$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: KMmqR1//5P+jk0AK+Ss+OTSnz4HHYBKx/QRUnErGvP4= Subject key identifier: F2:46:7E:55:73:49:E4:97:CF:1D:DA:16:60:B5:B7:B8:B0:C0:E9:1B Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 1268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 125C Signing time: Sat 18 Oct 2025 17:37:18 +0000 Manifest this update: Sat 18 Oct 2025 17:37:17 +0000 Manifest next update: Sat 25 Oct 2025 17:37:17 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: IhhH0O9cRe+nyTX3ttxDxbPnuYkWAk+yB8eltPUvnW8=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4712 (0x1268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: Oct 18 17:37:17 2025 GMT Not After : Oct 25 17:37:17 2025 GMT Subject: CN=68f3d04e-aa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:b4:0e:2d:95:cc:70:86:7e:77:ae:a9:32: 3c:17:9d:39:3a:ba:57:e3:41:29:8d:e9:7f:f1:65: 04:d2:58:d3:b9:be:92:99:f8:58:f4:c5:14:d1:e0: f2:07:35:e3:e1:86:66:dd:e2:de:f3:14:81:62:f2: c5:c3:37:79:9d:87:ec:a7:a2:64:8e:0a:0b:e6:9c: 29:0e:79:36:6d:af:13:bf:1b:94:dd:aa:83:7a:d9: 09:d8:1f:3e:1b:33:1c:5e:20:b8:d9:7c:ec:32:37: 76:ed:a8:c9:1c:b3:bd:59:92:ca:69:e4:69:7e:bc: 62:11:45:91:9f:07:df:16:b8:af:bf:a5:c9:82:39: fc:bb:dd:a9:9b:58:c7:f6:ff:53:97:58:f5:16:b7: cb:35:d6:7e:51:41:77:c3:af:49:8d:1b:68:01:10: 63:08:1c:42:fa:d7:48:05:b1:8c:cd:67:e2:9b:0e: ee:21:67:dd:f4:45:9f:8a:41:00:43:89:b0:3b:43: b2:7b:ed:6a:8b:0b:11:3a:9e:e2:ba:d1:1b:0e:61: 46:24:ef:3a:75:ae:72:0d:8e:f2:87:60:47:1e:79: 2c:56:e8:f4:d6:b2:08:1f:55:e4:ae:32:0b:f9:bc: e2:14:18:9f:77:f4:6e:fb:fb:7a:e2:58:c1:ed:7e: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:7E:55:73:49:E4:97:CF:1D:DA:16:60:B5:B7:B8:B0:C0:E9:1B X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:de:5a:04:69:57:62:53:fe:d6:d0:f7:e6:79:6d:c2:44:82: 01:43:9a:3a:1b:58:4f:3e:42:b8:4e:7b:1a:db:5a:67:24:6c: 39:ae:8f:8f:5c:96:96:08:8d:82:a3:90:52:c5:68:be:48:15: 53:67:87:9d:fb:7c:3c:e2:25:05:f4:1b:a2:d6:56:de:f7:21: 66:69:e9:91:bc:64:65:5f:85:8d:eb:c8:5d:a8:7c:d5:87:8d: b0:0f:7c:47:a5:e9:85:1e:c6:17:1a:f6:b6:dd:06:8d:03:fe: 5e:5a:dd:f9:fd:c0:e8:b6:94:5b:b0:e0:ec:82:96:10:82:8e: bd:86:3a:80:be:3a:69:5d:07:e0:67:67:36:40:63:62:db:44: fb:14:b5:c8:ca:0d:a8:65:e7:a6:6c:2c:1b:27:c0:67:ad:c3: 4c:27:2e:72:4d:34:de:be:11:94:5c:60:2e:a5:5d:be:d0:3c: e7:fb:f1:e4:97:2b:25:0f:b5:81:a2:f6:ed:0b:ab:fb:0e:67: ec:e7:aa:3b:eb:b7:62:ff:77:16:db:a6:b8:7f:0a:97:6d:69: 20:fe:87:96:90:d0:61:7c:2d:fc:48:de:4b:f9:df:f4:ee:9b: a7:dd:83:d9:87:f5:8c:c3:34:1b:af:47:2e:66:90:7d:19:5e: bb:b2:6e:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjUxMDE4MTczNzE3WhcNMjUxMDI1MTczNzE3WjAYMRYwFAYD VQQDEw02OGYzZDA0ZS1hYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lq0Di2VzHCGfneuqTI8F505OrpX40Epjel/8WUE0ljTub6SmfhY9MUU0eDy BzXj4YZm3eLe8xSBYvLFwzd5nYfsp6JkjgoL5pwpDnk2ba8TvxuU3aqDetkJ2B8+ GzMcXiC42XzsMjd27ajJHLO9WZLKaeRpfrxiEUWRnwffFrivv6XJgjn8u92pm1jH 9v9Tl1j1FrfLNdZ+UUF3w69JjRtoARBjCBxC+tdIBbGMzWfimw7uIWfd9EWfikEA Q4mwO0Oye+1qiwsROp7iutEbDmFGJO86da5yDY7yh2BHHnksVuj01rIIH1XkrjIL +bziFBifd/Ru+/t64ljB7X72uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJGflVz SeSXzx3aFmC1t7iwwOkbMB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3loEaVdiU/7W0PfmeW3CRIIBQ5o6G1hPPkK4Tnsa21pnJGw5ro+P XJaWCI2Co5BSxWi+SBVTZ4ed+3w84iUF9Bui1lbe9yFmaemRvGRlX4WN68hdqHzV h42wD3xHpemFHsYXGva23QaNA/5eWt35/cDotpRbsODsgpYQgo69hjqAvjppXQfg Z2c2QGNi20T7FLXIyg2oZeembCwbJ8BnrcNMJy5yTTTevhGUXGAupV2+0Dzn+/Hk lyslD7WBovbtC6v7Dmfs56o767di/3cW26a4fwqXbWkg/oeWkNBhfC38SN5L+d/0 7pun3YPZh/WMwzQbr0cuZpB9GV67sm6G -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:21 2025 by rpki-client