$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json) Hash identifier: ayS2nXSo3oBwICaKr3/IH48PpMV8XRFb60h8ayETCKo= Subject key identifier: 06:51:83:32:63:B5:EC:3D:1F:53:75:FC:6C:3C:2F:51:D5:CC:34:A9 Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft Manifest number: 08AF Signing time: Mon 20 Oct 2025 21:23:48 +0000 Manifest this update: Mon 20 Oct 2025 21:23:48 +0000 Manifest next update: Mon 27 Oct 2025 21:23:48 +0000 Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: SJzOqYuVNvWji9xoher6cIVb9sB+kSR7thJtRJg6qME=) 2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: 3y+P8Wjw2NbNvaqBtjPXBVu0eGWr6eeBTOCTDHgw4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Validity Not Before: Oct 20 21:23:48 2025 GMT Not After : Oct 27 21:23:48 2025 GMT Subject: CN=68f6a864-e5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:73:31:cb:64:3c:57:ed:e0:fc:de:b8:36: 9f:d6:e1:0e:07:0b:06:f1:aa:c7:f8:0a:57:c0:0e: 7d:ec:f1:a3:5d:ad:aa:6a:ac:27:16:fc:99:08:6d: 11:52:40:eb:3a:1a:64:1d:55:13:01:7c:45:f4:bf: 6e:8f:7b:1c:57:8e:64:3d:2a:38:4a:65:47:34:46: 4d:86:dd:cc:89:7e:a0:56:56:c5:22:82:6f:c6:ca: c6:31:24:8a:c3:3a:c0:70:93:b6:4f:fa:54:57:e8: b6:52:39:b5:91:17:38:86:7d:e5:39:35:22:a4:08: 7f:10:c9:f3:eb:33:6d:d7:65:d1:dc:13:6d:fa:ae: f8:09:2a:df:ca:87:36:c5:b8:b1:c9:33:c7:a1:00: ae:d5:9a:bc:65:c8:ee:0d:e8:f6:37:b2:4d:a7:99: 0d:52:16:82:79:91:e8:12:17:9b:ab:9c:f0:bf:b4: 7a:59:ff:9c:e9:55:ec:d3:a6:46:75:1f:dd:c8:0f: 43:b3:ab:0a:bc:11:89:fc:f7:5c:c8:23:0c:4d:ea: 5d:cd:0e:50:01:16:cf:0b:2a:a3:d0:ae:20:d0:4a: 59:e1:5c:67:37:e1:b0:4f:f9:8e:06:3e:63:ba:d2: e4:39:33:af:d3:1e:7f:fc:59:eb:21:c3:2f:4a:d5: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:83:32:63:B5:EC:3D:1F:53:75:FC:6C:3C:2F:51:D5:CC:34:A9 X509v3 Authority Key Identifier: keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:a4:ee:ff:7c:fe:c5:9f:df:e0:d7:91:07:78:1f:ed:a9:0b: 20:a9:b3:e7:f8:aa:a3:48:de:9c:49:c8:82:6a:c7:2c:10:b4: a2:fb:61:77:dd:19:53:f7:f7:ce:d0:6d:dd:a3:72:dc:51:42: bc:d9:bb:5d:a6:e9:ca:38:14:bc:5b:2e:39:cd:6a:ef:25:8a: 72:89:43:92:12:85:18:1f:b8:06:ad:91:3d:4e:c6:3e:69:ad: 5d:0f:52:29:81:26:04:9a:0a:5e:fe:cc:73:9d:f5:f7:c8:f6: 2b:39:7c:c2:ed:53:ae:c3:0b:4e:c9:68:20:2f:75:f7:03:5e: 4c:d0:21:69:46:18:25:42:39:1d:c5:57:5c:bd:48:bf:62:6d: 69:e5:92:03:c8:c4:44:49:bf:aa:36:c9:b4:11:9e:25:77:44: 3b:f7:82:85:f3:e3:c4:23:b8:9d:e3:de:c8:12:cf:2e:b1:6b: 63:57:0b:f6:4f:12:54:19:0f:90:12:d0:8e:ff:98:cf:7a:03: c4:2b:e1:cf:bc:a7:54:23:56:c7:cb:4f:24:cb:1e:c1:40:4b: ac:f7:f2:67:44:8e:4e:ba:d5:04:db:9a:85:71:3a:35:5a:c9: a1:49:d6:c4:3b:29:38:d3:04:78:ba:b4:75:1e:07:b9:99:9f: 37:25:0d:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEyODUxMTAvBgNVBAUTKDdBMzFENTczOTc5OEIwNjRBNjAwNzEzM0FBM0U1QjlD RDBFRUQ0NUYwHhcNMjUxMDIwMjEyMzQ4WhcNMjUxMDI3MjEyMzQ4WjAYMRYwFAYD VQQDEw02OGY2YTg2NC1lNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5FzMctkPFft4PzeuDaf1uEOBwsG8arH+ApXwA597PGjXa2qaqwnFvyZCG0R UkDrOhpkHVUTAXxF9L9uj3scV45kPSo4SmVHNEZNht3MiX6gVlbFIoJvxsrGMSSK wzrAcJO2T/pUV+i2Ujm1kRc4hn3lOTUipAh/EMnz6zNt12XR3BNt+q74CSrfyoc2 xbixyTPHoQCu1Zq8ZcjuDej2N7JNp5kNUhaCeZHoEhebq5zwv7R6Wf+c6VXs06ZG dR/dyA9Ds6sKvBGJ/PdcyCMMTepdzQ5QARbPCyqj0K4g0EpZ4VxnN+GwT/mOBj5j utLkOTOv0x5//FnrIcMvStUBkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZRgzJj tew9H1N1/Gw8L1HVzDSpMB8GA1UdIwQYMBaAFHox1XOXmLBkpgBxM6o+W5zQ7tRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTI4NS9ERDYyODlBQUM1 NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNHU21BSEV6cWo1Ym5ORHUx RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqSFZjNWVZc0dTbUFIRXpxajVibk5EdTFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTI4NS9ERDYyODlBQUM1NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNH U21BSEV6cWo1Ym5ORHUxRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXpO7/fP7Fn9/g15EHeB/tqQsgqbPn+KqjSN6cSciCascsELSi+2F3 3RlT9/fO0G3do3LcUUK82btdpunKOBS8Wy45zWrvJYpyiUOSEoUYH7gGrZE9TsY+ aa1dD1IpgSYEmgpe/sxznfX3yPYrOXzC7VOuwwtOyWggL3X3A15M0CFpRhglQjkd xVdcvUi/Ym1p5ZIDyMRESb+qNsm0EZ4ld0Q794KF8+PEI7id497IEs8usWtjVwv2 TxJUGQ+QEtCO/5jPegPEK+HPvKdUI1bHy08kyx7BQEus9/JnRI5OutUE25qFcTo1 WsmhSdbEOyk40wR4urR1Hge5mZ83JQ3Y -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:46 2025 by rpki-client