5:e8:a1:fd:a2:9a:db:8f:97:1c:e5:d5:2b:5e:32: e1:95:3d:39:73:bc:63:94:e4:9a:e9:b4:15:73:81:55:24:7f: 25:db:b7:1a:2f:c3:78:fb:b0:ef:ac:3b:bb:79:17:6a:57:39: 51:03:38:97:7a:92:7e:f5:7c:e5:32:29:e9:e5:73:8f:ea:d5: a1:68:d5:17:0d:99:a2:7c:3c:06:5b:de:30:bf:63:ac:21:9c: 32:e5:1a:22:7e:e8:07:49:9d:2a:11:77:e6:24:e1:90:fa:34: 7d:75:57:f5:ab:47:2c:c4:df:67:b0:c9:09:6a:50:5e:a7:29: 9c:f3:61:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjUxMDIwMTY1MTI4WhcNMjUxMDI3MTY1MTI3WjAYMRYwFAYD VQQDEw02OGY2Njg5MC05MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn5hVHSuLEDbUWbc7n5ljRvtIcUMir1HagbCRu2prg53h7cdQ3fZwAED9mj1 etG8+7u0HmjZUkTM82AONzNcOMC1VOT4k0tXBZqrzX8ZiH0tyJayhJc51IgtPnnc kn9rU1odO76eEqCm6CfYyQqOYuQjlphjI22Kv6qMZbkn1oxy6cfOX8NBy+UlINjn qymxXWgVNSbHN7Gtw2eoD1sTsDNPnJY+pDkdKmg22CsBimk7fZGuwTcIp75I9qhl /QMnOCVmYcBQL6Rzz369cOv5w1W08KaL5TIAhI2yFU/3TFQhMc5kFD63b1jvmt40 MDQDenaCUEuYsl2pru7v3cIKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGS4c0Vj egv8uQTVsPZZSVpBY5soMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlEBUgA5HaXMPrYXbQpf/k6oJgm7sA4trhOiyTLcRzaUHbYKpOXzPD v0gv3/Rw03qJi14gWIkjb5SwjYeL3ATP0vW3bsTietC1AL0L71uychRMfLRfWto5 TioUeDIQXOCn4XpUeZ1AmIyb0BwckFBGRFeL2/ROGL8ttT9OMvF3Kz216KH9oprb j5cc5dUrXjLhlT05c7xjlOSa6bQVc4FVJH8l27caL8N4+7DvrDu7eRdqVzlRAziX epJ+9XzlMinp5XOP6tWhaNUXDZmifDwGW94wv2OsIZwy5RoifugHSZ0qEXfmJOGQ +jR9dVf1q0csxN9nsMkJalBepymc82E6 -----END CERTIFICATE-----Generated at Tue Oct 21 07:51:27 2025 by rpki-client