$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: ncRPUGLYKRT1S3/Uz4nMVeQqhuu3ZU9gR9rG6jYqYOQ= Subject key identifier: E9:BE:D2:7E:C8:F1:71:3C:01:10:CE:18:7C:CD:DA:B0:69:E9:48:66 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D67 Signing time: Sat 18 Oct 2025 18:42:12 +0000 Manifest this update: Sat 18 Oct 2025 18:42:11 +0000 Manifest next update: Sat 25 Oct 2025 18:42:11 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: lh/pSdd01tqCnXPY0N1BRSt68jFGejheTiuVExfPDVo=) 2: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=) 3: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3470 (0xd8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Oct 18 18:42:11 2025 GMT Not After : Oct 25 18:42:11 2025 GMT Subject: CN=68f3df83-0d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:b7:dd:6d:c0:bf:fe:65:55:45:57:b7:85: 9e:f2:f0:45:41:ad:f3:72:21:51:f1:90:72:21:27: b1:94:63:a1:9e:b3:6d:23:be:d1:3a:af:1b:01:e5: c6:28:5c:60:2d:55:16:86:75:e8:3b:16:89:44:5b: 0c:4b:34:f0:ab:f4:e2:b9:ca:66:88:a8:50:10:75: d8:10:46:34:bf:a5:c9:f4:71:19:24:5e:57:23:14: 89:30:7e:d9:6f:ea:71:82:03:03:93:c3:95:60:b4: 95:44:a4:d8:99:d1:f9:02:a0:bf:20:fd:0d:68:c1: 1c:14:85:29:5e:d8:c6:ad:b3:8a:27:b2:c0:f6:52: 7a:42:0e:39:89:19:0f:5e:28:ef:43:63:88:e4:45: a8:93:d0:9e:a8:4e:31:e1:41:53:c5:90:6a:6a:f7: 9d:41:88:4b:f6:cd:a9:9c:6b:03:71:51:53:d6:99: a8:19:d9:67:ec:a5:0c:e4:45:64:a5:07:53:35:84: 14:c7:4e:84:ab:28:e0:25:5e:ec:29:d1:d4:94:50: 1e:7f:a1:dd:31:ac:06:c9:05:65:20:95:e6:b5:61: 41:e0:81:0f:3a:1d:07:b6:29:ed:b2:94:e8:ee:83: 8b:8b:1f:10:8b:d6:84:0d:a3:04:ac:76:58:93:bf: fa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BE:D2:7E:C8:F1:71:3C:01:10:CE:18:7C:CD:DA:B0:69:E9:48:66 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4e:3d:a5:0b:d4:38:e8:ea:f4:02:0b:6f:36:56:00:ec:a9: b0:2e:ff:c8:b9:98:35:2e:e9:f9:aa:1a:bc:44:5b:87:4f:cd: 35:7e:4e:50:76:93:fd:53:e5:fd:69:f5:74:ff:57:c7:d4:31: 5f:9f:03:30:bc:4e:0d:a6:52:99:03:8f:e6:de:44:9d:b3:76: eb:81:11:84:8f:b8:cb:58:79:ae:80:a3:23:85:9f:b2:dd:91: 5e:38:e9:ea:24:8c:c6:41:69:df:92:2f:2f:63:8a:ad:49:82: 5b:bd:fe:6a:bf:35:25:18:04:e6:af:60:68:d8:6f:fb:3b:eb: 37:dd:a0:b7:77:9b:eb:a8:19:73:80:c6:a8:83:20:be:cf:95: ca:bf:88:26:0a:05:c2:b1:aa:56:25:3d:5f:53:5a:e9:de:c3: a8:d5:ad:c6:08:f9:02:e4:52:25:a7:ca:80:12:2b:06:ef:84: ce:aa:f0:fe:2b:43:50:41:fc:1a:67:74:38:5d:f3:10:42:25: 7b:c0:4d:4e:9c:13:c9:ff:4c:c7:43:14:ab:2e:67:d5:d2:90: 2c:3b:ea:84:21:da:3f:cf:ae:61:99:5f:c3:8b:fe:ab:10:09: 14:d1:9b:4b:e1:70:fb:38:06:64:c7:f4:1c:1f:55:6c:c9:f3: 0b:08:a9:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUxMDE4MTg0MjExWhcNMjUxMDI1MTg0MjExWjAYMRYwFAYD VQQDEw02OGYzZGY4My0wZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sy33W3Av/5lVUVXt4We8vBFQa3zciFR8ZByISexlGOhnrNtI77ROq8bAeXG KFxgLVUWhnXoOxaJRFsMSzTwq/TiucpmiKhQEHXYEEY0v6XJ9HEZJF5XIxSJMH7Z b+pxggMDk8OVYLSVRKTYmdH5AqC/IP0NaMEcFIUpXtjGrbOKJ7LA9lJ6Qg45iRkP XijvQ2OI5EWok9CeqE4x4UFTxZBqavedQYhL9s2pnGsDcVFT1pmoGdln7KUM5EVk pQdTNYQUx06EqyjgJV7sKdHUlFAef6HdMawGyQVlIJXmtWFB4IEPOh0HtintspTo 7oOLix8Qi9aEDaMErHZYk7/69QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm+0n7I 8XE8ARDOGHzN2rBp6UhmMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuTj2lC9Q46Or0AgtvNlYA7KmwLv/IuZg1Lun5qhq8RFuHT801fk5Q dpP9U+X9afV0/1fH1DFfnwMwvE4NplKZA4/m3kSds3brgRGEj7jLWHmugKMjhZ+y 3ZFeOOnqJIzGQWnfki8vY4qtSYJbvf5qvzUlGATmr2Bo2G/7O+s33aC3d5vrqBlz gMaogyC+z5XKv4gmCgXCsapWJT1fU1rp3sOo1a3GCPkC5FIlp8qAEisG74TOqvD+ K0NQQfwaZ3Q4XfMQQiV7wE1OnBPJ/0zHQxSrLmfV0pAsO+qEIdo/z65hmV/Di/6r EAkU0ZtL4XD7OAZkx/QcH1VsyfMLCKmG -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:31 2025 by rpki-client