$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: L1u0JyLfPGQgCHskHwAm8hI9OOSmeq9K964OgZFlieg= Subject key identifier: 64:57:79:D7:44:23:A9:3C:9F:48:3B:20:84:06:9C:37:09:84:F9:A6 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 040D Signing time: Sun 19 Oct 2025 02:22:44 +0000 Manifest this update: Sun 19 Oct 2025 02:22:43 +0000 Manifest next update: Sun 26 Oct 2025 02:22:43 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: VbX5GPgm7O8RYn+XiGFWkNIDB/Mqon2SMqBJvMRIqa0=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Oct 19 02:22:43 2025 GMT Not After : Oct 26 02:22:43 2025 GMT Subject: CN=68f44b73-275f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:02:33:fc:05:f8:2f:81:e6:7f:4a:ef:39: 81:cf:62:08:49:19:4d:fa:96:7e:dc:8e:4f:8c:ba: 50:c7:23:7d:da:3d:f3:ea:a5:d4:f1:38:05:08:9e: c5:67:51:03:f2:19:f9:d2:be:3d:93:c4:ef:8a:24: 83:b6:6c:dd:93:a9:e4:8a:3b:4a:6b:09:7c:10:ef: eb:27:b3:fb:d0:7c:26:e9:56:7a:e9:bf:bf:1a:40: 2b:cf:94:9c:ad:a4:1d:52:8c:e6:30:9e:d6:b5:40: f4:85:e3:fe:b4:ad:ae:7a:8d:16:6c:b2:72:66:5a: 69:b7:72:ed:c0:11:7e:36:4b:e1:08:91:c0:4d:d8: 36:38:5c:2f:4e:ad:dc:55:2a:8a:37:42:b3:dc:78: b0:16:33:55:b7:94:8d:c6:11:a6:0c:31:9a:79:01: c5:2d:fe:94:7c:1b:00:c5:7c:fb:2b:90:6a:e7:11: 75:ab:ef:ce:a5:93:ae:6d:a7:a8:ba:83:d3:23:93: 9d:19:91:a0:3a:ac:38:6d:92:ba:d1:73:da:79:ac: 44:bb:c9:ed:9f:b7:86:2c:7b:ec:c6:c2:cf:74:5d: ca:18:e0:0b:5c:d5:ca:1b:22:32:87:c9:6c:e6:46: c1:b8:2d:dd:14:8b:6b:70:b8:ef:f6:68:03:54:ef: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:57:79:D7:44:23:A9:3C:9F:48:3B:20:84:06:9C:37:09:84:F9:A6 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b9:92:e5:0a:41:88:9d:d1:0b:c3:4b:30:e2:ab:ef:21:91: f9:ca:17:b6:f2:28:ca:0a:5b:67:5a:e4:78:c5:cb:9e:68:10: 45:33:c4:bb:70:07:39:91:4c:6c:52:93:39:21:7e:6e:d7:ee: b3:c5:ac:6d:56:82:20:09:c3:dd:0b:e6:d4:28:c5:8e:f1:42: 3f:e9:e5:a3:af:3a:ea:94:36:e8:f0:24:9f:58:a5:49:b6:b2: 58:df:a6:4f:65:dc:88:4d:7d:c4:a2:a5:46:3e:f7:5b:38:4d: e4:68:f1:42:dd:21:ef:a4:bb:33:af:04:44:83:ad:65:72:1b: 5f:c5:3c:22:70:ed:81:f5:7c:a2:d0:bf:91:d9:2e:2c:2e:7a: e9:06:1e:06:e0:eb:d5:bb:e0:e6:e8:72:b6:5b:12:71:0d:97: 93:a1:a7:0a:bc:93:de:e9:02:51:98:b3:06:59:53:c7:22:7b: c3:88:a3:fc:c4:5c:4a:e7:c2:b6:16:41:ff:45:4e:03:dc:84: 40:da:8b:ee:f1:2f:e3:ea:1c:c9:05:72:ed:28:0f:74:82:af: fb:7c:ec:1e:50:4f:dc:ae:57:c8:51:e8:09:00:8d:15:53:a7: 0a:01:ea:f0:7e:dc:b1:86:ad:31:d9:67:01:49:93:62:50:c1: e4:07:96:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUxMDE5MDIyMjQzWhcNMjUxMDI2MDIyMjQzWjAYMRYwFAYD VQQDEw02OGY0NGI3My0yNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xQCM/wF+C+B5n9K7zmBz2IISRlN+pZ+3I5PjLpQxyN92j3z6qXU8TgFCJ7F Z1ED8hn50r49k8TviiSDtmzdk6nkijtKawl8EO/rJ7P70Hwm6VZ66b+/GkArz5Sc raQdUozmMJ7WtUD0heP+tK2ueo0WbLJyZlppt3LtwBF+NkvhCJHATdg2OFwvTq3c VSqKN0Kz3HiwFjNVt5SNxhGmDDGaeQHFLf6UfBsAxXz7K5Bq5xF1q+/OpZOubaeo uoPTI5OdGZGgOqw4bZK60XPaeaxEu8ntn7eGLHvsxsLPdF3KGOALXNXKGyIyh8ls 5kbBuC3dFItrcLjv9mgDVO8QDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRXeddE I6k8n0g7IIQGnDcJhPmmMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbuZLlCkGIndELw0sw4qvvIZH5yhe28ijKCltnWuR4xcueaBBFM8S7 cAc5kUxsUpM5IX5u1+6zxaxtVoIgCcPdC+bUKMWO8UI/6eWjrzrqlDbo8CSfWKVJ trJY36ZPZdyITX3EoqVGPvdbOE3kaPFC3SHvpLszrwREg61lchtfxTwicO2B9Xyi 0L+R2S4sLnrpBh4G4OvVu+Dm6HK2WxJxDZeToacKvJPe6QJRmLMGWVPHInvDiKP8 xFxK58K2FkH/RU4D3IRA2ovu8S/j6hzJBXLtKA90gq/7fOweUE/crlfIUegJAI0V U6cKAerwftyxhq0x2WcBSZNiUMHkB5Zz -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:48 2025 by rpki-client