$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json) Hash identifier: Th+DygzzOu6lQT5pv0U7HQUMOW18kLJjYuY79FeiAtk= Subject key identifier: 8B:EF:6D:2E:3C:29:6D:D7:44:8E:95:31:31:4A:D7:D4:A6:22:20:BF Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft Manifest number: 30 Signing time: Sun 19 Oct 2025 11:12:04 +0000 Manifest this update: Sun 19 Oct 2025 11:12:04 +0000 Manifest next update: Sun 26 Oct 2025 11:12:04 +0000 Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: jTEM7ygLizILBY+e45sK2SbwVHkY3u94FFVh4nuavaY=) 2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: aA4NuSUsD5J7xDniHCGMsk40FqbunmjtgWh3zqGnLE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Validity Not Before: Oct 19 11:12:04 2025 GMT Not After : Oct 26 11:12:04 2025 GMT Subject: CN=68f4c784-63f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:2b:14:f9:ce:e1:bb:35:64:f7:bf:ff:cb: 16:eb:09:ff:4e:16:90:ef:dd:8d:d2:b7:c9:9f:a8: dc:00:60:72:3a:dc:ec:02:d6:53:55:ce:e3:e3:6b: ae:76:39:77:c5:99:f5:ff:a1:44:c4:76:5d:c8:40: c0:36:46:fa:ec:7d:04:09:cb:f6:4b:63:46:21:c8: ad:8e:f2:e1:6e:66:a6:5a:fd:e6:24:98:0f:11:4d: 49:f7:7f:ef:bf:0a:81:11:a5:a4:15:b4:41:6d:09: f6:43:94:6a:73:6b:7e:2b:33:59:52:b2:b4:24:8a: 5e:43:c3:8e:cd:b0:f6:5e:2a:07:ce:d4:5d:5a:73: 0e:60:b2:7b:3e:b7:6e:9c:e7:e3:4f:6e:7a:8c:48: f5:17:6d:24:0b:b8:89:26:3f:6c:9b:9a:bb:53:48: 85:48:b9:ab:f6:f7:f7:c3:88:0a:72:82:50:0d:b2: 14:54:ce:e2:db:9e:a7:43:35:de:5c:ad:13:f4:ef: 7f:fc:3f:23:54:85:4d:27:43:0f:09:4e:5d:d3:f0: e0:50:8f:90:e2:89:78:5f:ba:5b:11:7e:7e:be:46: f2:a1:55:ec:b5:bf:ca:2e:7e:7c:77:4d:45:37:61: ab:ce:2d:a8:cd:3c:68:34:26:ca:cb:d9:74:94:d4: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EF:6D:2E:3C:29:6D:D7:44:8E:95:31:31:4A:D7:D4:A6:22:20:BF X509v3 Authority Key Identifier: keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a4:72:b5:73:68:ae:1d:9d:e9:be:fd:2b:e8:05:9e:fe:01: 41:11:1f:c0:1a:60:64:dc:84:88:fd:2f:5e:b7:51:26:37:7f: b1:8d:77:54:db:6e:17:58:a6:96:a4:a2:f0:00:d5:07:8e:18: 9a:f8:eb:be:d9:92:fc:82:28:73:d9:b2:d3:c7:fe:84:01:01: b2:c0:0d:f0:30:86:fb:0a:ab:2a:f4:fa:15:46:55:0a:81:a7: c2:e0:c9:c0:46:a3:1d:fd:cb:25:53:80:93:f6:b7:a9:3a:07: cf:19:d2:69:0a:f2:25:2f:c9:ad:83:a9:e0:ea:c5:54:5a:fa: 72:d8:9e:d3:18:f9:52:03:90:f1:4a:27:67:ce:f8:62:4d:8f: 66:21:27:3f:ea:4f:f1:c6:e4:db:e9:25:84:66:7a:1e:12:9c: 03:85:69:8b:8a:2f:f8:b3:23:4c:78:3c:8f:d8:cf:b9:cc:d3: b7:16:bc:36:94:85:3a:c9:63:4c:25:d8:cd:b0:07:fe:64:da: d7:d5:71:5b:e1:b2:99:c0:31:70:bf:ab:18:b4:82:3b:5f:66: fa:24:86:49:42:87:d5:7c:48:27:99:90:04:34:38:3f:1f:17: 47:97:78:3c:e3:4e:2c:a0:65:72:c0:08:95:1f:2f:47:18:40: 0b:bf:db:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVBMjI3MTBENTAy RUJFNDJDODAeFw0yNTEwMTkxMTEyMDRaFw0yNTEwMjYxMTEyMDRaMBgxFjAUBgNV BAMTDTY4ZjRjNzg0LTYzZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfISsU+c7huzVk97//yxbrCf9OFpDv3Y3St8mfqNwAYHI63OwC1lNVzuPja652 OXfFmfX/oUTEdl3IQMA2RvrsfQQJy/ZLY0YhyK2O8uFuZqZa/eYkmA8RTUn3f++/ CoERpaQVtEFtCfZDlGpza34rM1lSsrQkil5Dw47NsPZeKgfO1F1acw5gsns+t26c 5+NPbnqMSPUXbSQLuIkmP2ybmrtTSIVIuav29/fDiApyglANshRUzuLbnqdDNd5c rRP073/8PyNUhU0nQw8JTl3T8OBQj5DiiXhfulsRfn6+RvKhVey1v8oufnx3TUU3 YavOLajNPGg0JsrL2XSU1A/dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi+9tLjwp bddEjpUxMUrX1KYiIL8wHwYDVR0jBBgwFoAUEKxjBm6avEIqxfRaInENUC6+Qsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RDVCLzc5ODMzODVBNjky RTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUt4akJtNmF2RUlxeGZSYUluRU5VQzYtUXNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 RDVCLzc5ODMzODVBNjkyRTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJ cXhmUmFJbkVOVUM2LVFzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOkcrVzaK4dnem+/SvoBZ7+AUERH8AaYGTchIj9L163USY3f7GNd1Tb bhdYppakovAA1QeOGJr4677ZkvyCKHPZstPH/oQBAbLADfAwhvsKqyr0+hVGVQqB p8LgycBGox39yyVTgJP2t6k6B88Z0mkK8iUvya2DqeDqxVRa+nLYntMY+VIDkPFK J2fO+GJNj2YhJz/qT/HG5NvpJYRmeh4SnAOFaYuKL/izI0x4PI/Yz7nM07cWvDaU hTrJY0wl2M2wB/5k2tfVcVvhspnAMXC/qxi0gjtfZvokhklCh9V8SCeZkAQ0OD8f F0eXeDzjTiygZXLACJUfL0cYQAu/27A= -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:20 2025 by rpki-client