$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft File: EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json) Hash identifier: IQAtfWmAms2xeZA+jqGXcCXqppaWgIzaK7Fu8QF1+78= Subject key identifier: C6:68:13:CE:E2:A1:53:75:A7:DB:B3:C1:7E:DE:95:F6:DB:C2:55:7A Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48 Certificate issuer: /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft Manifest number: 0209 Signing time: Sun 19 Oct 2025 04:39:57 +0000 Manifest this update: Sun 19 Oct 2025 04:39:57 +0000 Manifest next update: Sun 26 Oct 2025 04:39:57 +0000 Files and hashes: 1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: pDyZpTRqe8cGVxcHErOKILGwylh+qnr4VP1VHGf+KxA=) 2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: IC3AfPJAu9lJ+ZRFCon08xXeYgQkKIdq6UvBnBDHiaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348 Validity Not Before: Oct 19 04:39:57 2025 GMT Not After : Oct 26 04:39:57 2025 GMT Subject: CN=68f46b9d-f69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:0c:51:bc:c3:53:7e:7b:6e:48:4f:c3:f4: 30:77:fc:71:57:77:1f:de:3a:af:73:2a:6f:2c:58: 9e:84:87:46:15:1e:91:ae:75:83:f7:8d:28:6c:ec: ff:40:84:13:d0:21:50:76:43:1e:ea:21:47:77:ea: 33:51:6a:f9:41:af:04:59:77:8a:00:62:2a:14:2d: ce:12:8e:c7:8e:72:f4:85:d5:d4:16:6b:f7:cf:48: 2b:f9:90:ff:ee:0f:eb:17:9f:46:74:6a:95:1d:10: a3:2c:4a:9e:f1:d0:e1:cc:f1:b2:b7:69:3e:80:95: 13:5f:50:6e:ae:0b:4e:92:19:ef:f7:2f:c2:cb:fc: 6e:fa:a3:08:22:e4:9f:8a:75:c9:14:bc:2f:58:f0: d0:4e:a7:ce:ad:05:26:d8:05:f6:ab:71:a0:4d:1b: 98:0e:b1:a4:6a:f0:01:76:8a:7b:97:cd:0c:ae:1d: 07:43:a6:b9:16:14:44:fd:f9:31:65:bf:63:ba:d2: f4:c9:c3:49:2c:cd:87:52:d8:ae:0f:c7:0f:4a:df: 52:b6:9b:75:d4:2e:38:c4:55:fb:f4:83:b8:9a:e6: e1:75:21:5f:d6:15:72:88:f0:2b:ce:6f:0a:be:11: 55:86:de:7b:31:3c:1c:70:b7:d5:8d:da:22:eb:56: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:68:13:CE:E2:A1:53:75:A7:DB:B3:C1:7E:DE:95:F6:DB:C2:55:7A X509v3 Authority Key Identifier: keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f5:53:00:f1:dd:d8:84:db:35:c2:49:bd:ba:d3:8f:fd:37: 64:38:14:96:04:94:88:f8:fb:69:28:0c:e9:7c:20:de:7e:ef: f5:74:3a:9b:1e:de:21:4a:e9:93:d1:0e:cc:74:4a:f7:85:c3: 60:fb:f5:e7:f8:73:55:72:1e:e5:3c:24:7a:e2:3f:ea:52:3b: 83:10:7b:78:85:4a:ef:f7:b0:3a:58:07:11:01:c7:ce:9c:f3: 18:10:f2:4a:4e:f2:08:26:15:7f:9e:e7:95:28:38:99:33:bb: ea:34:b8:86:b2:55:74:f0:d4:c1:a7:97:ae:0a:c9:f3:f6:db: c8:34:e6:d6:35:68:3a:89:bf:47:19:ba:cb:5c:12:34:ad:78: 11:ba:1f:6c:92:91:95:af:02:80:28:57:a9:ec:6e:7b:67:d6: d5:8c:82:67:48:28:3f:80:82:48:8e:c8:5c:0b:99:ca:17:b6: f0:7c:cf:1e:19:6c:c8:bf:0c:91:21:43:69:09:ad:47:7d:b8: 2e:85:d2:52:74:bc:ef:4f:78:aa:58:4b:3e:1c:bf:d9:a7:9a: f0:fb:51:d0:c2:65:17:de:af:5e:cd:3f:e5:35:0f:1d:c4:e2: 2d:e8:89:e1:f9:6f:57:22:a5:fe:5a:c5:22:f4:50:44:9b:2e: 43:62:f2:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBMjYxMTAvBgNVBAUTKDExQUMzMzY3OEQxODMzM0NGRUJENDk4OTJCNTY4OTlF MjdFQTYzNDgwHhcNMjUxMDE5MDQzOTU3WhcNMjUxMDI2MDQzOTU3WjAYMRYwFAYD VQQDEw02OGY0NmI5ZC1mNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8sMUbzDU357bkhPw/Qwd/xxV3cf3jqvcypvLFiehIdGFR6RrnWD940obOz/ QIQT0CFQdkMe6iFHd+ozUWr5Qa8EWXeKAGIqFC3OEo7HjnL0hdXUFmv3z0gr+ZD/ 7g/rF59GdGqVHRCjLEqe8dDhzPGyt2k+gJUTX1BurgtOkhnv9y/Cy/xu+qMIIuSf inXJFLwvWPDQTqfOrQUm2AX2q3GgTRuYDrGkavABdop7l80Mrh0HQ6a5FhRE/fkx Zb9jutL0ycNJLM2HUtiuD8cPSt9Stpt11C44xFX79IO4mubhdSFf1hVyiPArzm8K vhFVht57MTwccLfVjdoi61bEQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZoE87i oVN1p9uzwX7elfbbwlV6MB8GA1UdIwQYMBaAFBGsM2eNGDM8/r1JiStWiZ4n6mNI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi85QjA3MjBBNDhG RUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16ei12VW1KSzFhSm5pZnFZ MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Vhd3paNDBZTXp6LXZVbUpLMWFKbmlmcVkwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REEyNi85QjA3MjBBNDhGRUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16 ei12VW1KSzFhSm5pZnFZMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv9VMA8d3YhNs1wkm9utOP/TdkOBSWBJSI+PtpKAzpfCDefu/1dDqb Ht4hSumT0Q7MdEr3hcNg+/Xn+HNVch7lPCR64j/qUjuDEHt4hUrv97A6WAcRAcfO nPMYEPJKTvIIJhV/nueVKDiZM7vqNLiGslV08NTBp5euCsnz9tvINObWNWg6ib9H GbrLXBI0rXgRuh9skpGVrwKAKFep7G57Z9bVjIJnSCg/gIJIjshcC5nKF7bwfM8e GWzIvwyRIUNpCa1HfbguhdJSdLzvT3iqWEs+HL/Zp5rw+1HQwmUX3q9ezT/lNQ8d xOIt6Inh+W9XIqX+WsUi9FBEmy5DYvLs -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:27 2025 by rpki-client