$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: nN51O2gITEPJWpeUJlIXfebpMp5hYdNdWk8zV8vZqYg= Subject key identifier: E4:87:74:1A:34:44:48:8C:DE:E9:8A:58:29:5F:60:10:1B:BC:5C:E2 Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 07:31:01 +0000 Manifest this update: Sun 19 Oct 2025 07:31:01 +0000 Manifest next update: Sun 26 Oct 2025 07:31:01 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: YAMNFmbyZui8aM8u9bzhOi2XOA7sKS4WWpCf6lFPPMI=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: Oct 19 07:31:01 2025 GMT Not After : Oct 26 07:31:01 2025 GMT Subject: CN=68f493b5-82fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:df:d1:ba:21:44:2a:86:2e:03:59:07:96: 4a:ca:21:40:34:02:0b:19:56:00:05:f6:31:fb:90: 8d:a7:86:38:e1:cd:0d:78:11:1b:38:9c:08:4c:18: 81:b9:3b:09:0b:45:4e:f9:0b:9a:bd:ae:ef:4b:31: 1f:6c:86:5f:d6:b3:82:8c:ae:e0:c7:9b:4f:e0:78: a1:b3:29:9a:ec:57:62:15:57:07:3e:17:fb:36:98: 9c:76:36:39:82:4a:45:29:3e:33:2a:5f:f9:e8:59: 9c:4c:b2:bc:b3:90:a2:d1:a8:3c:8b:8a:e4:aa:2c: a6:ad:bd:21:4a:8b:78:ae:09:42:8c:b7:8e:1a:a0: 55:df:8b:de:de:66:0b:e9:76:33:ef:a1:43:84:d1: 4d:98:23:52:43:04:da:ec:f9:0f:48:18:51:77:4f: ca:31:33:74:e3:e1:82:2e:86:41:19:76:da:e9:fc: 6c:14:e7:9f:2d:b9:d3:43:59:2f:23:cc:29:97:47: 42:e3:3b:fc:2d:68:c9:3e:d7:61:9d:27:7a:4b:ad: 77:b0:d3:e3:f5:08:a7:a0:9e:09:12:d6:aa:60:c1: 7e:97:f1:14:28:a5:91:74:18:6b:8e:c8:85:9f:9d: 31:b5:ae:9a:cb:73:44:7b:a4:e0:6f:4d:b7:44:5f: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:87:74:1A:34:44:48:8C:DE:E9:8A:58:29:5F:60:10:1B:BC:5C:E2 X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0c:ca:56:90:bb:e3:6e:23:48:86:99:cf:2c:bc:55:02:f1: df:bf:d2:20:7a:6f:ae:b4:92:6e:f6:98:45:6d:6d:46:97:90: 56:76:90:8d:bf:ee:fc:7e:9c:c5:87:20:1b:26:ff:bc:ba:ad: bc:c0:7f:95:ad:e6:a1:00:de:0e:b4:a1:4d:c5:e0:92:ba:23: d3:af:50:16:e3:92:89:31:0c:03:90:44:d0:35:94:94:56:d4: 7b:2a:5e:91:f6:9f:a9:5f:d3:cf:7b:c6:5a:42:4c:58:a4:d3: 25:2c:6b:44:3c:e2:e5:04:f3:9d:dd:57:f3:cc:2d:14:f2:2e: bc:6c:2b:34:ce:bc:30:06:10:6d:50:a0:4a:35:10:d7:6d:06: 9b:88:bb:e1:35:f0:16:ff:b7:4b:eb:42:17:42:46:b5:47:3e: e1:0a:f6:b6:cc:24:2c:60:87:53:b7:64:46:24:10:e7:0c:f5: f8:a5:69:f3:00:c5:ba:2f:ad:22:ec:ce:27:f2:67:b7:be:e6: c9:66:e4:da:b4:b6:f4:be:47:46:58:17:bc:88:95:3e:a5:3b: ad:93:73:ae:b2:4a:9e:d5:73:e1:66:e1:7d:9a:98:ac:77:c1: b6:d5:00:e7:25:91:7f:41:c5:df:f7:d6:05:90:16:f4:56:d0: cf:e9:3e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjUxMDE5MDczMTAxWhcNMjUxMDI2MDczMTAxWjAYMRYwFAYD VQQDEw02OGY0OTNiNS04MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7rf0bohRCqGLgNZB5ZKyiFANAILGVYABfYx+5CNp4Y44c0NeBEbOJwITBiB uTsJC0VO+Quava7vSzEfbIZf1rOCjK7gx5tP4Hihsyma7FdiFVcHPhf7NpicdjY5 gkpFKT4zKl/56FmcTLK8s5Ci0ag8i4rkqiymrb0hSot4rglCjLeOGqBV34ve3mYL 6XYz76FDhNFNmCNSQwTa7PkPSBhRd0/KMTN04+GCLoZBGXba6fxsFOefLbnTQ1kv I8wpl0dC4zv8LWjJPtdhnSd6S613sNPj9QinoJ4JEtaqYMF+l/EUKKWRdBhrjsiF n50xta6ay3NEe6Tgb023RF+THwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSHdBo0 REiM3umKWClfYBAbvFziMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLDMpWkLvjbiNIhpnPLLxVAvHfv9Igem+utJJu9phFbW1Gl5BWdpCN v+78fpzFhyAbJv+8uq28wH+VreahAN4OtKFNxeCSuiPTr1AW45KJMQwDkETQNZSU VtR7Kl6R9p+pX9PPe8ZaQkxYpNMlLGtEPOLlBPOd3VfzzC0U8i68bCs0zrwwBhBt UKBKNRDXbQabiLvhNfAW/7dL60IXQka1Rz7hCva2zCQsYIdTt2RGJBDnDPX4pWnz AMW6L60i7M4n8me3vubJZuTatLb0vkdGWBe8iJU+pTutk3Ouskqe1XPhZuF9mpis d8G21QDnJZF/QcXf99YFkBb0VtDP6T6r -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:45 2025 by rpki-client