$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: OHcPwu8/kh7G6CWO0G9m3AF84C6MBLQQQn64kN8niDw= Subject key identifier: E6:61:19:80:36:1B:CF:99:FC:59:C8:38:1E:C6:68:BE:67:D3:25:2E Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 01D8 Signing time: Sun 19 Oct 2025 05:17:02 +0000 Manifest this update: Sun 19 Oct 2025 05:17:01 +0000 Manifest next update: Sun 26 Oct 2025 05:17:01 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: rcFKoLLCUHrBEorO0lPCqa+bdy86jyt/sWOC0bYmkgc=) 2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: 2AFvxOgERN6IP1ghZwOz+nDsY9qU1LoYMzKU7ME8H9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Oct 19 05:17:01 2025 GMT Not After : Oct 26 05:17:01 2025 GMT Subject: CN=68f4744d-ecc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:1b:73:31:d9:64:45:e8:2a:76:ec:6a:3c: 82:3e:5e:d4:89:b7:fc:c9:95:6a:3f:16:2f:e7:c0: ae:25:9c:d7:59:dc:a4:3d:95:2a:6c:0d:da:11:14: 1b:1a:75:87:5f:52:84:d5:61:58:f7:47:ab:9d:1c: 4a:71:a9:53:25:71:51:66:bd:42:1e:ee:ac:79:5b: 68:79:f0:a0:0b:c5:a0:02:47:fc:b2:7f:c0:52:c3: d8:7d:bb:6e:35:46:9d:37:85:45:92:09:74:19:69: e5:3e:cf:f9:c4:6e:be:1b:8c:11:5f:5c:41:c5:32: b5:0c:d1:0f:e5:be:b0:25:1d:96:44:a4:97:15:0e: cb:11:fa:e7:0d:47:f5:a4:a2:46:5f:9c:a4:92:dc: 61:e4:bc:50:8a:0d:dd:b3:14:b7:06:0b:a8:ba:bb: ea:ca:06:68:38:b2:f8:94:f3:57:42:45:7d:81:48: 35:62:35:75:dd:ca:b7:e1:80:d6:cc:9d:e7:05:10: 08:fc:c0:17:5e:90:ce:cc:9e:67:05:3c:a0:50:da: 9f:53:6b:13:bb:29:4a:de:f4:9e:23:01:32:8e:71: 19:95:0b:68:38:3c:af:30:0f:c7:84:52:90:05:8b: 08:0f:47:fb:27:51:57:6a:84:55:09:e9:eb:a1:49: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:61:19:80:36:1B:CF:99:FC:59:C8:38:1E:C6:68:BE:67:D3:25:2E X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:38:93:7a:aa:9c:e3:24:81:59:f4:02:23:77:50:f9:c3:2a: b9:b1:c9:08:e3:f6:d1:46:37:c2:c9:10:97:05:cf:cd:79:96: 4a:4f:24:67:89:e4:a1:0a:e4:29:db:ae:5e:81:34:c5:29:2e: ae:6c:f9:43:e8:96:40:b6:42:f4:29:46:2b:3a:a9:8f:59:16: 73:1b:40:e1:21:8a:b2:28:04:03:28:09:aa:96:68:e3:b9:bc: d3:9e:17:2c:60:b0:45:24:7b:c5:1a:0a:3f:59:1e:31:dc:a4: 78:0d:76:2d:a6:03:ee:8f:02:05:b8:79:d5:4c:2a:25:fc:a1: 02:97:db:34:70:18:a0:a6:85:a3:0f:1d:92:0c:d6:99:92:99: c1:22:4b:74:12:64:73:54:d4:a9:8b:49:73:17:74:98:c7:45: f5:4e:62:b4:fa:3d:88:76:9c:cf:79:62:11:39:9f:ff:16:71: 0a:a2:67:b7:2a:7a:36:7c:83:67:c6:8a:02:14:53:f0:75:81: 66:c0:64:05:84:45:ba:c4:84:5b:c8:26:5a:08:1f:30:4f:de: b3:9c:7e:1d:0e:45:f7:03:8a:cd:92:15:10:3a:47:57:eb:b8: 96:cb:4a:d5:7b:b4:58:a3:d9:02:4e:58:29:e1:9c:5e:40:f0: aa:69:fc:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUxMDE5MDUxNzAxWhcNMjUxMDI2MDUxNzAxWjAYMRYwFAYD VQQDEw02OGY0NzQ0ZC1lY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufUbczHZZEXoKnbsajyCPl7Uibf8yZVqPxYv58CuJZzXWdykPZUqbA3aERQb GnWHX1KE1WFY90ernRxKcalTJXFRZr1CHu6seVtoefCgC8WgAkf8sn/AUsPYfbtu NUadN4VFkgl0GWnlPs/5xG6+G4wRX1xBxTK1DNEP5b6wJR2WRKSXFQ7LEfrnDUf1 pKJGX5ykktxh5LxQig3dsxS3BguourvqygZoOLL4lPNXQkV9gUg1YjV13cq34YDW zJ3nBRAI/MAXXpDOzJ5nBTygUNqfU2sTuylK3vSeIwEyjnEZlQtoODyvMA/HhFKQ BYsID0f7J1FXaoRVCenroUl0QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZhGYA2 G8+Z/FnIOB7GaL5n0yUuMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiOJN6qpzjJIFZ9AIjd1D5wyq5sckI4/bRRjfCyRCXBc/NeZZKTyRn ieShCuQp265egTTFKS6ubPlD6JZAtkL0KUYrOqmPWRZzG0DhIYqyKAQDKAmqlmjj ubzTnhcsYLBFJHvFGgo/WR4x3KR4DXYtpgPujwIFuHnVTCol/KECl9s0cBigpoWj Dx2SDNaZkpnBIkt0EmRzVNSpi0lzF3SYx0X1TmK0+j2IdpzPeWIROZ//FnEKome3 Kno2fINnxooCFFPwdYFmwGQFhEW6xIRbyCZaCB8wT96znH4dDkX3A4rNkhUQOkdX 67iWy0rVe7RYo9kCTlgp4ZxeQPCqafzs -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:45 2025 by rpki-client