$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: ivI6BEHzlLPvETPd62xCyC/2tfT9gyImx2TW7/5k0Bg= Subject key identifier: 2A:35:F7:CA:1E:5F:3B:28:06:19:31:A9:C7:EA:BB:C7:82:A3:45:8F Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 074E Signing time: Mon 20 Oct 2025 21:24:06 +0000 Manifest this update: Mon 20 Oct 2025 21:24:05 +0000 Manifest next update: Mon 27 Oct 2025 21:24:05 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: vdJ20uFX3MMAzSqYQhrn3g8ItLxaxs2rzm+frRZrjo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Oct 20 21:24:05 2025 GMT Not After : Oct 27 21:24:05 2025 GMT Subject: CN=68f6a876-99c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:d0:6b:97:0e:6e:eb:37:b9:34:16:87:90: 7a:2d:ae:26:0c:02:35:36:cc:12:74:55:8f:e3:62: 95:46:0f:d2:d5:ad:57:5f:b1:7f:cc:cd:43:19:c0: d2:15:aa:e1:45:98:ce:c4:29:93:16:3f:4b:a6:65: 28:ef:a9:68:3d:68:92:3d:ef:a2:aa:3f:ee:04:40: 31:86:b7:6b:ce:f7:bc:b3:7f:c8:af:fc:71:3f:fc: d9:f9:fc:d0:d6:35:7e:d8:91:a5:94:81:9c:ad:f5: d1:8a:8e:9a:aa:2e:7f:81:94:8a:88:f6:14:5c:07: 17:1f:e5:02:d0:c9:83:66:37:35:76:d2:d1:ef:91: 97:b7:75:25:d6:00:48:70:88:95:ff:2d:be:a4:97: 7a:21:b7:98:dc:90:40:7c:30:e1:ce:d0:9a:91:67: 41:10:14:d5:18:93:d4:cc:08:2f:18:5c:41:85:91: d9:86:40:ca:0c:40:fb:2b:c8:03:cd:b9:b5:4a:d0: 81:b0:23:40:b7:c4:fd:21:98:39:38:35:0b:b3:ab: 7e:b1:53:b4:af:35:19:94:70:c6:98:6f:6b:bb:ae: 45:08:fd:30:16:e0:20:69:50:f5:12:5c:5f:ff:43: 42:76:8d:c8:bf:80:2e:06:be:8f:d4:32:68:e2:36: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:35:F7:CA:1E:5F:3B:28:06:19:31:A9:C7:EA:BB:C7:82:A3:45:8F X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:97:bf:d6:1b:de:b4:50:b8:ac:1a:df:35:b8:66:17:82:8c: 50:7c:d3:20:10:15:bb:16:ec:e1:4b:5d:74:e6:94:0c:59:88: 9e:40:ff:4c:5e:b4:be:ce:cb:10:c0:26:77:62:a8:9f:a5:6a: 32:5d:44:ea:3b:64:72:8b:f6:7a:52:e7:bc:20:04:cf:70:b9: 60:c9:e3:0a:6b:c6:7e:16:40:7f:cf:87:05:47:82:7f:e6:f6: b1:fe:17:96:46:bf:e3:f4:7a:11:6c:53:f5:5e:6e:d9:07:d7: 0e:c2:de:e6:cb:63:a6:d7:7e:4a:0d:0f:ad:0a:e2:e4:6b:de: 23:d1:d1:15:06:e4:39:da:e3:1f:c0:b0:e3:7b:ec:93:4b:10: c3:d9:85:c0:45:4d:5e:0d:f3:16:97:c7:c8:42:82:f4:3c:ef: ae:e8:86:27:86:a4:8a:bd:94:13:00:69:cc:6e:17:5e:0b:37: b9:d3:48:08:1b:d7:89:a8:8e:ee:09:bb:2b:62:de:20:73:82: d8:02:a0:20:d7:44:0a:42:96:a9:20:cd:02:c5:e9:6a:22:fe: aa:82:29:d2:8f:c4:82:13:6c:a0:ae:60:73:52:74:c1:6e:1d: 53:8f:94:eb:d3:17:10:f6:37:ea:21:1a:18:d0:69:a0:b9:4a: 8a:0c:3d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUxMDIwMjEyNDA1WhcNMjUxMDI3MjEyNDA1WjAYMRYwFAYD VQQDEw02OGY2YTg3Ni05OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAjQa5cObus3uTQWh5B6La4mDAI1NswSdFWP42KVRg/S1a1XX7F/zM1DGcDS FarhRZjOxCmTFj9LpmUo76loPWiSPe+iqj/uBEAxhrdrzve8s3/Ir/xxP/zZ+fzQ 1jV+2JGllIGcrfXRio6aqi5/gZSKiPYUXAcXH+UC0MmDZjc1dtLR75GXt3Ul1gBI cIiV/y2+pJd6IbeY3JBAfDDhztCakWdBEBTVGJPUzAgvGFxBhZHZhkDKDED7K8gD zbm1StCBsCNAt8T9IZg5ODULs6t+sVO0rzUZlHDGmG9ru65FCP0wFuAgaVD1Elxf /0NCdo3Iv4AuBr6P1DJo4jYhaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo198oe XzsoBhkxqcfqu8eCo0WPMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjl7/WG960ULisGt81uGYXgoxQfNMgEBW7FuzhS1105pQMWYieQP9M XrS+zssQwCZ3YqifpWoyXUTqO2Ryi/Z6Uue8IATPcLlgyeMKa8Z+FkB/z4cFR4J/ 5vax/heWRr/j9HoRbFP1Xm7ZB9cOwt7my2Om135KDQ+tCuLka94j0dEVBuQ52uMf wLDje+yTSxDD2YXARU1eDfMWl8fIQoL0PO+u6IYnhqSKvZQTAGnMbhdeCze500gI G9eJqI7uCbsrYt4gc4LYAqAg10QKQpapIM0CxelqIv6qginSj8SCE2ygrmBzUnTB bh1Tj5Tr0xcQ9jfqIRoY0GmguUqKDD3U -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:40 2025 by rpki-client