$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: hVXl4Jmls49cubWQl0N3Sql+5GdIlsqJMGDWrRTxP3U= Subject key identifier: 44:AC:A3:2E:81:D8:D9:25:D1:08:33:70:4E:9E:1C:F2:50:66:4A:45 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0CE4 Signing time: Sat 18 Oct 2025 18:47:31 +0000 Manifest this update: Sat 18 Oct 2025 18:47:30 +0000 Manifest next update: Sat 25 Oct 2025 18:47:30 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: R5HbwCbhGt4I5KLjzjnKlAvAAKaXgtp4Ioqq7+zl7Eg=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Oct 18 18:47:30 2025 GMT Not After : Oct 25 18:47:30 2025 GMT Subject: CN=68f3e0c3-a8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ae:93:dd:fa:1a:8d:88:62:b5:a0:8c:7e:5d: d0:68:ad:ce:1d:b4:cc:3c:ac:03:e4:91:2f:b9:62: d5:45:4b:48:98:a8:38:f3:2c:a2:d3:ae:9e:d0:83: 87:2f:80:72:7d:ff:45:d2:e6:d8:74:e5:4a:02:e9: 2d:0c:d1:ca:aa:7b:13:62:8e:35:ea:8a:9b:5a:42: 70:20:27:9e:75:b1:95:10:ab:57:c7:76:91:6e:37: a1:a1:c0:1b:ab:b3:c5:a6:be:02:bc:0f:20:18:9c: 66:74:23:41:9a:81:5b:2c:e7:80:68:73:89:6f:4b: eb:78:55:1b:4f:b4:8b:1f:a5:ff:32:46:b7:bc:2f: ea:7a:3f:d3:8e:69:2a:a4:f7:f0:d8:9f:ee:83:48: 2a:b5:36:e1:40:3b:1c:8d:42:56:14:89:fd:2c:f7: 7e:10:ba:91:ae:8b:f5:e5:b1:26:7a:55:a3:5e:a1: 2a:e1:23:c2:e9:bd:9e:10:63:0f:12:d7:90:9b:e3: c0:52:a5:c9:fd:d4:da:15:11:57:83:05:2a:d7:e8: 28:d6:15:a1:bb:fa:bf:f9:8c:e3:6f:e7:6c:cf:70: 67:81:cd:07:b8:93:02:17:aa:66:42:48:16:9a:a2: 3a:b3:2e:72:38:f0:ce:66:bd:b7:52:fa:46:cf:60: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:A3:2E:81:D8:D9:25:D1:08:33:70:4E:9E:1C:F2:50:66:4A:45 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3d:71:49:23:60:b5:18:3a:28:93:60:2f:bd:7c:be:f9:a6: f7:94:e3:cd:f1:e0:f6:e0:e4:95:fe:e1:24:22:15:0d:53:7f: 36:38:87:1d:a9:7c:2c:1e:d4:43:51:04:f9:06:7a:24:89:2d: 99:3f:1e:67:73:ff:4b:fe:47:e2:bc:65:19:b9:7d:51:bb:6b: 19:9e:fc:d7:cb:78:7a:8e:f4:1c:01:ba:cd:1e:68:d1:03:cf: c4:57:15:a5:44:b8:e1:d5:3f:15:b9:ea:ba:fb:60:88:44:e5: 11:b3:ba:7a:18:1f:5c:0c:9d:99:98:1f:5d:fb:b5:f7:e6:d3: 7c:32:63:d0:e3:0e:a6:a7:1a:dd:cc:9b:7a:70:77:57:53:c3: 01:42:75:13:6a:56:b0:cf:e2:4d:0e:ad:28:1c:e1:75:5d:ee: 94:d0:f5:7f:5e:c2:bf:48:a4:0f:c8:40:ec:05:27:cc:b1:51: ae:dd:99:87:f7:bd:f4:34:e6:d6:ea:c3:f7:ab:5f:07:08:e7: 26:e2:6a:9c:2f:f3:04:18:50:b7:e8:9e:76:6b:e1:1e:10:37: 93:9e:33:8e:e8:f1:19:92:a9:d9:a9:20:5b:ad:13:eb:8e:a1: 5e:53:bc:54:89:09:ed:cd:f4:3a:90:a9:0f:fb:14:c7:85:38: ba:63:ef:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUxMDE4MTg0NzMwWhcNMjUxMDI1MTg0NzMwWjAYMRYwFAYD VQQDEw02OGYzZTBjMy1hOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4a6T3foajYhitaCMfl3QaK3OHbTMPKwD5JEvuWLVRUtImKg48yyi066e0IOH L4Byff9F0ubYdOVKAuktDNHKqnsTYo416oqbWkJwICeedbGVEKtXx3aRbjehocAb q7PFpr4CvA8gGJxmdCNBmoFbLOeAaHOJb0vreFUbT7SLH6X/Mka3vC/qej/Tjmkq pPfw2J/ug0gqtTbhQDscjUJWFIn9LPd+ELqRrov15bEmelWjXqEq4SPC6b2eEGMP EteQm+PAUqXJ/dTaFRFXgwUq1+go1hWhu/q/+Yzjb+dsz3Bngc0HuJMCF6pmQkgW mqI6sy5yOPDOZr23UvpGz2ChRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESsoy6B 2Nkl0QgzcE6eHPJQZkpFMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYPXFJI2C1GDook2AvvXy++ab3lOPN8eD24OSV/uEkIhUNU382OIcd qXwsHtRDUQT5BnokiS2ZPx5nc/9L/kfivGUZuX1Ru2sZnvzXy3h6jvQcAbrNHmjR A8/EVxWlRLjh1T8Vueq6+2CIROURs7p6GB9cDJ2ZmB9d+7X35tN8MmPQ4w6mpxrd zJt6cHdXU8MBQnUTalawz+JNDq0oHOF1Xe6U0PV/XsK/SKQPyEDsBSfMsVGu3ZmH 9730NObW6sP3q18HCOcm4mqcL/MEGFC36J52a+EeEDeTnjOO6PEZkqnZqSBbrRPr jqFeU7xUiQntzfQ6kKkP+xTHhTi6Y+/f -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:10 2025 by rpki-client